Installing Burp's CA certificate in Safari - Port Swigger

Summary: PortSwigger's guide describes installing Burp's CA certificate in Safari by visiting http://burpsuite while Burp runs, clicking CA Certificate to download the unique certificate, then dragging it into the Certificates folder in macOS Keychain Access. The user double-clicks the PortSwigger CA entry, sets Trust to Always trust, enters a password if required, and restarts Safari so HTTPS pages load without security warnings.
Why it matters: The procedure ends with a certificate marked Always trust in the macOS keychain, which means every future connection Safari makes can be intercepted by whoever holds the matching key - so the same steps that enable manual testing also widen what a compromised proxy or stolen key can see.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026