Intercepting HTTP traffic with Burp Proxy - Port Swigger
Summary: PortSwigger's tutorial walks through using Burp Proxy to intercept HTTP requests and responses between Burp's browser and a target server, using a live, deliberately vulnerable website. It covers turning interception on, forwarding held requests until a page loads, turning interception off, and reviewing all traffic afterward in the Proxy > HTTP history tab.
What's compelling: The tool holds a browser's request before it reaches the server, letting an analyst study or modify it first - the same position an attacker occupies when intercepting traffic between a user and a site.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026