Configuring an iOS device to work with Burp Suite Professional - Port Swigger
Summary: PortSwigger's documentation describes how to route an iOS device's traffic through Burp Suite Professional by setting the proxy to listen on all interfaces, configuring the Wi-Fi proxy on the device, and installing the PortSwigger CA certificate so HTTPS traffic can be intercepted. The test is that a page loads without security warnings and the matching requests appear in Burp Suite Professional.
Why it matters: The same steps that let a tester read an app's HTTPS traffic - a proxy on all interfaces and a trusted CA certificate on the device - are what an attacker needs to intercept a mobile user's sessions, and the certificate stays trusted until someone removes it.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026