Using Burp Suite to Test a Proxy-Aware Thick Client Application - Port Swigger

Summary: PortSwigger published a tutorial on configuring a proxy-aware thick client application for testing with Burp Suite, noting that thick clients do most processing client-side and connect to the server only sporadically. The article explains that some thick clients respect system proxy settings, so configuring the system to use Burp Suite as proxy and browsing the application's functionality will route HTTP/S traffic through Burp, though a restart was sometimes needed for the settings to take effect.
Why it matters: Thick clients often don't support HTTP proxies or offer an easy way to configure one, which is why Burp's invisible proxying exists to let non-proxy-aware clients connect directly to a Proxy listener - a gap a security leader should know about before assuming thick-client traffic is covered by standard proxy-based testing.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026