Installation & Setup
Get Burp Suite up and running: download, install, configure your browser proxy, and install the Burp CA certificate to intercept HTTPS traffic.
Download Burp Suite
Official Download
Download the latest version from portswigger.net/burp/releases. Available for Windows, macOS, and Linux.
Editions
Community
Free
- Proxy, Repeater, Decoder
- Intruder (throttled)
- Basic Scanner
- Extensions (limited)
Professional
$449/yr
- Full Intruder speed
- Automated Scanner
- Collaborator
- All extensions
- Project files
Enterprise
Custom
- CI/CD integration
- Scheduled scans
- Team management
- API access
- DAST platform
Installation
Linux (Kali / apt)
1sudo apt update && sudo apt install burpsuite
Kali Linux includes both Community and Professional editions.
macOS (Homebrew)
1brew install --cask burp-suite
Windows ( executable )
Download the .exe installer from the official site and run it.
1burpsuite_pro.exe
Portable (any OS)
Download the JAR file and run with Java:
1java -jar burpsuite_pro.jar
Initial Configuration
After installation, you need to configure your browser to route traffic through Burp and trust its CA certificate for HTTPS interception.
Step 1: Start Burp Suite
Launch Burp Suite from your applications menu or command line. It starts with the default temporary project.
Step 2: Configure Browser Proxy
1# Firefox: Settings > Network Settings > Manual Proxy Configuration2HTTP Proxy: 127.0.0.13Port: 80804Check "Also use this proxy for HTTPS"56# Or use FoxyProxy extension for quick switching
Step 3: Install Burp CA Certificate
To intercept HTTPS, your browser must trust Burp's CA. Burp generates a self-signed certificate that you must install:
1# Method 1: Navigate to http://burpsuite2# Click "CA Certificate" to download3# Firefox: Settings > Privacy > Certificates > View Certificates > Import4# Check "Trust this CA to identify websites"56# Method 2: Use the pre-generated cert file7# 1. Go to http://burpsuite/cert8# 2. Download the certificate9# 3. Import into browser/OS certificate store
Tip
Verify Your Setup
Test that Burp is properly intercepting traffic:
1. Enable Intercept
In the Proxy tab, ensure "Intercept is on" is highlighted in red.
2. Browse to an HTTP site
Visit http://example.com. The request should appear in Burp's Intercept tab, waiting for your action.
3. Forward the request
Click "Forward" to let the request reach the server. The page loads in your browser.
4. Check HTTP History
Switch to the "HTTP history" tab to see all captured requests, including the one you just forwarded.
Tip
Common Issues
Cannot intercept HTTPS
CA certificate not installed or not trusted. Install cert in browser and restart browser.
No requests appear in Proxy
Browser proxy not configured. Check proxy settings point to 127.0.0.1:8080.
Burp not starting on port 8080
Port already in use. Change proxy port in User Options > Connections.
SSLHandshake errors
Target uses certificate pinning. You may need to disable pinning or use Burps SSL pass-through.