Getting Started

Installation & Setup

Get Burp Suite up and running: download, install, configure your browser proxy, and install the Burp CA certificate to intercept HTTPS traffic.

Download Burp Suite

Official Download

Download the latest version from portswigger.net/burp/releases. Available for Windows, macOS, and Linux.

Editions

Community

Free

  • Proxy, Repeater, Decoder
  • Intruder (throttled)
  • Basic Scanner
  • Extensions (limited)

Professional

$449/yr

  • Full Intruder speed
  • Automated Scanner
  • Collaborator
  • All extensions
  • Project files

Enterprise

Custom

  • CI/CD integration
  • Scheduled scans
  • Team management
  • API access
  • DAST platform

Installation

Linux (Kali / apt)

bash
1sudo apt update && sudo apt install burpsuite

Kali Linux includes both Community and Professional editions.

macOS (Homebrew)

bash
1brew install --cask burp-suite

Windows ( executable )

Download the .exe installer from the official site and run it.

bash
1burpsuite_pro.exe

Portable (any OS)

Download the JAR file and run with Java:

bash
1java -jar burpsuite_pro.jar

Initial Configuration

After installation, you need to configure your browser to route traffic through Burp and trust its CA certificate for HTTPS interception.

Step 1: Start Burp Suite

Launch Burp Suite from your applications menu or command line. It starts with the default temporary project.

Step 2: Configure Browser Proxy

bash
1# Firefox: Settings > Network Settings > Manual Proxy Configuration
2HTTP Proxy: 127.0.0.1
3Port: 8080
4Check "Also use this proxy for HTTPS"
5
6# Or use FoxyProxy extension for quick switching

Step 3: Install Burp CA Certificate

To intercept HTTPS, your browser must trust Burp's CA. Burp generates a self-signed certificate that you must install:

bash
1# Method 1: Navigate to http://burpsuite
2# Click "CA Certificate" to download
3# Firefox: Settings > Privacy > Certificates > View Certificates > Import
4# Check "Trust this CA to identify websites"
5
6# Method 2: Use the pre-generated cert file
7# 1. Go to http://burpsuite/cert
8# 2. Download the certificate
9# 3. Import into browser/OS certificate store

Tip

Use the FoxyProxy browser extension to quickly switch between Burp proxy (127.0.0.1:8080) and direct connection without changing system settings each time.

Verify Your Setup

Test that Burp is properly intercepting traffic:

1. Enable Intercept

In the Proxy tab, ensure "Intercept is on" is highlighted in red.

2. Browse to an HTTP site

Visit http://example.com. The request should appear in Burp's Intercept tab, waiting for your action.

3. Forward the request

Click "Forward" to let the request reach the server. The page loads in your browser.

4. Check HTTP History

Switch to the "HTTP history" tab to see all captured requests, including the one you just forwarded.

Tip

If you see the request in Intercept, Burp is working correctly! You are now ready to start testing.

Common Issues

1

Cannot intercept HTTPS

CA certificate not installed or not trusted. Install cert in browser and restart browser.

2

No requests appear in Proxy

Browser proxy not configured. Check proxy settings point to 127.0.0.1:8080.

3

Burp not starting on port 8080

Port already in use. Change proxy port in User Options > Connections.

4

SSLHandshake errors

Target uses certificate pinning. You may need to disable pinning or use Burps SSL pass-through.