Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Burp proxy does not receive any HTTPS response after sending out request

Yong | Last updated: Feb 24, 2017 05:55AM UTC

Set up Burp proxy. Proxy HTTP traffic without any problem. But for any HTTPS traffic, I see Burp proxy send out request but there is no response. Wondering what would be the cause of that.

Liam, PortSwigger Agent | Last updated: Feb 24, 2017 10:36AM UTC

Hi Yong Thanks for your message. Have you installed the Burp CA Certificate in your browser? - https://support.portswigger.net/customer/portal/articles/1783075-installing-burp-s-ca-certificate-in-your-browser

Burp User | Last updated: Feb 24, 2017 06:23PM UTC

Hi Liam, Yes, I had imported Burp CA cert into trusted CA store before I submitted this quesiton. The behavior is like this: If I go to msn.com, everything works fine since there is no HTTPS. All the connections are HTTP. If I go to http://www.google.com, I receive response in Burp as ______________________________________________________________ HTTP/1.1 302 Found Location: https://www.google.com/?gws_rd=ssl Cache-Control: private Content-Type: text/html; charset=UTF-8 Date: Fri, 24 Feb 2017 17:58:09 GMT Server: gws Content-Length: 231 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Connection: close <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"> <TITLE>302 Moved</TITLE></HEAD><BODY> <H1>302 Moved</H1> The document has moved <A HREF="https://www.google.com/?gws_rd=ssl">here</A>. </BODY></HTML> _________________________________________________________ I think I should see a new connection to https://www.google.com. But there is no new connection to https://www.google.com. If I type https://www.google.com on my browser, I see response in Burp as below, but nothing showed up on my browser _________________________________________________________ Server: gws X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Accept-Ranges: none Vary: Accept-Encoding Connection: close <?xml version="1.0"?><SearchSuggestion version="2.0" xmlns="http://opensearch.org/searchsuggest2"><Query>htt</Query><Section title="Google Suggestions"><Item><Text>https // www.google.com</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>http</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>https //openload.com /pair</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>http //192.168.l.l</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>http status codes</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>https everywhere</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>http //fxnetworks/activate</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>http //192.168.l.254</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>http error 500</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item><Item><Text>http response codes</Text><Image source="/images/cleardot.gif" alt="f" width="1" height="1" align="middle"/></Item></Section></SearchSuggestion>

Liam, PortSwigger Agent | Last updated: Feb 27, 2017 10:18AM UTC

Hi Yong Which browser are you using? Have you tried removing the certificate and reinstalling it?

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.