The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Export Burp dynamic generated certs to disk using python extension

GUILHERME | Last updated: May 11, 2023 04:11PM UTC

I am trying to export the auto generated certs from Burp to disk, by developing a Python extension. I found some similar messages from other folks in past, the goal is same, be able to use burp and WireShark for SSL decryption at same time. Since we need to cert/private key to use Wireshark decryption and Burp don't expose this info, I'm trying to find an object that contains the cert info to be able to dump it to disk. Fiddler (different tool) save each dynamic cert generated in Windows Certificate Store, so much easier to export and use in Wireshark. The question is, is there any example of callbacks that return object that have certificate info including private key? If so which one ? I found a great article with some working samples from blog, trying to explore all objects by enumerating properties, but not able to find cert stuff so far.

Hannah, PortSwigger Agent | Last updated: May 12, 2023 09:18AM UTC

Hi Are you trying to put WireShark between your browser and Burp or between Burp and the server?

GUILHERME | Last updated: May 16, 2023 02:33AM UTC

Burp is configured as system proxy and working perfectly. In addition I would like to capture a parallel wireshark and be able to use the certs that burp generate to decrypt the traffic. Using Fiddler it saves the dynamic certs to Windows Store, so its easy to export and use in WireShark. Since BURP its not saving in Windows Store and I don't have access to it, I'm trying to write a burp extension to save certs to disk, but not able to find an object that contains the certs. Thanks

Hannah, PortSwigger Agent | Last updated: May 17, 2023 03:52PM UTC