Burp Suite User Forum

Login to post

How do I make embedded chromium browser only request traffic I tell it to?

TrustedComputer | Last updated: Sep 14, 2020 06:55PM UTC

Whenever I fire up the embedded browser in Kali Linux, chromium contaminates the HTTP history with useless traffic trying to phone home to Google for various updates/checks/account/sync whatever. And I don't mean javascript in other sites or anything like that. I can just let it sit there after launching it, not doing anything at all and it just goes to google over and over and over again, seemingly on a schedule. Is there any way to shut that down? Maybe by hacking its settings? And if so, shouldn't that be how the embedded browser gets packaged up? It's not intended to be used as a general purpose browser so this traffic is not just pointless, it makes it difficult to find the actual traffic I'm proxying.

TrustedComputer | Last updated: Sep 14, 2020 06:57PM UTC

https://www.google.com/async/newtab_promos https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0 https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard https://www.google.com/gen_204?ei=PLtfX43OA9jT-wSsg7aICQ&cad=i&id=19020254&ogprm=up&ct=16&prid=243 https://www.gstatic.com/og/_/js/k=og.qtm.en_US.wG1P6TzAdbA.O/rt=j/m=q_d,qmd,qcwid,qmutsd,qapid,qald/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhbr,qhch,qhga,qhid,qhin,qhlo,qhmn,qhpc,qhpr,qhsf,qhtb,qhtt/d=1/ed=1/rs=AA2YrTtD2FuOlWEWIw-vcl4NRrgUTPfDkg https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.lqqPe8Y-aUs.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_7ZBgzLryveB2qtYoSqeBQ4P-TYA/cb=gapi.loaded_0 https://update.googleapis.com/service/update2/json?cup2key=10:284057002&cup2hreq=608e7a42a1a738d8f1ab442a4ff2633f265547be2d5fbe70601a3dc70a11d437 http://redirector.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/release2/chrome_component/AJN3c2PWZYAVSL4IWdF4iLU_9.16.0/AIynFilCAYzTDTzbLgy266k http://redirector.gvt1.com/edgedl/release2/chrome_component/AMWnCgLehkaIXyretIoQPs8_20200906.331321959/AJWa1IMc6hYSvQFPJ_zhRIs https://update.googleapis.com/service/update2/json https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/release2/chrome_component/Td-8O83GA8UJxovyEaf78w_6116/AK6KUdIOLZmDVTSJNa5CAJM https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOGViQUFXdDREZnFJMzVwNUFDeFhvS01RQQ/1.0.0.5_llkgjffcdpffmhiakmfcdcblohccpfmo.crx https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/release2/chrome_component/AK1iWi_7Lw4fI6zbsqfZntE_42/ANbVUV2k9OgWow4-xfE5eWI https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/release2/chrome_component/AKVmYP26GmLIIY0w3XIoh5Q_2020.9.14.1/AJEhSDjq8XcovZlDyhr-I64 https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/release2/chrome_component/HJ-l9XlNL0OScIzfbXONRQ_2102/AInQ5PtKx49xLBJIoSTl9cY https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/release2/chrome_component/MRClgjpBN7fV73xUKZYhBg_2020.8.30.1141/OX3MHyapnylV8S5udIqdqQ https://update.googleapis.com/service/update2/json http://redirector.gvt1.com/edgedl/release2/APsb1jESj822mCcrfQWWPY0_3/AJwfq9FdNce-tcqe5_d1l9Q https://update.googleapis.com/service/update2/json

TrustedComputer | Last updated: Sep 14, 2020 07:10PM UTC

I tried changing some of these settings in Chromium, but everything goes back to the default if I shut BurpSuite down and bring it back up again. Burp Suite Community Edition v2020.9.1 Build 3995, installed via apt.

TrustedComputer | Last updated: Sep 14, 2020 10:36PM UTC

I found the concept of scope (dropping out of scope requests) and how I can use that in the future, but I would still like to know if there could be a way to stop it at the source.

Michelle, PortSwigger Agent | Last updated: Sep 15, 2020 09:04AM UTC

We have a development story to reduce noise from browsers in the proxy. We'll update this thread when we have made some progress.

You need to Log in to post a reply. Or register here, for free.