Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Integrating Burp and Wireshark

Robin | Last updated: Jan 30, 2015 09:50PM UTC

I'd like to be able to set up Wireshark so it can decrypt HTTPS traffic which is passing through Burp. I know I can export the CA used by Burp but that doesn't help when a per server certificate is in use. Is there a way to get hold of the per server certificate so I can import it into Wireshark?

PortSwigger Agent | Last updated: Feb 02, 2015 10:29AM UTC

There isn't currently a way to do this, sorry. The per-host certificates are generated on-the-fly for each host that is accessed, and they aren't stored anywhere. But we could potentially add a feature where you could export the certificate and key that is being used for a given host in a given session of Burp. It would probably be available in DER or PKCS#12 keystore format as for the VA cert. Would that do what you need?

Burp User | Last updated: Mar 23, 2015 06:00PM UTC

Exporting the CA is already a feature. I have been using it for years. That feature would probably help the OP. My issue is that keytool cannot read the file the is exported, nothing can except binwalk. They keystore is completely useless to me.

Burp User | Last updated: Sep 06, 2016 02:09PM UTC