Burp Suite User Forum

Create new post

Unable to connect www.google.com or www.microsoft.com

Yoga | Last updated: Jul 18, 2016 05:51PM UTC

Hi, My system IPv4 address : 196.196.9.197 and default gateway : 196.196.0.1 Broswer : Firefox Manual Proxy Setting 196.196.9.197 Port : 8080 In Burp Suite In tab Proxy > Options > Added Interface 196.196.9.197:80 Intercept says like this No proxy listeners are currently running I am unable to get www.google.com and www.microsoft.com I have not installed CA certificate ... is that because of which i am unable to open ?

PortSwigger Agent | Last updated: Jul 19, 2016 08:17AM UTC

Your main problem is that there are no Burp Proxy listeners running, without which you won't be able to connect to any website. Go to your Proxy listener settings and try to start the default listener. If it won't start, something else may be using the port, and you can edit the listener to use a different port and configure your browser to use the same port. Once you have the listener working, you'll need to install the CA certificate in your browser to access sites like Google, because they use HSTS.

Burp User | Last updated: Jul 19, 2016 02:04PM UTC

Thanks a lot ... it worked as you said I am unable to download CA certificate from your site ... http://burp/cert is that site is down or do you have mirror site to download CA certificate

PortSwigger Agent | Last updated: Jul 19, 2016 02:49PM UTC

Your browser must be using Burp as its proxy for the http://burp link to work. Configure your browser so that requests are going through Burp, and then try the link again in the same browser.

Burp User | Last updated: Jul 20, 2016 04:15AM UTC

Hi Dafydd, Even after changing back from proxy... this is the one i get This site can’t be reached burp’s server DNS address could not be found. On behalf can you download and send it to my email id : yogananda.muthaiah@gmail.com or else is there a way to upload in dropbox or google drive ?

PortSwigger Agent | Last updated: Jul 20, 2016 08:10AM UTC

The CA certificate is generated per installation of Burp and is unique to you. Here's an alternative way: 1. Set up your browser to proxy through Burp. 2. Visit an HTTPS site that doesn't use HSTS, and click through any browser warnings. 3. In your browser, view the SSL certificate being used, go to the PortSwigger CA certificate at the root of the certificate tree, and export that.

Burp User | Last updated: Jul 20, 2016 03:50PM UTC

Hi After your remedy , i am unable to open http://burp and able to see CA certificate in right hand corner When i click CA certificate for download , i get a pop up box to show for download with cacert.dem with 0 bytes and which will not have any information in it. what would be the issues to this ?

PortSwigger Agent | Last updated: Jul 20, 2016 04:19PM UTC

What browser are you using? If you can get to http://burp and click the "CA certificate" link, you should receive a file called cacert.der that is a few hundred bytes long. Perhaps try another browser if it still isn't working.

Burp User | Last updated: Jul 20, 2016 04:30PM UTC

Hey Dafydd your too quick to give me a reply.. are you sleeping over night i am using firefox .. let me try in IE and get back to you

Burp User | Last updated: Jul 20, 2016 04:40PM UTC

Hi Tried even through IE and have a same issues with cacert.dem with downloaded 0bytes "Invalid Public key security object file " This file is invalid for use in the following security certificate "

PortSwigger Agent | Last updated: Jul 20, 2016 04:44PM UTC

Please can you try these steps instead, then: 1. Set up your browser to proxy through Burp. 2. Visit an HTTPS site that doesn't use HSTS, and click through any browser warnings. 3. In your browser, view the SSL certificate being used, go to the PortSwigger CA certificate at the root of the certificate tree, and export that. These steps involve using your browser's cert processing to export the cert, not the download link.

Burp User | Last updated: Jul 20, 2016 05:04PM UTC

give me the HTTPS site which i can try and download CA certificate as per your steps to reproduce

Burp User | Last updated: Jul 20, 2016 06:03PM UTC

Hey Dafydd kindly send me a CA certificate to my email id : yogananda.muthaiah@gmail.com I am waiting for this to get download form last 1 week which is not happening through

Burp User | Last updated: Jul 21, 2016 05:09AM UTC

Hi, Kindly get me cacert.der to my email or load in any google drive or storage place to download

PortSwigger Agent | Last updated: Jul 21, 2016 07:51AM UTC

Please re-read our previous replies before posting any futher duplicate messages. As we said, the Burp CA cert is generated per-installation. You are the only person who has your certificate, so we can't email it to you. To do step 2 in our instructions, visit any HTTPS site that your browser will let you connect to via Burp. Try your company website, or your favourite band, whatever.

Burp User | Last updated: Jul 21, 2016 04:35PM UTC

Hi, I know that i am struggling to download CA certificate from last 3 days and still making your approach by going through https://google.co.in and still not able to download certificate give your email id and will forward you all the screenshot on what steps been followed.

Burp User | Last updated: Jul 21, 2016 05:01PM UTC

How many times should i raise an concern which is not able to get with information while downloading Do you give support to solve this issues or not ?

PortSwigger Agent | Last updated: Jul 22, 2016 08:21AM UTC

Google uses HSTS so that won't work until you have you already installed the Burp CA certificate. Find another HTTPS site that your browser lets you connect to. There are plenty out there to choose from. With your browser configured to use Burp, go to an HTTPS site that doesn't use HSTS. Then export the root CA cert from your browser. It will be called "PortSwigger CA".

Burp User | Last updated: Jul 30, 2016 06:35PM UTC

I am the only who is not getting CA Certificate . I am using Fire fox and Java version:java version "1.8.0_73" and burp version : 1.6 beta i went to https://www.teslamotors.com and went to certificates where i dont see any root CA cert or PortSwigger CA What shall i do Mr Dafydd ?

PortSwigger Agent | Last updated: Aug 03, 2016 09:03PM UTC

In your browser, click on the padlock image in the address bar, and view the certificates there. Then look up the cert chain for the root certificate.

Burp User | Last updated: Feb 16, 2018 03:24AM UTC

I had the same problem but I was using Burp on Windows 10. I tried it on Linux and it works.

PortSwigger Agent | Last updated: Feb 16, 2018 10:54AM UTC

Hi Franciny, Can you please try following these instructions: - https://support.portswigger.net/customer/portal/articles/1783055-configuring-your-browser-to-work-with-burp If you hit a problem, please let us know where this happens and what symptoms you see.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.