Hands-On Application Penetration Testing with Burp Suite

Setting up proxy listeners

To use Burp as a tool for application penetration testing, it must be set as a Man in the Middle (MITM) proxy. An MITM proxy sits in between a client and a server, and allows the user to tamper or drop messages passing through. In its simplest form, Burp Suite is an MITM proxy for HTTP(S) traffic.

By default, Burp will listen on port 8080 on the localhost IP of 127.0.0.1. This can easily be changed, however, to an arbitrary free port on any IP address available on the system. To do this, follow these steps:

1. Navigate to the Proxy | Options tab.
2. Under Proxy Listeners, confirm that the Running checkbox is ticked in ...