Andrew Long
1 min readJul 14, 2020

--

That’s because you can proxy traffic without doing so for HTTPS (443), but you won’t be able to capture that data. Effectively, you would only capture HTTP traffic. To capture and decode HTTPS traffic, you’ll have to setup the port forwarding as described in the article. Make sure to follow the bit about importing the certificate — your browser will not trust Burp without doing so. If you need help, feel free to ask specific questions regarding setup.

--

--

Andrew Long
Andrew Long

Written by Andrew Long

Director of Product Security @ Evinova. Avid security researcher, dedicated father, and nerdy analog electronics collector.

Responses (1)