Flash Sale:75% Off Hosting + Free DomainEnds in13h47m14sView Plans
Hostvento logoHostvento
Get Started

Install Burp Suite on Windows

Install Burp Suite Community Edition, set up the proxy in your browser and trust its certificate.

Windows Hosting2 min read23 steps15 screenshots
Note: Use Burp Suite only on sites and apps that you own or are allowed to test.

System requirements

  1. Operating system: Windows 7 or later (64-bit).
  2. RAM: at least 4 GB (8 GB is better).
  3. Disk space: at least 1 GB.
  4. Java: the Windows installer of Burp includes its own Java runtime, so you do not need to install Java first.

Download

Open the official PortSwigger page for Burp Suite and download the Community Edition for Windows.

The Burp Suite download page

Install

  1. Open the installer file in your Downloads folder.
    The Burp Suite installer
  2. The setup wizard opens. Click Next.
    The setup wizard
  3. Accept the license agreement.
  4. Choose the destination folder.
    The destination folder
  5. Choose the Start Menu folder for the shortcuts.
    The Start Menu folder
  6. Click Next to install. This can take a few minutes.
  7. Click Finish.
    Burp Suite is installed

Start Burp Suite

Open it from the Start menu. Choose Temporary project and Use Burp defaults, then click Start Burp.

The Burp Suite Community Edition start screen
Starting Burp

Configure the browser proxy

Burp listens on 127.0.0.1 port 8080. Set your browser (for example Firefox) to use that proxy:

  1. In Firefox, open Settings, search for Network Settings and click Settings.
    Network settings in the browser
  2. Choose Manual proxy configuration. Set HTTP Proxy to 127.0.0.1 and Port to 8080, and tick Also use this proxy for HTTPS.
    Configuring the proxy

Install Burp's CA certificate

To intercept HTTPS traffic without errors, the browser must trust the Burp certificate.

  1. With the proxy on, open http://burpsuite in the browser and click CA Certificate to download it.
    Downloading the CA certificate
  2. In Firefox, open Settings, Privacy & Security, and click View Certificates.
    The certificate settings in Firefox
    The Certificate Manager
  3. Click Import, choose the Burp certificate and tick Trust this CA to identify websites.
    Importing the certificate

Use Burp Suite

The Burp Suite dashboard
  1. Proxy. Intercept and change the traffic between your browser and the target.
  2. Scanner. Looks for vulnerabilities automatically (Professional edition).
  3. Intruder. Sends automated requests (limited in Community).
  4. Repeater. Change a request by hand and send it again.
  5. Sequencer. Checks how random session tokens are.
  6. Decoder. Encodes and decodes data.
  7. Comparer. Compares two sets of data.

Troubleshooting

  • Check your browser's proxy settings.
  • Some firewall or antivirus programs block Burp Suite. Allow it.
  • Remember to turn off the proxy in the browser when you finish.

Quick recap

  • Download the installer and run it.
  • Set the browser proxy to 127.0.0.1:8080.
  • Import the Burp CA certificate to inspect HTTPS.