# Burp Suite

  • Description: Intercepting proxy to replay, inject, scan and fuzz HTTP requests (a limited free version exists)
  • Version tested: Professional v2022.9.6
  • Review date: 20/11/2022
  • Website
  • Rawsec Inventory

# Adding CA certificate to Linux system

Adding CA certificate to web browsers is quite well documented. But what if you want to use other HTTP tools on a Linux system with Burp Suite?

We are not going to be able to intercept HTTPS with Burp Suite without importing Burp CA certificate.

In ArchLinux Certificates authorities can be added like to system truststore that:

$ wget
$ sudo trust anchor cert

Let's verify the CA was imported:

$ trust list | head -5
    type: certificate
    label: PortSwigger CA
    trust: anchor
    category: authority