hacktricks/ios-pentesting/burp-configuration-for-ios.md

44 lines
1.7 KiB
Markdown
Raw Normal View History

2021-05-13 18:33:03 +00:00
# Burp Suite Configuration for iOS
2021-05-13 17:53:07 +00:00
## Burp Cert Installation in physical iOS
2021-05-13 18:33:03 +00:00
You can install [**Burp Mobile Assistant**](https://portswigger.net/burp/documentation/desktop/tools/mobile-assistant/installing) **for help installing the Burp Certificate, configure the proxy and perform SSL Pinning.**
Or you can manually follow the next steps:
2021-05-13 18:06:06 +00:00
* Configure **Burp** as the iPhone **proxy in** _**Settings**_ **-->** _**Wifi**_ **-->** _**Click the network**_ **-->** _**Proxy**_
* Access `http://burp` and download the certificate
* Access _**Setting**_ --> _**Profile Downloaded**_ and **Install** it \(you will be asked your code\)
2021-05-13 17:53:07 +00:00
## Burp Cert Installation in Simulator
* **Export Burp Certificate**
In _Proxy_ --> _Options_ --> _Export CA certificate_ --> _Certificate in DER format_
![](../.gitbook/assets/image%20%28457%29.png)
* **Drag and Drop** the certificate inside the Emulator
* **Inside the emulator** go to _Settings_ --> _General_ --> _Profile_ --> _PortSwigger CA_, and **verify the certificate**
* **Inside the emulator** go to _Settings_ --> _General_ --> _About_ --> _Certificate Trust Settings_, and **enable PortSwigger CA**
![](../.gitbook/assets/image%20%28461%29.png)
**Congrats, you have successfully configured the Burp CA Certificate in the iOS simulator**
{% hint style="info" %}
**The iOS simulator will use the proxy configurations of the MacOS.**
{% endhint %}
2021-05-13 17:53:07 +00:00
### MacOS Proxy Configuration
Steps to configure Burp as proxy:
* Go to _System Preferences_ --> _Network_ --> _Advanced_
* In _Proxies_ tab mark _Web Proxy \(HTTP\)_ and _Secure Web Proxy \(HTTPS\)_
* In both options configure _127.0.0.1:8080_
![](../.gitbook/assets/image%20%28462%29.png)
* Click on _**Ok**_ and the in _**Apply**_