Java Environment Prerequisites

Burp Suite relies on the Java Runtime Environment to function. Ensure a compatible Java Development Kit (JDK) or JRE is installed on the local machine. If Java is not present, it must be installed before proceeding.

Configure the system environment variables to include the Java path:

• Create or update the JAVA_HOME variable, pointing to the installation directory (e.g., C:\DevTools\Java\jdk-11).
• Append the bin directory to the system PATH variable (e.g., %JAVA_HOME%\bin).
• Optionally, set the CLASSPATH to include current directory and library paths.

Verify the configuration by executing the following command in a terminal:

java -version
# Expected output example:
# java version "11.0.x" 20xx-xx-xx LTS
# Java(TM) SE Runtime Environment (build 11.0.x+xx-LTS)
# Java HotSpot(TM) 64-Bit Server VM (build 11.0.x+xx-LTS, mixed mode)

Application Installation

Download the Burp Suite platform-independent installer or the Windows-specific executable from the official PortSwigger portal. The software is distributed in Community, Professional, and Enterprise editions. For initial setup and learning, the Community edition provides essential functionality.

Run the downloaded installer and follow the setup wizard to complete the installation process.

Proxy Configuration and Traffic Interception

The core functionality of Burp Suite revolves around its ability to act as a man-in-the-middle proxy, allowing for packet inspection and manipulation.

1. Configure the Proxy Listener

   Launch the application and navigate to the Proxy tab. By default, the local listener binds to 127.0.0.1 on port 8080. Ensure the listener is active and running.

2. Browser Proxy Setup

   Configure the target browser to route traffic through Burp Suite:

   • Firefox: Navigate to Settings > Network Settings > Manual proxy configuration. Enter 127.0.0.1 for the HTTP Proxy and 8080 for the Port.
   • Chrome/Edge: Access System Settings > Open your computer's proxy settings. Configure the LAN settings to use the proxy server 127.0.0.1:8080.
3. Capturing Traffic

   In the Proxy Intercept tab, ensure the Intercept is on button is toggled. This state causes the tool to pause incoming requests, allowing the user to view the raw headers and body content before the data reaches the server.

4. Processing Requests

   Once a request is intercepted, it can be analyzed or modified. To send the request to the destination server, click the Forward button. To terminate the request, use Drop. All processed traffic is logged in the HTTP History tab for retrospective analysis.