Kali Burp Suite proxy basics cheat sheet
Inspect requests from a local training application with Burp’s built-in browser.
Burp Suite Community or Professional desktop. Proxy inspection works without an automated scanner.
Updated · Kali Linux · 7 min read
| Console path | What it does |
|---|---|
Proxy → Intercept → Open Browser | Launch the preconfigured test browser |
Proxy → Intercept → Intercept is off | Allow ordinary browsing while recording |
Proxy → HTTP history | Inspect a lab request and response |
Proxy → Intercept → Intercept is on → Forward | Observe a paused request, then release it |
Walkthrough
Start Burp with a temporary project and default settings. Use a local training application or a target you are explicitly authorized to test; keep personal browsing outside Burp’s browser.
Step 1: Launch the preconfigured test browser
Proxy → Intercept → Open Browser
Open your approved training application in Burp’s browser. This browser is already configured to use Burp’s proxy, avoiding changes to your everyday browser’s proxy and certificate settings.
Step 2: Allow ordinary browsing while recording
Proxy → Intercept → Intercept is off
Keep interception off while navigating the lab so requests are not paused. HTTP history still records traffic that passes through the proxy.
Step 3: Inspect a lab request and response
Proxy → HTTP history
Select a request to your training app and compare the method, path, status and response headers. Apply filters to focus on the approved target and avoid collecting unrelated traffic.
Step 4: Observe a paused request, then release it
Proxy → Intercept → Intercept is on → Forward
Trigger one harmless page request in the lab browser. Inspect it and click Forward without editing. Turn interception off when finished so later requests do not remain unexpectedly paused.