Burpsuite Proxy Setup for Android

Burpsuite Initialization

First open burpsuite and follow the below mentioned steps to make the burpsuite proxy available to the emulated device.

Proxy Configuration in Burpsuite

Next add your machines IP address and bind it to port 8080.

After performing the above process successfully, you should see your machine’s IP listed in the proxy listeners tab like this:

Downloading CA Certificate

Next open a browser, connect to burp proxy [ Check this article to learn about how to connect to burp proxy: https://null-byte.wonderhowto.com/how-to/use-burp-foxyproxy-easily-switch-between-proxy-settings-0196630/ ] and download the burpsuite certificate to intercept secure requests.

Go to the following address in the browser that is connected to burp proxy: http://burp/ and download the certificate.

Installing the Certificate on Android

After downloading the certificate, open the downloaded folder keep it adjacent to the android emulator, then drag and drop the certificate to the android device.

Rename cacert.der to cacert.pem, since android accepts only pem extension.

Now go to the android settings and search for Install Certificates and click it.

Now press the install certificates:

Now locate the cacert.pem file which will be available in

Internal Storage → Download and click on it.

Setting up Proxy on Android Emulator

After the successful installation of certificate, we have to setup the proxy to make the requests intercept by burpsuite.

To do that follow the below steps:

I am using android studio to and avd to emulate the android device. Based on the emulator you are using the steps may defer. Kindly refer the preferred steps for setting up proxy according to your emulator.

First click on the three dots on the right panel.

Now in the popped up window setup the manual proxy configuration to you machines IP address and click apply.

Verifying the Proxy Setup

Now to check whether the proxy is working, go to burpsuite and set Intercept on.

Now in the android device google for something.

you can see that the request is not loading. Now check burpsuite.

You can see that the request in intercepted.