Why localhost and BurpSuite are not best friends.

Rajanagori
1 min readJun 3, 2021

Well, this fight starts when the proxy is not acting between both of them.

Joke’s apart, most of the time when we are solving CTF challenges or debug the application which is running on our host machine, we always need to intercept the localhost request or need to manipulate the request in order to get the crafted response, But

Burpsuite will not intercept the localhost request by default because of the browser we are using.

Such disliked creatures!!!!

But if you want to forcefully intercept the localhost request that you are trying to manipulate the request to get the crafted response, then you need to follow some steps mentioned below.

⚠️But I’m using firefox as this browser is made for pentesters 😛

  1. Open Fully Burpsuite Configured Firefox.
  2. Type “about:config” in the URL
  3. now type “network.proxy.allow_hijacking_localhost” and set this flag from false to true.
  4. And….. restart the firefox

Now, what next?

Nothing just do your work and the burp suite will intercept your request coming from localhost.

Do CLAP if you find this blog useful.

Contact me :

LinkedIn 😄:https://www.linkedin.com/in/raja-nagori/

Twitter 😄: https://twitter.com/RajaNagori7

--

--