I am monitoring a site where there is an applet. To use it, there is the download and the execution of a jnlp file. I would like to monitor the requests made from and to that file through Burp. I read the documentation here https://portswigger.net/burp/documentation/desktop/tools/proxy/options/invisible but I am not getting which files I have to modify in order to make burp works as a proxy for these requests.

  • There isn't going to be a general answer - JNLP files just tell the client device what it needs to grab to run some Java app. The Java app can make any network requests it wants, without going through the browser (sssuming Burp is set as a browser proxy), hence without going through the proxy. You would need to see if the app has proxy settings, or if it obeys Java configuration, and set a proxy for that level. Note that it may also not use HTTP, in which case Burp may not be the right tool. – Matthew Dec 21 '18 at 13:44
  • The app may obey your system proxy settings, so it's worth trying that. There's also a tutorial about using Burp as an invisible proxy – PortSwigger Dec 21 '18 at 14:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.