Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Intercept server request/client response

Shuban | Last updated: Jul 05, 2015 06:27AM UTC

Im running a game server and the masterserver request bunch of informations so it can show my server in a server list/browser this is the request from the server (wireshark) GET / HTTP/1.1 host: XX.XX.XX.XX:4545 (my game server ip) Connection: close and thats what my web server send back HTTP/1.1 200 OK Content-Type: application/json Access-Control-Allow-Origin: * Server: GameServer5405.4 Content-Length: 281 Connection: close {"bunch":"of","json":stuff,"etc":"bla","bla":"bla","version":"465"} etc. I can see these in wireshark but Id like to intercept them in burp suite too, I have no idea how to do that tho

Liam, PortSwigger Agent | Last updated: Jul 06, 2015 08:17AM UTC

Hi Thanks for your message. You need to route your game's traffic through Burp. There are two approaches you could take to solve this issue; 1. If your game is proxy-aware then you can configure your game to proxy through Burp like you would a standard web application. 2. If your game is non-proxy-aware, Burp's support for invisible proxying allows clients to connect directly to a Proxy listener. You can read more about this in our support documentation - http://portswigger.net/burp/help/proxy_options_invisible.html. Please let us know if you need any further assistance.

Burp User | Last updated: Jul 07, 2015 12:26PM UTC

Hello, I already did this step (with proxycap) I can see some traffic (client request/server response) but what Im interested in is server request/client response. Thanks

Liam, PortSwigger Agent | Last updated: Jul 07, 2015 01:28PM UTC

Hi Shuban You need to make the master server connect to your game server via Burp. This should be possible by setting Burp up on your server as an invisible proxy, running on the port that the game server normally runs on.

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.