How do I setup burpsuite to test android apps using an emulator?
I'm trying to setup burpsuite to test my company's android app using android studio's emulator. You used to be able to use an app called ProxyDroid and FS Installer, but ProxyDroid is no longer available on Google Play.
Does anybody know a solution to use burpsuite as a proxy for testing android apps in an emulator?
Hi Zack, we have an article on our support center on how to use Burp Suites to test Android applications. https://support.portswigger.net/customer/portal/articles/1841101-configuring-an-android-device-to-work-with-burp
This solution only works for testing on a browser inside Android. I'd like to be able to configure Burpsuite to be a Proxy for testing apps. Whenever I open an app with Burpsuite configured for Android, I get an error that says the connection has timed out. Is there a solution out there that's specific for testing android apps?
Does this Android application send and receive HTTP requests? as this is what Burp Suite uses to map and test your application for vulnerabilities.
Have you tried configuring the proxy settings for your emulated Android environment within your emulator?
Yes, it does send and receive HTTP requests. I've configured the proxy settings following one of the guides on portswigger support. The only thing I can think of that might be causing issues, when I installed the burp certificate, it installed onto the user section instead of the system section on the android emulator. Would that make a big difference?
I can still view requests from the emulator's browser, but I can't view them from inside our app or any other app.
Yes, we advise installing your certificate as close to the root level of the system as possible as opposed to user-level configuration. So it would be worth applying that to your emulator and trying again.
Do you have a link for the guide you used to configure your proxy settings?