-
Notifications
You must be signed in to change notification settings - Fork 0
Installing the Burp Agent on your remote server
To prepare for the installation of Burp, follow these steps:
-
Install the Burp CLI on your server.
-
Create a new folder named
burp
on your server. -
Copy the following files into the
burp
folder: -
Rename the
.env.example
file to.env
. -
Configure the
.env
file:- Set the
BURP_SECRET
variable to an argon2id-hashed password. You can generate the hash by using theburp hash [text]
command, where[text]
is your desired password. Remember to keep a non-hashed version of the password for later use duringburp login
. - Set the
BURP_SIGNATURE
variable to a long and randomized value. You can generate a random signature using the CLI command:burp eval "[burp: Random(256)]"
. Save this signature for later use duringburp login
.
- Set the
Once you have configured everything, you can proceed with installing the agent:
-
Run the following command:
burp here
Note: Depending on your Docker setup, you may need to use
sudo
for certain operations, such as updating or reinstalling, especially if Docker uses root privileges. Theburp here
command will build the agent locally and start the containers in Docker. -
Make sure to expose the port of Burp to the public, as you will need to connect to it from your development environment.
Please refer to the visual reference for a better understanding of the installation process.
Visual Reference
To get started with Burp, we recommend reading the following in chronological:
- Installing the Burp Agent on your remote server
- Setting up Burp CLI on your development machine
- Creating your first Burp.toml
- Deploying your first application
You may want to read a specific part of configuring a Burp file:
You can also read the list of available functions of Burp: