Connecting android/emulator to your Burp suite via OpenVPN
This is a simple blog for connecting the Genymotion and the Burpsuite for Android Pentesing using OpenVPN.
I use Genymotion (Google Pixel 3 — Android Version 9) and Kali Linux
Let’s start the configuration.
Make sure you save this two scripts.
GithubNow, on your machine type
ifconfig
and copy the IP of your machine.Now
sudo chmod +x *.sh
and run./install.sh
If you’ve previously installed the OpenVPN, uninstall it by selecting the option 3
Else, just run ./install.sh
and enter the IP copied in Step 2
Then Press Enter button till you reach to enter the name. Enter the name of the file you want to create. Here i have named it test.
The file will be saved in /root
directory. So, you may want to copy it to your present work directory just run sudo cp /root/test.ovpn
.
Now, run ./route.sh
script to route the traffic.
Now, you have to transfer that file to your android emulator. You can use python server or drag and drop.
Now, Open BurpSuite and Go to Proxy Settings.
Click on Specific Address and select the OpenVPN IP.
Now, You will receive your traffic from the android/emulator.
Now, Install OpenVPN from Play store in your android/emulator and import the test.ovpn file which was created before and turn on the OpenVPN.
That’s All. Happy Hacking. Let me know if you face any issues.
Subscribe to my newsletter
Read articles from Bhuwan Bhetwal directly inside your inbox. Subscribe to the newsletter, and don't miss out.
Written by
Bhuwan Bhetwal
Bhuwan Bhetwal
Hi, I’m a Penetration Tester. My job is to intentionally make applications do things they’re not supposed to—finding flaws and exploiting them to ensure they’re secure. I specialize in Web, API, Android, and iOS security.