burp suite 이나 OWASP ZAP 등 web proxy 도구를 사용할때 팁
취약점 분석이나 모의해킹 할때 브라우저를 열고 Proxy 셋팅에 IP 입력하기가 번거로울때
아래와 같은 방법을 사용중이다
OS Windows 10 이상
TIP : registry 변경 스크립트 실행 -> 브라우저 재실행
burp suite 127.0.0.1:8080 으로 실행시 / burp_start.bat
@echo off
%SystemRoot%\system32\reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /t REG_DWORD /d 00000001 /f
%SystemRoot%\system32\reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /t REG_SZ /d 127.0.0.1:8080 /f
taskkill /F /IM iexplore.exe /T
start iexplore
timeout 2
taskkill /F /IM iexplore.exe /T
ZAP 127.0.0.1:9090 으로 실행시 / zap_start.bat
@echo off
%SystemRoot%\system32\reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /t REG_DWORD /d 00000001 /f
%SystemRoot%\system32\reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /t REG_SZ /d 127.0.0.1:9090 /f
taskkill /F /IM iexplore.exe /T
start iexplore
timeout 2
taskkill /F /IM iexplore.exe /T
Registry restore (브라우저 기본 셋팅으로 복귀) / restore.bat
@echo off
%SystemRoot%\system32\reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /t REG_DWORD /d 00000000 /f
%SystemRoot%\system32\reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /t REG_SZ /f
taskkill /F /IM iexplore.exe /T
start iexplore
timeout 2
taskkill /F /IM iexplore.exe /T
TIP 더보기
'SYSTEM/TIP' 카테고리의 글 목록
정보 지식 공유와 나눔으로 상생의 가치 실현해요 ^^
rootkey.tistory.com
Burp Suite Download
https://portswigger.net/burp/communitydownload
Download Burp Suite Community Edition - PortSwigger
Burp Suite Community Edition is PortSwigger's essential manual toolkit for learning about web security testing. Free download.
portswigger.net
ZAP Proxy Download
https://www.zaproxy.org/download/
OWASP ZAP – Download
As with all software we strongly recommend that ZAP is only installed and used on operating systems and JREs that are fully patched and actively maintained.
www.zaproxy.org




