Installing Burp Suite Mobile Assistant
Burp Suite Mobile Assistant is a tool to facilitate testing of iOS apps with Burp Suite. It supports the following key functions:
- It can modify the system-wide proxy settings of iOS devices so that HTTP(S) traffic can be easily redirected to a running instance of Burp.
- It can attempt to circumvent SSL certificate pinning in selected apps, allowing Burp Suite to break their HTTPS connections and intercept, inspect and modify all traffic.
Note: Burp Suite Mobile Assistant needs to be installed onto a jailbroken device due to the nature of its features. Jailbreaks usually install the popular package manager Cydia which can be used to install Mobile Assistant. Advanced users may prefer to obtain Mobile Assistant directly. They can do this by pointing a web browser to Burp Suite's in-browser interface, e.g.
http://[burp-host-ip]:8080/mobileassistant.deb. Although Cydia is not strictly necessary, Mobile Assistant depends on Cydia Substrate.
This tutorial demonstrates how to install Mobile Assistant using Cydia.
Launch Burp Suite on a system that is network-accessible from the jailbroken device, and ensure the proxy listener is bound to an accessible network interface and port.
The next step is to add the instance of Burp Suite to Cydia's package sources.
On the jailbroken device, open Cydia.
Navigate to the Sources tab.
Tap the Edit button located at the top right-hand corner.
Tap the Add button located at the top left-hand corner.
Populate the APT URL prompt with the IP address (or hostname) and port number of your Burp Proxy listener, using HTTP as the protocol, for example,
If Cydia is not able to connect, verify that your Burp Proxy listener is configured to listen on the relevant network interface, and that connections are not being blocked by your computer's host firewall or by device segregation in your wireless network.
Tap the Done button to finish.
Burp Suite should now appear as an individual source. Tap on the "Burp Suite Pro" option.
Install Mobile Assistant from the new Cydia package source in the normal way. Either search for Mobile Assistant or browse the new source's packages.
Then tap "Confirm". When the download is complete, click "Restart Springboard".
The Mobile Assistant icon should now appear on your device.
You can now begin to route traffic via Burp Suite.