Configuring a Windows Mobile Device to Work With Burp

To test web applications using a Windows Mobile device you need to configure your Burp Proxy listener to accept connections on all network interfaces, and then connect both your device and your computer to the same wireless network. If you do not have an existing wireless network that is suitable, you can set up an ad-hoc wireless network.

Configure the Burp Proxy listener

MobileSetUp_1

With both the device and computer on the same nextwork or having configured the ad-hoc network the next step is to add a new proxy listener in Burp.

First go to the “Proxy” tab and then select the “Options” tab.

In the “Proxy Listeners" section, click the “Add” button.

 
MobileSetUp_2

In the "Binding" tab, in the “Bind to port:” box, enter a port number that is not currently in use, e.g. “8082”.

Then select the “All interfaces” option, and click "OK".

Note: You could alternatively edit the existing default proxy listener to listen on all interfaces. However, using different listeners for desktop and mobile devices enables you to filter these in the Proxy history view.

 
MobileSetUp_3

The Proxy listener should now be configured and running.

 

Configure your device to use the proxy

MobileSetUp_Windows_1

In your Windows Mobile device, go to the “Notifications” menu and then “ALL SETTINGS”.

 
MobileSetUp_Windows_2

Select the “Wi-Fi” option from the menu.

 
MobileSetUp_Windows_3

If your device is not already connected to the wireless network you are using, then ensure the Wi-Fi button is set to "On", find your network in the list, and tap to connect to it. Enter your network password if prompted.

 
MobileSetUp_Windows_4

Bring up the context menu by holding down on the required network..

Select the “Edit” option.

 
MobileSetUp_Windows_5

Ensure that the “Proxy” switch is set to “On”.

Then enter the IP of the computer running Burp in to the “Proxy hostname”.

Enter the port number configured in the “Proxy Listeners” section earlier, in this example “8082”.

Tap the tick button.

 

Test the configuration

MobileSetUp_Apple_5

In Burp, go to the "Proxy Intercept" tab, and ensure that intercept is “on” (if the button says “Intercept is off" then click it to toggle the interception status).

 
MobileSetUp_Windows_6

Open the browser on your Windows Mobile device and go to an HTTP web page (you can visit an HTTPS web page when you have installed Burp's CA certificate in your Windows Mobile device.)

 
MobileSetUp_Windows_7

The request should be intercepted in Burp.

Note: This article is based on Lumia Cyan running on a Nokia Lumia 530 mobile device.