PiratProxies

Automation and testing

How to use a proxy with Burp Suite

Burp Suite is the standard tool for testing the security of web applications you are authorised to test. It can send its own traffic on through an upstream proxy.

Which proxy to use

Any plan with the country you need. Use a sticky session, so a test session stays on one IP address.

What to enter

A PiratProxies plan gives you four things: a host, a port, a username and a password. These are the values for Residential; the username and password are on your plan page.

Hostresi.piratproxies.com
HTTP port8080
SOCKS5 port1080
UsernameUSERNAME
Passwordfrom your plan page

The country and the session are chosen in the username, not in a separate setting. The generator on your plan page writes the username for you, and Targeting and sessions explains each part.

Steps

  1. Open Settings, then Network, then Connections.
  2. Under upstream proxy servers, add a rule with destination host *.
  3. Enter the proxy host resi.piratproxies.com and port 8080, set the authentication type to Basic, and enter your username and password.
  4. Request an IP-check address through Burp to confirm.

Menu names can differ a little between versions of Burp Suite. The four values to enter are always the same.

Rotating or sticky

If Burp Suite is acting as one visitor through several steps, use a sticky session so the IP address stays the same throughout. If each run is independent, leave the session out and every run starts from a new address.

A sticky username looks like this:

USERNAME-country-us-time-600-session-a1b2c3d4

If it does not work

  • The destination host decides which sites use the rule. * means all of them; a single domain limits the proxy to that target.
  • A 407 error means the username or password was not accepted. Copy both again from your plan page, and check that nothing added a space or cut the username short.
  • If the IP address is in the wrong country, look at the username: the country code is part of it. More fixes.

Questions

Which PiratProxies proxy should I use with Burp Suite?

Any plan with the country you need. Use a sticky session, so a test session stays on one IP address.

Burp Suite is a product of its own makers. PiratProxies is not affiliated with it; the name is used here only to say what this guide is about. Use it within the rules of the sites you work with and our acceptable use policy.