Install Burp CA Certificate on Magisk Rooted Device

BurpCAMagiskRooted.md

Magisk Module

• Use the modified Magisk module to install the certificate in both the user and the system store.

git clone https://github.com/Magisk-Modules-Repo/movecert.git

• Apply cp patch
• Magisk-Modules-Repo/movecert#16

git fetch origin pull/16/head
git checkout -b pullrequest FETCH_HEAD

• Zip

zip -rv /tmp/movecert20.zip *

• Place on device

adb push /tmp/movecert20.zip /sdcard/Download/movecert20.zip

• Open Magisk and navigate to Modules
• Use Install from storage to install movecert20.zip

Magisk DenyList Chrome

• Chrome should use the User store

• This requires Zygisk to be enabled within Magisk, through its Settings

• Magisk -> Settings -> Enforce Denylist

• Magisk -> Settings -> Configure Denylist

  • Options -> Show system apps
  • Find and check Chrome

Install Burp Certificate

• Settings -> Security & Lock Screen -> Encryption & credentials -> Install a certificate

• CA certificate

• Install the Burp certificate, make sure its extension is cer or crt

• Reboot device

• Check if the certificate is in both stores

• Settings -> Security & Lock Screen -> Encryption & credentials -> Trusted credentials

  • User and System should contain PortSwigger certificate