skills.rest
ViktorBarzin
ViktorBarzinCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

bluestacks-burp-interception

Intercept HTTPS traffic from Android apps in BlueStacks using Burp Suite.

5|Updated Feb 7, 2021
Search Tags:#proxy#adb#https#security-testing#ssl-pinning#burp#bluestacks
One-click install
npx skills add https://github.com/ViktorBarzin/infra --skill bluestacks-burp-interception
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: bluestacks-burp-interception
Source: https://github.com/ViktorBarzin/infra/tree/main/.claude/skills/bluestacks-burp-interception
Command: npx skills add https://github.com/ViktorBarzin/infra --skill bluestacks-burp-interception

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Intercept Android app HTTPS traffic running in BlueStacks to analyze API calls, especially when the app ignores the proxy or uses SSL pinning that blocks interception.

Core Features & Use Cases

  • BlueStacks + Burp Suite integration on macOS for traffic interception.
  • Enables ADB-based proxy configuration and inspection of API calls.
  • Provides steps to bypass SSL pinning using Zygisk SSL Unpinning and Magisk trustusercerts module for system CA installation.
  • Guides you through configuring the Burp CA certificate in the device trust store and validating interception.

Quick Start

Connect ADB to BlueStacks and configure Burp as the system proxy to begin intercepting traffic.

Frequently Asked Questions about bluestacks-burp-interception

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I intercept HTTPS traffic from Android apps running in BlueStacks using Burp Suite?▼

To intercept HTTPS traffic from BlueStacks apps using Burp Suite, connect ADB to the emulator and configure Burp as the system proxy to capture and analyze API calls.

Why does an Android app ignore my proxy settings in BlueStacks?▼

Apps may ignore proxy settings due to custom networking implementations or SSL pinning, which requires injecting tools like Zygisk SSL Unpinning via Magisk to force traffic interception.

How do I bypass SSL pinning on BlueStacks to analyze API calls?▼

Bypass SSL pinning on BlueStacks by installing the Magisk trustusercerts module for system CA installation and applying Zygisk SSL Unpinning to disable certificate validation.

Can I configure Burp Suite as a proxy on BlueStacks running macOS?▼

Yes, BlueStacks and Burp Suite integration on macOS is supported, allowing you to route Android emulator traffic through ADB to inspect HTTPS API requests.

Do I need ADB to configure the Burp CA certificate in the BlueStacks trust store?▼

Yes, an ADB connection is required to push the Burp CA certificate into the device trust store and validate HTTPS interception on the BlueStacks emulator.

Related Skills

Explore More Software Engineering Skills→
software-mansionsoftware-mansion
1.9k

argent-android-emulator-setup

Boot an Android AVD and configure adb reverse for Metro connectivity.

Official
Intermediate
manuelbrandner85manuelbrandner85

burpsuite-project-parser

Extract security audit findings and proxy history from Burp Suite project files.

Community
Advanced
alexfazioalexfazio
159

cc-trace

Intercept and inspect Claude Code API traffic using mitmproxy.

Community
Advanced
Prohao42Prohao42
120

mobile-ssl-pinning-bypass

Bypass SSL pinning in Android and iOS apps using Frida or Objection.

Community
Advanced