How to intercept websites with HSTS(HTTP Strict Transport Security)

Question

When I am trying to intercept a website using Burp suite it gives error like POTENTIAL SECURITY ISSUE

More details are missing. What exactly are you trying to do that triggers this error? It could be due to a certificate error when you intercept with Burp suite and not add its certificate as a trusted root CA (use caution when doing so) — Gil Cohen, Apr 24 '19 at 13:54
Yes you are right , it is due to certification error and now it is ok. Thanks. — phaneendra yandrapragada, Apr 25 '19 at 08:43

score 2 · Answer 1 · edited May 11 '21 at 14:09

2

Read this article from PortSwigger, it will give you the capability to intercept HSTS WebSites.

edited May 11 '21 at 14:09

Philippe Delteil

answered Apr 25 '19 at 14:33

SPoint

1 Answers1