General | HTTP Proxies (8) | Cycubix Docs
Last updated
Last updated
For a developer working with local web servers (e.g., testing a web application on localhost), it's crucial to bypass the proxy to avoid unnecessary network routing and potential issues with proxy configurations affecting local development.
To use Burp or if running the browser through ZAP isn't working, additional configuration is necessary. Recent Chrome and Firefox versions no longer proxy localhost traffic by default.
To proxy localhost (and related addresses) with newer Firefox versions (>= 67), the preference network. proxy.allow_hijacking_localhost (accessible through the about:config page) must be set to true.
To proxy localhost (and related addresses) with newer Chrome versions (>= 72) the command line argument --proxy-bypass-list=←loopback> must be provided.
Use the hostname of your machine instead of localhost. You can find or add a hostname in /etc/hosts on Linux and MacOSX and C:\Windows\System32\drivers\etc on Windows
Then in your browser, use http://www.webgoat.local:8080/WebGoat as the address.
To manually configure a proxy in the browser, follow one of the configurations below:
Firefox Proxy Config
Go to your Firefox Preferences (Mac, Linux) or Options (Windows) from the menu.`
Select Advanced on the left
Select Network in the Advanced Pane
Click Settings
Select Manual proxy configuration
input 127.0.0.1 as the proxy (or www.webgoat.local depending on the choice you made above)
input 8090 as the port if running WebGoat locally, and you updated ZAP to 8090 (otherwise, use 8080)
check the Use this proxy server for all protocols checkbox
Chrome Proxy Config
Bring up Chrome’s settings from the menu
In the Search settings box, type in proxy and hit Enter/Return. This should bring up the Network heading with a Change proxy settings button.
Click the Change proxy settings button
Select the proxies tab
Select Web Proxy (HTTP)
Input 127.0.0.1 (or www.webgoat.local depending on the choice you made) in the first box under Web Proxy Server and your port # (8090 if running WebGoat locally, otherwise 8080) in the second box (to the right)
You may also want to clear the Bypass proxy settings for these Hosts & Domains text input at the bottom but shouldn’t need to
