No NTLM challenge received , how to solve it!

Hi Guys,

I am writing this post since many times we run into this problem while testing some web applications.

So if you are like me and love to see everything in Burp Suite , probably you should go ahead and read this blog post.

The solution that worked for me was simple :

1) You just need to have ZAP proxy installed

Download it from : https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

After downloading start the ZAP proxy and make these changes , navigate to Tools>Options>Local Proxy

Set the port number to any port you like , here i have set it to 8081.



2) Configure Burp to pass traffic to ZAP

Go to Burp proxy and enter the following under User Options>Connections >Upstream Proxy Servers



As shown add the upstream proxy and select port as 8081 (make sure it coincides with the one you add in ZAP above)


3)Final step is just to configure your browser to listen to Burp on any port you like , eg. 8080 , now the problem of NTLM challenge is resolved and you can proceed with testing of any site on Burp Suite.


Other Tips:


1) Try using a different browser

2) Try using a different version of burp suite

If you have any doubts or queries , please feel free to comment .