TLS Passthrough Domains for Burp Suite

This repository contains a curated list of domains commonly used for tracking, analytics, advertisements, and other noise-generating services. Adding these domains to Burp Suite's TLS Passthrough settings helps reduce unnecessary traffic and noise in proxy logs during security assessments.

Note: While most of these domains are associated with Google services (e.g., tracking, analytics, ads), they are excluded from interception by default in this list. However, if you are testing Google services directly, you may need to adjust this list to avoid excluding relevant traffic.

Usage Instructions

Step 1: Download the List

• Clone this repository or download the tls_passthrough_domains.json file directly.

# Clone the repository
git clone https://github.com/yourusername/tls-passthrough-domains.git

# Navigate to the directory
cd tls-passthrough-domains

Step 2: Configure Burp Suite

1. Open Burp Suite.
2. Navigate to Proxy > Options > TLS Pass Through.
3. Click on ⚙ > Load Settings.
4. Import the tls_passthrough_domains.json file or manually add the domains listed in the file.

Step 3: Start Testing

• Begin your assessment with cleaner proxy logs, focusing on the target domains without interference from noise generated by analytics and advertisement services.

Important Note

If you are testing Google services (e.g., Gmail, Google Analytics, Ads), some of the domains in this list might exclude relevant traffic from interception. In such cases:

• Temporarily remove Google-related domains from the passthrough list.
• Use Burp Suite’s filters to focus only on the relevant traffic.

Contributing

We aim to keep the file updated regularly and are open to feedback from the community. If you come across additional domains that generate unnecessary noise or if you notice any domains missing from the list, feel free to contribute:

1. Fork the repository.
2. Add the domains to tls_passthrough_domains.json.
3. Submit a pull request.

License

This project is licensed under the MIT License.

References

• Burp Suite Documentation: TLS Pass Through

---

Happy Testing!