I was doing a pentest on a UAT web app for a financial company — student loan servicing. Internal only, IP filtered, VPN access. I had two accounts to test with: sales, and super admin.

Day one, Burp didn't work. Not slow. Not buggy. Just didn't work.

Three Days of Nothing

I thought it was me. New laptop, new certs, something set up wrong on my side. So I checked everything:

Reinstalled the CA cert. Twice.