Now the tricky part: HTTPS traffic will show as (unknown host) or fail with certificate errors unless you install Burp’s CA certificate.

Settings > Network & Internet > Wi-Fi > [Network Name] > Modify > Proxy: Manual Install Burp CA Certificate Export the CA certificate from Burp in DER format

Bluestacks 5 allows creating rooted instances via the :

Now, when you browse to https://example.com in Bluestacks, Burp Suite should show decrypted HTTPS traffic.

Always use a fresh instance per testing project – BlueStacks supports cloning. And never test apps you don’t own or have explicit permission to test.

⚠️ Apps with certificate pinning will still fail. You'll need Frida or Objection for those.

Setting up a mobile pentesting lab can be cumbersome. simplifies this by offering: