title: Kerberos Authentication with Burp Proxy
body: <p>I am trying to setup Burp Suite so I can be tamper with HTTP requests and run security vulnerability scans against a .NET application that uses Kerberos for authentication(i.e. windows integrated authentication w/Kerberos support only).  To access the app normally in IE, I add a set of credentials to Windows using Credential Manager, which then uses the credentials during authentication.  I setup Burp Suite and  can see requests/responses they pass through from the browser, however I cannot tamper with requests in Repeater/Scanner because Burp Suite does not update the Authorization header automatically.</p>
  
  <p>I know Fiddler supports Kerberos, so my thought was to chain Burp to Fiddler.  I first made sure I could get tampering to work in Fiddler (using <a href="http://blogs.msdn.com/b/fiddler/archive/2011/09/04/fiddler-http-401-authentication-workaround-to-support-channel-binding-tokens-removing-endless-prompts.aspx" rel="nofollow">this link</a> as a guide).  I then set Fiddler to be Burp's upstream proxy, but when I tampered with a request in Burp I still got a 401 Unauthorized when issuing requests.</p>
  
  <p>Any other ideas on how I could get Burp to do Kerberos Authentication?</p>