‫Capturing HTP traffic, so as we've gone over and hopefully you've learned HDP is the core protocol
‫that carries everything but doing the Web browser and the Web server, right.
‫So the browser sends requests to use the resources on the server and also the server sends the associated
‫response back to the browser.
‫So while penetration testing, manipulating the FDP messages is a basic and very important ability for
‫you to have as a penetration tester.
‫By intercepting HDP messages, you can edit and change any part of the message and then.
‫Well, see what happens.
‫So until now, we've just been looking at plain FDP messages, now we can capture and manipulate any
‫part of the FDP message on the fly using a local HTTP proxy tool.
‫So a local HDP proxy tool is one that sits in between the browser and the website, intercepting all
‫the traffic that flows between them.
‫So this is best done by acting as a man in the middle and then intercepting every request and response.
‫It lets you intercept, inspect and modify the raw traffic passing in both directions.
‫Now, although there are several proxy tools.
‫There's one called Berp Proxy, and that's pretty much the most widely used that I've seen.
‫You can also use others such as that attack proxy by a WASP, and there are several others included
‫in Calli, but I like proxy a lot and you will to be a proxy, comes in a suite named Berp Suite that
‫includes tools like Spider Intruder Decoder and a few others.
‫It developed and maintained by Port Swygert Web security.
‫And the proxy tool that is the heart of burb, that's the one that intercepts all the requests and responses.
‫Burp can also automate customized attacks against Web applications.
‫And then the traffic between the server and the browser could be analyzed, modified, visualized and
‫eventually repeated multiple times.
‫All right, so burb suite can be downloaded from Port Swygert dot net.
‫There are three download candidates here and two of them are commercial products.
‫You can compare them and you can even buy them on this page, but for our purposes and the purpose of
‫this course, the community edition is just dandy.
‫So that's the one we're going to use.
‫So let's click on the download button to see our download options.
‫And the download flavors are listed here according to major operating systems and version numbers.
‫Now, if you're using a different system, click other platforms.
‫And then you'll find the suitable flavor here.
‫But now we're going to use Callie as the attacking machine during our course, right?
‫So that means that Callie has preinstalled, a version of the community edition.
‫Just remember to update your system before using the tools in Callie.
‫So what does that mean?
‫Let's open up berp, let's click on this icon.
‫And a splash screen will welcome you.
‫Click OK, and then a project screen will come up.
‫Now here you can create or open an existing berp project.
‫But I think here, this note in red tells the situation quite clearly.
‫Next.
‫Berp gives you a way to save the configuration while working, and if you want to, you can load your
‫save configuration from this window.
‫No, I don't have a configuration file here, so I don't need to do anything, so let's click start
‫berp.
‫Wait a few seconds.
‫And the main window opens.
‫So when I recorded this video, this is the latest version, and on the right side, there are advertisements
‫for the pro version and on the left side there are tasks and burp logs.
‫So I'm just going to highly add.
‫And let's look at the tools in burps we.
‫Target, so this tool allows you to visualize your target applications contents in a folder structure.
‫It shows all the content that has been discovered by manually browsing the Web application.
‫Then it extracts a map of the application.
‫And this helps to define the target scope for the application.
‫Proxy.
‫So the proxy tool lies at the heart of burps, user driven workflow.
‫It operates as a Web proxy server and sits as a man in the middle between your browser and destination
‫Web servers.
‫So this allows you to intercept, inspect and modify all raw web traffic passing in both directions.
‫Intruder.
‫So this is a powerful tool for carrying out automated, customized attacks against Web applications.
‫It's extremely powerful and configurable, and it can be used to perform a huge range of tasks from
‫from simple brute force to the guessing of web directories.
‫So this process can help to identify Web application security flaws, repeater.
‫So it's a simple tool for manually modifying and then reissuing individual HTP and WebSocket messages,
‫as well as analyzing the applications responses.
‫So you can use a repeater for all kinds of purposes, such as changing parameter values to test for
‫input based vulnerabilities and other things will get their sequencer.
‫This analyzes the quality of randomness in an applications session, tokens or some other important
‫data items that are intended to be unpredictable.
‫And here's the decoder, it's a simple tool that allows you to encode and decode data.
‫It's capable of intelligently recognizing several encoding format, using heuristic techniques.
‫Compar is a handy tool to compare, obviously, but you compare it visually, any two items of data,
‫such as pairs of similar Web responses, extender.
‫So berp allows us to add our own modules to increase burps functionality.
‫And the extender tool also allows us to load berp extensions from the Burb App Store.
‫You can view the extensions from here and list them.
‫Now, Project Options is a place that you can define some global properties about berp and your current
‫session.
‫And then use your options.
‫Well, that's a place that you can add burb and TLM authentication credentials and proxy information
‫while testing.
‫You can also add your client SSL certificates under the SSL tab if you need them in a test.
‫And it's also possible to change user interface options and of course, you can also customize the user
‫interface right here from the display tab.