‫So let's start at burb and open a proxy tab.
‫New tabs are opened under proxy.
‫And the proxy tool is pretty much the heart of the sweet.
‫And by using this tool, we can manually analyze HTTP messages.
‫So to accomplish this, we need to configure burb as well as the Web browser to work together.
‫All right, so let's go to the options tab.
‫So here's the basic setting for intercepting.
‫By proxy works as a man in the middle proxy right between the Web browser and the remote server.
‫So that means a proxy is going to listen to a report on the local machine and we are going to redirect
‫all browser traffic to that port.
‫So that means that we need to arrange a port for burb to listen.
‫But it has a default configuration on Port 80, 80, as you can see here, it listens on Port 80, 80
‫on the local machine.
‫And here, one two seven zero zero to one points to your local machine called Linux.
‫Of course, you can change this configuration using the buttons on the left hand side.
‫You can easily add, modify or remove listening port or you can always restore to the default configuration.
‫So after arranging the listening port, the next thing is to define the interception rules.
‫So Burb provides a rule-based mechanism to intercept traffic directed by the Web browser.
‫So this way you can focus only on the request that you want to capture.
‫And you can add, delete or modify any rule by using the buttons on the left.
‫But for now, we don't need to add any rule.
‫But when you're doing real tests, I believe you will need it and burb also has the same mechanism for
‫intercepting server responses.
‫So you can define or modify rules for your pen test.
‫But you do need to check this box to enable intercepting responses first.
‫See, now you can define more granular rules.
‫OK, so now let's go to the intercept tap.
‫So this is the main tab that you will display and intercepted HTP message you.
‫And this button globally enables or disables intercepting HDB messages to analyze manually.
‫So thanks to these default configurations, we really don't have to do much more.
‫I did want to give you a little tour, so Berp is ready to work.
‫So let's open your browser.
‫And I will assume that you are using callisthenics.
‫And Kelly has Firefox and Chromium for browsing the web.
‫As I said before, I'm going to use Firefox as my main browser.
‫Of course, you can follow these same steps for any other browser.
‫It's up to you.
‫It is going to look a little different.
‫OK, so now I'm opening Firefox preferences from the menu.
‫And scrolling down below, click the settings button under the network proxy section.
‫So this window, Firefox enables us to use proxies.
‫And you can configure their use, so this is the first time that you're opening up here, you probably
‫will get these settings.
‫OK, so we need to enable Firefox to redirect all the traffic to port AT&T.
‫And don't forget the burleson's listens on this port, so check the manual proxy configuration.
‫Typed the IP address of your local machine, which is one two seven zero zero one.
‫And the port is 88 and then check this box to send, so it also sends https traffic to berp now before
‫saving the setting, delete this entry here.
‫Because it will prevent the redirect local traffic to proxy.
‫And nothing to add then save.
‫So now open a new browser tab.
‫OK, is Barbizon intercept mode?
‫The browser redirects the traffic to berp, now go to the vulnerable applications login page.
‫And I'll click this bookmark.
‫And see, as soon as you have the address, Burke gets a request.
‫So this is just an HTTP request, as you remember from the previous videos.
‫So now, after capturing the request, you can do several things.
‫By using this action button, you can send this request to other tools for further analysis.
‫Or you can say the request and do many other things with you, and if you are finished with a request,
‫then you can either drop or forward their request.
‫So I'm going to forward it.
‫And then see how immediately catches the associated response message.
‫So this is a raw response message matters first and then the body of the message comes.
‫Now clicking on the headers tab, you can display just the headers of this message.
‫And you can also perform some of the same actions here.
‫And then when you're done with a response, you can forward or drop it.
‫So, again, I'm going to forward it.
‫Now, because berp is in this interception mode, it's also going to intercept some other requests as
‫well.
‫So I'm going to forward all of them.
‫And then finally, the login page is displayed in the browser.
‫So burb also holds the history information for us.
‫So let's go to the history tab and click on any request.
‫And so you'll find the details about that request.
‫So this is how we intercept HTP messages with the proxy tool.
‫For better interception experience, we can install a Firefox add on so we can easily redirect the traffic
‫to burb.
‫Now, while Penn testing, it's not necessarily efficient to change the proxy settings from Firefox
‫each time, right.
‫So what do I do?
‫I advise you to use a proxy ext.
‫I'm going to use Foxe proxy and I'll show you how to install it.
‫But first, let's disable berp interception.
‫And disable Firefox internal proxy settings.
‫OK, so now let's go to the Firefox add ONS website.
‫Let me just zoom in on the page for you.
‫And type Foxe proxy and the search field.
‫Click the first result.
‫Then click add to Firefox.
‫And click, add.
‫OK, so it gets installed very quickly.
‫So after installation, you see this icon in the toolbar.
‫Click options.
‫Now, from this page, we can add proxy's to Foxe proxy.
‫And then later on, we can switch between them very quickly.
‫So click and I'll put it in the title Berp.
‫IP addresses are a local machine, 127000 one and port is AT&T.
‫Like that, you can also assign a color.
‫So save it.
‫OK, so we added the configuration.
‫Then you can close this tab.
‫And quickly, icon.
‫And what do you see the configurations listed here?
‫Now click to activate this configuration, so I think it's really a timesaver.
‫And go to be Web login page.
‫And yeah, Berp intercepts a request again.
‫Forward the messages.
‫Now I'm going to disable proxy to send traffic to berp.
‫And there it is, it's just that easy.
‫So click another page and you can see.
‫The traffic is not redirected to berp anymore.
‫Oh, and one last thing to say here, with default browser usage, you will see many unrelated messages
‫in Inbar, for example, browsers, safe browsing requests, captive portal requests, crashes and reports.
‫So don't be disturbed by all these messages caused by these features, but you can disable them.
‫In fact, I recommend it go to about config.
‫And confirm the message that pops up.
‫And change the settings that I'll show you here over on the right side.