WEBVTT - This file was automatically generated by VIMEO

1
00:00:08.400 --> 00:00:11.500
 Hello, and welcome to the next video. Spidering in

2
00:00:11.500 --> 00:00:13.400
 Community Edition, latest version.

3
00:00:15.400 --> 00:00:18.400
 On this video, what we are going to learn. So we are going to perform

4
00:00:18.400 --> 00:00:22.100
 spiting process, but in latest sweet

5
00:00:21.100 --> 00:00:24.800
 person and I'm going to explain the

6
00:00:24.800 --> 00:00:25.500
 whole process.

7
00:00:26.800 --> 00:00:28.500
 So look me up in the lab setup.

8
00:00:31.200 --> 00:00:34.100
 The guys, I'm inside Kali Linux machine and this is the

9
00:00:34.100 --> 00:00:34.700
 latest version.

10
00:00:35.900 --> 00:00:38.300
 In the previous video we have known

11
00:00:38.300 --> 00:00:40.300
 that how you can use a spy ring.

12
00:00:41.400 --> 00:00:44.900
 In the old version of bird feed in the

13
00:00:44.900 --> 00:00:47.100
 latest version of Kali Linux. Burp, Suite

14
00:00:47.100 --> 00:00:51.300
 is alphabet it. So you weren't able to find spidering

15
00:00:50.300 --> 00:00:53.100
 option in latest version of

16
00:00:53.100 --> 00:00:53.400
 birth.

17
00:00:55.700 --> 00:00:59.000
 So if I open briefly, tell us about

18
00:00:58.300 --> 00:01:01.600
 food, you can see here that no

19
00:01:01.600 --> 00:01:04.200
 sparring, option is available here than what you can

20
00:01:04.200 --> 00:01:08.000
 do. In this case of Italy, you are not able to perform spotting process

21
00:01:07.900 --> 00:01:10.200
 and Community Edition of Grey

22
00:01:10.200 --> 00:01:13.800
 freed. Yes, obviously, if you purchase a professional, wasn't

23
00:01:13.800 --> 00:01:16.600
 a bird feet, all actions are available there, but for

24
00:01:16.600 --> 00:01:19.100
 practice problems, how you are going to perform spidering.

25
00:01:20.300 --> 00:01:23.800
 I think means that we are not able to perform sparring

26
00:01:23.800 --> 00:01:26.300
 directly from birth. We need to take

27
00:01:26.300 --> 00:01:30.700
 help of some other two so that we can create a proxy

28
00:01:29.700 --> 00:01:32.200
 to perform.

29
00:01:33.800 --> 00:01:36.800
 Fighting process in latest version

30
00:01:36.800 --> 00:01:37.200
 for free.

31
00:01:39.300 --> 00:01:43.200
 Now fortunately, we have another tool which we can

32
00:01:43.200 --> 00:01:46.300
 use and we can take off the

33
00:01:46.300 --> 00:01:50.300
 stool to perform sparring in Brookfield that

34
00:01:49.300 --> 00:01:53.200
 you will name is zap provided

35
00:01:52.200 --> 00:01:55.700
 by IOS app, which is that attack proxy

36
00:01:55.700 --> 00:01:58.600
 and is also open source tool provided

37
00:01:58.600 --> 00:02:01.500
 by OS. So we can take help of

38
00:02:01.500 --> 00:02:04.400
 Zap and then we can make it to proxy and

39
00:02:04.400 --> 00:02:09.000
 then we can transfer. Or is it a weekend set?

40
00:02:07.700 --> 00:02:10.600
 Roxy inside Saturday

41
00:02:10.600 --> 00:02:13.300
 proxy. So that request will be redirected to

42
00:02:13.300 --> 00:02:14.500
 breastfeed.

43
00:02:15.500 --> 00:02:16.300
 We can do this.

44
00:02:18.200 --> 00:02:19.400
 Alright, so

45
00:02:20.600 --> 00:02:23.500
 let's check in proxy in options.

46
00:02:26.400 --> 00:02:30.300
 Sewing options. We have proxy settings, oxy,

47
00:02:29.300 --> 00:02:32.600
 listeners of living here. 127. 0.

48
00:02:32.600 --> 00:02:36.900
 0. 1. + 40 is 80 80. Alright, intercept

49
00:02:35.900 --> 00:02:38.700
 should be on. Yeah. I

50
00:02:38.700 --> 00:02:41.400
 just want him now like to minimize this.

51
00:02:41.400 --> 00:02:44.600
 So we are not able to perform spidering directly

52
00:02:44.600 --> 00:02:48.600
 from burps. Eat, that's open in Kali

53
00:02:48.600 --> 00:02:48.700
 Linux.

54
00:02:49.400 --> 00:02:51.400
 So, you can click here.

55
00:02:54.700 --> 00:02:57.500
 Search web application analysis. And here

56
00:02:57.500 --> 00:03:00.800
 you can see this app is available. Here is called Saturday

57
00:03:00.800 --> 00:03:05.000
 proxies. Let's open this. Click inside Kali,

58
00:03:04.000 --> 00:03:05.200
 Linux.

59
00:03:07.100 --> 00:03:10.800
 It also has various other options, like spidering and the

60
00:03:10.800 --> 00:03:11.500
 active scanning.

61
00:03:12.700 --> 00:03:13.400
 Accra.

62
00:03:23.200 --> 00:03:26.800
 Cigars that you can see here that this is OS Plus

63
00:03:26.800 --> 00:03:27.100
 app.

64
00:03:28.200 --> 00:03:32.100
 Now get me started. So what

65
00:03:31.100 --> 00:03:33.500
 is sap? Why do we use it?

66
00:03:34.400 --> 00:03:38.000
 So you can read his app is an easy-to-use integrated

67
00:03:37.600 --> 00:03:40.100
 penetration testing tool for finding.

68
00:03:42.500 --> 00:03:45.200
 1 little Beauties in web applications, so

69
00:03:47.200 --> 00:03:50.200
 We can use that attic proxy to find where it's kind

70
00:03:50.200 --> 00:03:53.200
 of all of it is in web application. For example, injection. Will

71
00:03:53.200 --> 00:04:01.100
 Liberty craft festival involved across Olympus forgery, and important

72
00:03:59.100 --> 00:04:02.100
 thing is it is open source.

73
00:04:02.100 --> 00:04:05.700
 So you don't need to pay for. It is open source provided by

74
00:04:05.700 --> 00:04:08.300
 OS so you can use it easily in Kali Linux,

75
00:04:08.300 --> 00:04:11.300
 as well as in Windows machine. We are

76
00:04:11.300 --> 00:04:12.100
 using in Kali Linux.

77
00:04:12.900 --> 00:04:15.400
 All right. Now, what we're

78
00:04:15.400 --> 00:04:17.000
 doing here, so

79
00:04:18.400 --> 00:04:23.000
 What we have a Target test psp.com. Now,

80
00:04:22.200 --> 00:04:25.400
 we cannot perform spiralling that are clean. Perfect,

81
00:04:25.400 --> 00:04:28.200
 because we don't have that option in Community Edition. So what we're

82
00:04:28.200 --> 00:04:31.900
 going to do we are making zap as

83
00:04:31.900 --> 00:04:32.200
 a proxy.

84
00:04:33.600 --> 00:04:36.000
 You can also say it has a

85
00:04:36.500 --> 00:04:39.600
 mediator. So we will take requests inside

86
00:04:39.600 --> 00:04:42.500
 zap first and then Saturday during

87
00:04:42.500 --> 00:04:43.900
 the request to burp Suite.

88
00:04:45.800 --> 00:04:48.500
 So, we are taking this tool as

89
00:04:48.500 --> 00:04:48.800
 a proxy.

90
00:04:50.100 --> 00:04:53.000
 So this app is going to perform all kind of

91
00:04:53.700 --> 00:04:56.200
 scanning, and the results will be redirected to

92
00:04:56.200 --> 00:04:57.200
 proofread.

93
00:04:58.700 --> 00:05:03.100
 All right. That's how you can use zap

94
00:05:01.100 --> 00:05:04.700
 and breadfruit to perform

95
00:05:04.700 --> 00:05:05.400
 sweating process.

96
00:05:06.700 --> 00:05:09.300
 In the latest version of Carol next, all

97
00:05:09.300 --> 00:05:11.100
 you can send it to us version of perfect.

98
00:05:12.300 --> 00:05:15.300
 Okay. So now the next step is to

99
00:05:15.300 --> 00:05:18.600
 set proxy settings. So what you

100
00:05:18.600 --> 00:05:21.200
 can do here, you can click on settings. Here.

101
00:05:21.200 --> 00:05:23.700
 You can see this button. So thick hair.

102
00:05:24.300 --> 00:05:28.700
 It will show you all kind of settings

103
00:05:27.700 --> 00:05:30.900
 available for Saturday proxy.

104
00:05:32.200 --> 00:05:33.000
 Here we go.

105
00:05:36.000 --> 00:05:36.700
 so,

106
00:05:40.100 --> 00:05:43.300
 you can click on local proxies, first of all, so,

107
00:05:45.400 --> 00:05:51.700
 You can see here. Port number is 808-160-8080. You

108
00:05:51.700 --> 00:05:54.800
 can change it to 8081 outside so we

109
00:05:54.800 --> 00:05:57.900
 can do here if it is raining like this, 8080 to

110
00:05:57.900 --> 00:06:00.500
 change it to 8081 local office.

111
00:06:00.500 --> 00:06:03.400
 Fine,. Port number should be a delayed one or any

112
00:06:03.400 --> 00:06:03.600
 other.

113
00:06:04.600 --> 00:06:06.600
 Do not use 800 hair.

114
00:06:08.700 --> 00:06:11.300
 Next is we need

115
00:06:11.300 --> 00:06:11.600
 to check.

116
00:06:14.100 --> 00:06:16.600
 The proxy settings here.

117
00:06:18.200 --> 00:06:20.600
 So, let me check what it is.

118
00:06:22.600 --> 00:06:26.300
 So you can click on cutting connection, right?

119
00:06:25.300 --> 00:06:29.000
 And come down so

120
00:06:28.100 --> 00:06:32.100
 you can see use proxy Jane, right? So

121
00:06:31.100 --> 00:06:35.200
 what you been doing here, you're supposed to fall selected using outgoing

122
00:06:34.200 --> 00:06:37.300
 proxy server. Then provide address

123
00:06:37.300 --> 00:06:40.300
 to address should be localized, 127. 0.

124
00:06:40.300 --> 00:06:44.200
 0.1, and port number here. You can provide 8080.

125
00:06:43.200 --> 00:06:47.200
 Alright, redirect to

126
00:06:46.200 --> 00:06:49.300
 this IP and port. And we

127
00:06:49.300 --> 00:06:52.300
 know that both shoot uses this IP address

128
00:06:52.300 --> 00:06:55.900
 in port number as a proxy listener. So

129
00:06:55.900 --> 00:06:58.300
 what is going to happen? We will

130
00:06:58.300 --> 00:07:01.900
 take requests inside. Sap sap is going to perform scanning and

131
00:07:01.900 --> 00:07:05.000
 that will be redirected to Bourbon Street.

132
00:07:06.200 --> 00:07:09.500
 On address localhost port. Number 8080,

133
00:07:11.900 --> 00:07:14.100
 All right. So these are the

134
00:07:14.100 --> 00:07:17.700
 two settings in connection. Use it as a proxy server change,

135
00:07:17.700 --> 00:07:19.600
 the IP address and port number set it.

136
00:07:20.700 --> 00:07:21.400
 and,

137
00:07:22.700 --> 00:07:25.300
 If you come down and in local proxies, you just

138
00:07:25.300 --> 00:07:29.600
 need to change the port number 28081 and

139
00:07:28.600 --> 00:07:31.100
 we are done so you

140
00:07:31.100 --> 00:07:34.400
 can click on, okay, and we have set all the

141
00:07:34.400 --> 00:07:36.500
 proxies inside Zelda proxy.

142
00:07:38.600 --> 00:07:41.100
 And we also have broke Freedom label here.

143
00:07:43.400 --> 00:07:47.500
 It is Rich's using proxy. 127. 0.

144
00:07:47.500 --> 00:07:50.700
 1 + 88 is a phone number. So we

145
00:07:50.700 --> 00:07:53.100
 are all set intercept should be on.

146
00:07:54.800 --> 00:07:57.300
 Here we have done that a

147
00:07:57.300 --> 00:07:57.600
 proxy.

148
00:08:00.500 --> 00:08:01.400
 the next thing is,

149
00:08:02.900 --> 00:08:05.200
 we need to visit a browser.

150
00:08:06.600 --> 00:08:09.100
 And we need to change the proxy settings of

151
00:08:09.100 --> 00:08:13.200
 browser because we need to set the port number 28081 because

152
00:08:12.200 --> 00:08:16.100
 app is using 80812 now.

153
00:08:18.800 --> 00:08:21.400
 Oh, let's do one thing. It also

154
00:08:21.400 --> 00:08:22.300
 contains its

155
00:08:23.200 --> 00:08:26.400
 Browser, which is freaking field. So, let's

156
00:08:26.400 --> 00:08:29.000
 open this browser. Didn't see his Mozilla Firefox. So

157
00:08:29.200 --> 00:08:31.800
 let me click here and let me open this Mozilla Firefox.

158
00:08:40.100 --> 00:08:43.700
 Should I say I have you do more than a Firefox. Has open. Explore

159
00:08:43.700 --> 00:08:46.500
 your application with zap? So let me move the

160
00:08:46.500 --> 00:08:49.700
 you out of there and let's test it

161
00:08:49.700 --> 00:08:52.700
 HTTP s colon

162
00:08:52.700 --> 00:08:55.400
 slash slash test BHP.

163
00:09:00.600 --> 00:09:03.100
 Dot-com hit enter.

164
00:09:08.100 --> 00:09:08.900
 If you go.

165
00:09:10.400 --> 00:09:14.400
 Wake me up in foster Falls Saturday, proxy

166
00:09:13.400 --> 00:09:14.700
 year.

167
00:09:19.700 --> 00:09:22.700
 Now, guys, you can see that inside Saturday

168
00:09:22.700 --> 00:09:26.400
 proxy. We have the website here, right?

169
00:09:25.400 --> 00:09:29.400
 So, we have visited the browser and

170
00:09:28.400 --> 00:09:31.400
 inside browser. We have used this

171
00:09:31.400 --> 00:09:34.600
 website, Saturday proxy have

172
00:09:34.600 --> 00:09:37.500
 intercepted. All right.

173
00:09:37.900 --> 00:09:40.400
 now Nexus,

174
00:09:41.500 --> 00:09:44.500
 we need to perform spidering process

175
00:09:44.500 --> 00:09:48.000
 so you can right-click here. And

176
00:09:47.100 --> 00:09:50.400
 do you can see, there are various options available here. So

177
00:09:50.400 --> 00:09:53.500
 inside those you can select attack in a deck, you

178
00:09:53.500 --> 00:09:56.200
 can see spidering is available here so we

179
00:09:56.200 --> 00:09:59.400
 can perform spotting in Saturday proxy and then we can redirect this to

180
00:09:59.400 --> 00:10:02.300
 grab food since Pride. Ring. We have active

181
00:10:02.300 --> 00:10:05.700
 scan. We have a jack spider, passing place

182
00:10:05.700 --> 00:10:08.700
 on asking. If I open bird feed

183
00:10:08.700 --> 00:10:11.900
 suet bird food. We only have one request. That's fine

184
00:10:11.900 --> 00:10:14.500
 because the request has been accepted by

185
00:10:14.500 --> 00:10:17.700
 Zelda proxy. And Zelda, proxy has redirected it

186
00:10:17.700 --> 00:10:21.900
 rips it, but we have not started the writing

187
00:10:20.900 --> 00:10:23.400
 process. So you can see here in

188
00:10:23.400 --> 00:10:26.300
 a city PS3. There's only one day that label. All

189
00:10:26.300 --> 00:10:29.400
 right, now, let me start the aspiring process in

190
00:10:29.400 --> 00:10:30.200
 Saturday proxy.

191
00:10:30.900 --> 00:10:32.200
 Search for get Morty.

192
00:10:33.500 --> 00:10:36.400
 So right liquor, let

193
00:10:36.400 --> 00:10:39.800
 me start a basic spotting process and you can click on

194
00:10:39.800 --> 00:10:43.200
 this. So this is the website. All right.

195
00:10:43.200 --> 00:10:46.400
 Now, let me start the fighting process

196
00:10:46.400 --> 00:10:50.100
 starts can alright.

197
00:10:51.600 --> 00:10:54.700
 So it is providing you information about these URLs.

198
00:10:54.700 --> 00:10:58.600
 Like robots. EXT site map. XML right

199
00:10:57.600 --> 00:11:00.000
 now.

200
00:11:01.400 --> 00:11:05.100
 If I go inside Brookfield, you will also see the data

201
00:11:04.100 --> 00:11:07.600
 same data. So you

202
00:11:07.600 --> 00:11:11.500
 can see here that it is still

203
00:11:11.500 --> 00:11:14.800
 coming because Zappa's redirecting

204
00:11:14.800 --> 00:11:20.200
 the request in Brookfield. So Deb

205
00:11:19.200 --> 00:11:21.000
 is transferring data.

206
00:11:22.200 --> 00:11:23.400
 2, Birch Street.

207
00:11:25.300 --> 00:11:28.400
 So you can see in the, I shoulda Peachtree. We have robot

208
00:11:28.400 --> 00:11:33.900
 star, txt information information of

209
00:11:33.900 --> 00:11:37.200
 test. BHP. Wonder bible.com website.

210
00:11:38.300 --> 00:11:42.200
 So, we are able to perform spidering process with

211
00:11:41.200 --> 00:11:44.700
 the help of data Tech proxy tool. I can

212
00:11:44.700 --> 00:11:47.400
 see it. Let me perform some of the tasks. For example, let

213
00:11:47.400 --> 00:11:47.800
 me try.

214
00:11:51.700 --> 00:11:55.600
 Ajax spider. Spider start scan.

215
00:11:57.400 --> 00:11:57.700
 All right.

216
00:11:59.800 --> 00:12:05.800
 Now, let me go back to Burke feed and we

217
00:12:03.800 --> 00:12:06.200
 can do a

218
00:12:06.200 --> 00:12:09.700
 weekend at this website to scope. So I

219
00:12:09.700 --> 00:12:10.700
 had to school here.

220
00:12:12.300 --> 00:12:12.700
 Yes.

221
00:12:14.400 --> 00:12:17.400
 Swing Target have added this

222
00:12:17.400 --> 00:12:18.400
 website to scope.

223
00:12:19.900 --> 00:12:22.700
 Right-line truck.

224
00:12:22.700 --> 00:12:23.900
 See, we have this.

225
00:12:25.500 --> 00:12:28.400
 Let me go and send us up. Let me forward this request

226
00:12:28.400 --> 00:12:30.200
 forward. Everything.

227
00:12:34.200 --> 00:12:34.700
 Right.

228
00:12:37.200 --> 00:12:37.700
 Okay.

229
00:12:46.400 --> 00:12:48.600
 No, let me go back to.

230
00:12:50.300 --> 00:12:53.100
 Is that a proxy switcher? Still running?

231
00:12:54.200 --> 00:12:58.200
 And see here that's taking some time. So it

232
00:12:58.200 --> 00:13:03.300
 will surely a big daddy tyneside Brooks Street. So that

233
00:13:01.300 --> 00:13:05.600
 way you can perform check

234
00:13:04.600 --> 00:13:07.200
 this that does the same. You are

235
00:13:07.200 --> 00:13:10.400
 available in that block, list. Settings.

236
00:13:15.700 --> 00:13:19.000
 Chemical, write. My

237
00:13:18.200 --> 00:13:21.500
 date means that Saturday proxies redirecting

238
00:13:21.500 --> 00:13:24.300
 data to breakfast and we can

239
00:13:24.300 --> 00:13:26.200
 check the daytime set books to read.

240
00:13:29.000 --> 00:13:29.600
 Great.

241
00:13:30.700 --> 00:13:33.200
 Supervisor, that's how you can use their deck

242
00:13:33.200 --> 00:13:37.300
 proxy as a proxy, to perform

243
00:13:36.300 --> 00:13:40.100
 spending process inside Brookfield. So you

244
00:13:39.100 --> 00:13:42.300
 just need to set proxy setting

245
00:13:42.300 --> 00:13:46.400
 inside is that, and then you will be able to redirect all requests

246
00:13:45.400 --> 00:13:48.500
 or just clear

247
00:13:48.500 --> 00:13:51.100
 the data from the attic proxy to proofread.

248
00:13:52.200 --> 00:13:54.900
 And you can check all the data in Brookfield.

249
00:13:56.600 --> 00:13:57.300
 Christ.

250
00:14:00.400 --> 00:14:03.400
 So this is all about the spending process in latest version of

251
00:14:03.400 --> 00:14:06.200
 Bradford. In the next video. We are

252
00:14:06.200 --> 00:14:08.000
 going to learn about scanning process.