Welcome back.
Time to configure the tool called Burset and burps it is a tool that allows us to intercept and take
a look at different HTTP requests and HTTP responses.
It also allows us to change those HTP requests to our liking and then forward them to our target.
It is also considered a proxy.
So everything and every link that we visit to our Firefox from now on will go through Burset first and
we will be able to inspect all of our HTP requests and responses.
Let us see how we can configure it and get it to work.
So we already got it inside of our Linux machine.
If you go onto the menu and then Web application analysis, you will have it right here.
The first thing that we want to do is double click it to start it up.
This will start up the community edition and there is also professional additions that you must pay
for.
But for now, we're just going to cover the community edition inside of this course.
It might give you this error.
You just want to click on, OK?
And in just a few seconds, we should have the main menu of should open up.
And here it is, terms and conditions I want to click on except and here it tells us an update is available.
I'm not really interested in the update at the moment here.
I want to select the temporary project.
Click on that and click on next.
I want to select right here, use defaults and start Burset after a few seconds.
It should open something like this.
And we can see a lot of things are happening on our screen.
If I enlarge it, you will see that we get a bunch of different options with this verb talk.
But let's not think about them at the moment.
For now, let us just think about how we can configure our Burchett's to be used by Firefox as a proxy.
Well, the first thing that we want to do is navigate to the site to click on proxy right here.
And under the proxy, we get these options step.
Under the options, we will have these proxy listeners and proxy listeners, you want to select this
right here and you want to click on EDIT.
If you don't have anything right here, just click on ADD.
Here we want to bind to Port 80 80 and we want to bind to address, loop back only once you get this
set up, click on OK, and after you got this, what we want to do is want to navigate to our Firefox
and on these three lines right here, we want to navigate to the preferences under the general tab in
the preferences we want to navigate all the way down.
And at the last option where we got network settings, we want to click on settings.
Here, it will ask us to configure proxy access to the Internet and we want to set it here, manual
proxy configuration.
Under the HTP proxy, we want to set the IP address, and in our case, we are going to set the IP address
of our local host, which is for everyone, this IP address right here.
And the port should be 80, 80, and then we can set use this proxy for all protocols.
Also, make sure that the Sox, the five is checked.
And once you do all of that, you can click on, OK?
Now that we did this, if I go and try to visit Google dot com.
It will tell me software is preventing Firefox from safely connecting to this website, and you should
get this error, too.
Why does this happen?
Well, our Firefox doesn't really trust our Burset tool.
And currently all of the packets are going through this tool before we can see them on our screen.
So we're getting a warning from the Firefox that some software is preventing from having a secure connection
to that website.
What can we do about this?
Well, we can go to our Firefox and visit any HTP website that we want, it won't present a problem
for HTP websites.
It will only present a problem for its website.
But we also want to visit HTP s websites such as Facebook, such as Google and all the others.
To do that, we must type this link inside of our search bar, which is HTP to DOT and then berp press
enter and you will open this page right here.
It will tell us.
Welcome to the community edition and here we will be able to download the certificate, which we can
then import inside of our Firefox and make Firefox trust our Burset tool.
So just click on cert, click on Save File and click on OK.
Once you do that, the file will be inside of our downloads directory, as we can see it right here.
This is its name and all we need to do is go back to the preferences inside of our Firefox, navigate
to privacy and security.
And all the way down, we will have our certificates part under the certificates part.
We want to click on view certificates and we want to click on import a certificate.
Then you want to navigate to the download directory, select the certificate, which it's downloaded,
and then click on Open.
We want to select trustees to identify websites and trust the CIA to identify email users, click on
OK and also click on OK right here.
If I go back and I refresh Google dot com, hmmm, it seems to still load, it doesn't really do anything.
So why isn't it loading our page?
Well, in the burbs.
By default, you should see if you go back after trying to open Google once again, that this proxy
will turn orange and this intercept will also turn orange.
So if we go to proxy and then intercept, we will have an HTTP request.
And this is a request that we just initiated to the host w w w Google dot com.
We can see all of those fields that we talked about, such as hosts such as user agent under the user
agent.
We can see which type of web browser are we using.
We can also see the cookie right here and the reason why we are not loading the page and it is still
loading right here is because the intercept is turned on.
This means it will intercept this packet before it actually forwarded to the webpage.
We can forward it manually by pressing this or we can just turn the intercept off and then it will not
intercept any packets.
So if I go back to Google right now, you can see we successfully loaded Google.
If we want, we can go right here under the target and we can see all the links that we visited while
the purpose it was running.
So we can see Google right here and we can see all of the requests and response that we got for the
Google.
So here is the request for the Google dot com that we just did.
And here is the response from the Google that says states code two hundred, OK, which means we successfully
loaded the page, which we indeed loaded.
And here is the code of that page.
Cool, right now we can intercept any packets to any website.
Great, now that we covered Configuration Burset in the next video, we can go and perform our first
attack and in the future videos, we're also going to cover more details about this purpose, too.
But for now, we just managed to configure it and we're ready to, in the next video, perform our first
attack.
See you there.