1 00:00:00,240 --> 00:00:03,900 So, guys, in the last few days, we have seen what is HDTV protocol. 2 00:00:04,290 --> 00:00:08,890 So from this lecture, we are going to learn about the request and response headers. 3 00:00:09,180 --> 00:00:14,550 So the extra people request made by the client and HTP response sent by the server. 4 00:00:14,940 --> 00:00:20,490 So they have some overhead data that provides administrative information to the client and the server. 5 00:00:22,020 --> 00:00:28,710 So the heady days followed by the actual data that is said between the two end points and how to contain 6 00:00:28,720 --> 00:00:33,550 some critical information which an attacker can use against the application. 7 00:00:33,750 --> 00:00:36,480 So there are several different ways to capture the Hidell. 8 00:00:36,810 --> 00:00:41,310 So Web application proxy is the most common way to capture analyze the header. 9 00:00:41,320 --> 00:00:46,060 So we are going to see later on in this course how to use the Web application proxies. 10 00:00:46,440 --> 00:00:51,690 So from this actually in this particular lecture, we are going to learn about the request header and 11 00:00:51,690 --> 00:00:54,930 we are going to analyze and see what is requested. 12 00:00:55,830 --> 00:01:01,790 So now, as you can see in this particular screenshot, which is captured using the application proxy, 13 00:01:02,100 --> 00:01:06,790 so as soon here you can see in this particular screen sort died. 14 00:01:07,260 --> 00:01:08,690 OK, let me first. 15 00:01:09,840 --> 00:01:14,470 OK, so as you can see in this particular screenshot, which is in front of you. 16 00:01:14,800 --> 00:01:21,300 OK, so the request is from the client using to get, as you can see here, which is get OK. 17 00:01:21,420 --> 00:01:27,480 So which is the get method we are going to run about to get later on, which is searching for the being 18 00:01:27,480 --> 00:01:35,040 dot com and the first line and defines the matter used, which is here, OK. 19 00:01:35,190 --> 00:01:43,230 So in this example, we are using the computer to access the route of the website denoted by HTP wasn't 20 00:01:43,230 --> 00:01:44,850 is one dot one. 21 00:01:45,120 --> 00:01:52,140 OK, so now let's understand what each and every important parameter means here. 22 00:01:52,380 --> 00:01:56,020 OK, so first we know a list as host, which is as you can see here. 23 00:01:56,370 --> 00:02:03,510 So this field is in the head of and it is used to identify individual website by hostname if they are 24 00:02:03,510 --> 00:02:11,040 setting the same IP address so that the browser also sets a user agent string to identify the type and 25 00:02:11,040 --> 00:02:12,180 the voice of the browser. 26 00:02:12,570 --> 00:02:17,930 OK, so then we are having user agent, as you can see here, which is user agent. 27 00:02:18,060 --> 00:02:25,530 So this will is sick, connected to its default value by the Web browser actually, and it can be spoofed 28 00:02:25,530 --> 00:02:26,450 by the end user. 29 00:02:26,460 --> 00:02:33,330 And this is usually done by the malicious user to retrieve content designed for other types of browsers. 30 00:02:33,660 --> 00:02:35,910 OK, so then we are having cookies. 31 00:02:35,910 --> 00:02:39,320 So here and then you will find cookies. 32 00:02:39,570 --> 00:02:45,480 So this field stores are completely values shared between the client and the server forces in management. 33 00:02:45,870 --> 00:02:52,450 OK, so after this we are not having here I think therefore is not a of very important. 34 00:02:52,710 --> 00:02:57,060 So what are we going to do here is I'm going to define the terms for you. 35 00:02:57,390 --> 00:03:04,680 So Leifur is nothing, but is this is the another important feature that you would always see when you 36 00:03:04,680 --> 00:03:10,530 are redirected from one you are to suppose that currently you are using. 37 00:03:12,010 --> 00:03:12,940 This website. 38 00:03:12,970 --> 00:03:15,510 OK, so you have found a link here. 39 00:03:15,520 --> 00:03:16,240 We just did. 40 00:03:16,510 --> 00:03:17,780 So when you click on this, you will. 41 00:03:17,800 --> 00:03:19,690 Will that be to the website? 42 00:03:19,740 --> 00:03:21,570 So this is the river. 43 00:03:21,620 --> 00:03:24,700 OK, so this is the river from where you came. 44 00:03:24,900 --> 00:03:26,960 OK, so this is water for me. 45 00:03:27,640 --> 00:03:30,590 So now let's at the end, which is important. 46 00:03:30,590 --> 00:03:33,070 Dinnerstein let's understand. 47 00:03:33,070 --> 00:03:34,050 Except encoding. 48 00:03:34,060 --> 00:03:34,700 So what is this? 49 00:03:34,720 --> 00:03:39,700 So this is to define the comparison scheme supported by the clanked. 50 00:03:39,970 --> 00:03:45,300 So GJP, as you can see here, and Byfleet are the most common ones. 51 00:03:45,310 --> 00:03:50,270 So there are other parameters too, but they are of little use to benches and test us. 52 00:03:50,290 --> 00:03:51,280 These are important. 53 00:03:51,490 --> 00:03:58,870 So that is what I have to I have taught you what each and every parameter means for you and what each 54 00:03:58,870 --> 00:04:04,960 and every penny defines about the website and the user, what they are searching and in which they are 55 00:04:04,960 --> 00:04:05,440 searching. 56 00:04:05,680 --> 00:04:07,780 So this is all about the request header.