Welcome back, everyone.
This is fresh niche, and this session is about going back to with SCDP.
I know you have got a got in basic idea about what's what SCDP is, but this is very clear in your mind
and will make you understand what all happening behind the scene.
Right.
So let's get started.
OK, for this to understand, if you remember correctly, I talked about I talked about really everything
related to how the browser and how the interaction between the browser and the web server happens back
and forth.
Right.
So for that to test, we need a browser and you don't have to go anywhere as well and pick up our favorite
browser.
That's Chrome.
OK, so let me go there and we'll make use of Chrome browser.
And let's say you go to any any random site, try to go to any random site I'll make use of.
This will be our testing website to our decision.
OK, this is a demo site, and what do you need to do is while testing any site, maybe it's Google
or anything, just go there.
You will find an option in modules and developer tools.
OK, so now what next?
You have to select the network, keep it all OK.
And now once it is done, then you have you can select any pages.
Let's say I go to any section over there, OK.
And I selected I click on one of the buttons over there.
OK, now for the moment you do that, there are multiple request has been sent to the web server.
OK, now you can select any of this request source, OK?
And the moment you select any one of them, you get all the daps open up sync headers, preview response,
initiator timings, cookies, cookies.
Sorry.
At this moment we are interested about headers of the SDP.
So remember this.
Whatever you are exchanging across this session while you are communicating to the web server, remember
it's all SDP and all Cádiz request and the response.
Right.
So this header will give you an idea about board response header and request of do you see this?
There are there are basically four parts of a general response header request will first talk about
the request header.
What we just requested, we requested for this.
What was that?
The postal tab under the demo test fired off that.
Right.
So let's open the request header.
And you see, this is what has been requested.
This is the request you are that the site requested for the first site is the demo test.
Find out that this is what it is and that has been requested.
And you can even see the results.
You can get the idea about what encoding has been used.
This is all about the request header.
OK, and when you look at the response that came back, you get the idea what all it did was right.
You get the idea about it.
Is the response coming back from the server side.
And when you look at the general file, that's where the things become even more and more simpler,
because this is where the overview of the entire session basically happened.
What is the or what is the basic stuff request and the response.
If you remember, I talked about in the request, there are multiple methods.
So that is a get request.
There's a post request as a put request and there's a building request.
This is all methods.
Right.
And while while we get the response from the Web server, we could have any kind of response code which
could be starting from hundreds of years to five, five hundred to you.
So you see, this is our resource that we have asked for, demo test fired out, not indexed GSB and
then Kushima.
That means it's a search query which is being used.
The content is Postum because we click on the person that.
Right.
You see it is a request that means we asked for certain resources.
We click on the personnel and we want to get what all resources present on this content.
Right.
And we get the status code as two hundred.
Okay, that means everything is good.
You are ready to receive all the content with the remote addresses.
Does this is the fair policy.
I'll talk about all this in the next section and the scatty schoolkids will give you just just for information
is very important to Tukey is important for the Web service to remember the identity of the user.
Nowadays, for all the e-commerce site -- plays a very, very important role.
So if you remember, if you can if you can recall when you purchase something and let's say you go back,
you have your coffee, you have your lunch and you come back, but you even if you restart your machine,
you still see something in your car that happened because the the the e-commerce side, maybe Amazon
still remember you based on your cookie.
OK, that's what the purpose of Cookie, basically.
And in fact, the system of apps are also know about what is the user agent and everything.
And it can also remember what kind of a platform the server is used making use of.
It is a battery or whatever it is you see in the response header.
You even get to know the server which has been built, the al-Turabi.
It is an Apache, right?
So that's specific, it is.
Let's go a bit more detail.
We'll talk about Barb will open up a bulb suite.
This is how you can look into the browser.
You can open up Boxwood, which is being used for Web application, testing, application, security
testing and penetration testing as well.
If you even open and you get the idea about how this works, it is nothing but a proxy.
So all the request that goes to the Web server first goes it all goes through the proxy.
So if the proxy allows the traffic, it goes it will be allowed and sent to the Web server.
If a discard, it won't be it won't be going to the Web servers.
Right.
So that means everything that now goes directly from your Web server to the from your Web browser to
the Web server now will be going through the proxy and its proxies, but it will be having the very
key decisions in between, you know, in between the section.
But for now, I wanted to show you how this all works.
So for this, what you can do is
for this we can keep it off and I can just turn it on.
Let me.
Go to any of the site.
Let me keep it off.
Open the browser.
OK.
Now, the moment I start the descent, whatever I type.
We'll be going to the Web where you see the moment I hit Enter the question goes to it, if I forward,
it will be forwarded otherwise.
Now, this is again, another request.
If I thought it would be forwarded, if it is not, then I could see the request over here to this is
another request coming in, right?
You can keep sending whatever you would be doing on your browser.
It will be coming to your proxy.
But it has a request.
And you see this request.
This is for this home was damaged or tesfai connection is this goes what is the what is the browser
screwed this chromium and use user agent.
This is the type of his agent and everything.
What is that if we have searched through the Google.
So that would be the referral and everything.
Right.
That this is how we understand what all that is happening.
We can even test what would be the response really looks like.
So this is how we analyze the beheader in much more detail.
You can make use of your browser.
You can make use of any proxy, the free proxy as well.
We can make use of all of us zap.
We will be making use of Bub's to be very specific, will be making this obsolete heavily throughout
the session.
And we'll also be making use of that throughout the session as well.
So fasten your seat belt and get ready for this.
Thank you.