Welcome back, everyone.
This is fresh and this session is about going back to Inglewood SCDP.
I know you have got a got in basic idea about what's what SCDP is, but this is very clear your mind
and will make you understand what all happening behind the scene.
All right.
So let's get started.
OK, for this to understand, if you remember correctly, I talked about I talked about I relate everything
related to how the browser and how the interaction between the browser and the web server happens back
and forth.
Right.
So for that to test, we need a browser.
OK, and you don't have to go anywhere as well and pick up our favorite browser.
That's Chrome.
OK, so let me go there and we'll make use of Chrome browser.
And let's say you go to any any random site, try to go to any random site I'll make use of.
This will be our testing website to our decision, OK?
This is a demo site, and what do you need to do is while testing any site, maybe it's Google or anything,
just go there.
You will find an option in more tools and developer tools.
OK, so now what next?
You have to select the network, keep it all OK.
And now once it is done, then you have you can select any pages.
Let's say I go to any section over there, OK.
And I selected I click on one of the buttons.
So there.
OK, now the moment you do that, there are multiple request has been sent to the web server.
OK, now you can select any of this request resource.
OK, and the moment you select any one of them, you get all the daps open up sync headers, preview
response initiator timings, cookies, --.
Sorry.
At this moment we are interested about headers of the EDP.
So remember this.
Whatever you are exchanging across this session while you are communicating to the web server, remember
it's all SCDP and all caddy's should be request and the response.
Right.
So this header will give you an idea about board response header and request kind of.
Do you see this?
There are there are basically four parts of general response header requested.
It will first talk about the request header.
What we just requested, we requested for this.
What was that?
The postal tab under the demo test fired off that.
Right.
So let's open the request header.
And you see, this is what has been requested.
This is the request you are that the site requested for the first site is the demo test fire department.
This is what it is.
And that has been requested.
And you can even see the resource.
You can get the idea about what encoding has been used.
This is all about the request header.
OK, and when you look at the response that came back, you get the idea what all it is, right?
You get the idea about it.
Is the response coming back from the server side.
And when you look at the general tab, that's where the things become even more and more simpler, because
this is where the overview of the entire session basically happened.
What is the or what is the basic stuff request and the response.
If you remember, I talked about in the request, there are multiple methods.
So that is a get request.
There's a post request as a put request and there's a benefit request.
This is all methods.
Right.
And while while we get the response from the Web server, we could have any kind of response code,
which could be a starting from hundreds of years to five, 500 to you, etc..
So you see, this is our resource that we have asked for, demo test, fire, dot that starts and next
GSB and then Kushima.
That means it's a search query which has been used.
The content is Postum because we click on the person that.
Right.
You see it is a request that means ask for certain resources.
We click on the personnel and we want to get what call resources present on the content.
Right.
And we get the status code as two hundred.
Okay, that means everything is good.
You are ready to receive all the content with it.
The mode address is this.
This is the refresh policy.
I'll talk about all this and the next session and the scatty schoolkids will give you just just for
information is very important to Tukey is important for the website was to remember the identity of
the user.
Nowadays, for all the e-commerce site, -- plays a very, very important role.
So if you remember, if you can if you can recall when you purchase something and let's say you go back,
you have your coffee, you have your lunch and you come back, but you even if you restart your machine,
you still see something in your car that happened because the the the e-commerce side, maybe Amazon
still remember you based on your cookie.
OK, that's what the purpose of Cookie, basically.
And in fact, the system of apps also know about what is the user agent and everything.
And it can also remember what kind of a platform the server is used making use of.
It is a battery or whatever it is you see in the response header.
You even get to know the server which is being built, the Altura.
It is an Apache, right?
So that's specific, it is.
Let's go a bit more detail.
We'll talk about Barb will open up a bulb suite.
This is how you can look into the browser.
You can open up Boxwood, which is being used for Web application, testing, application, security
testing and penetration testing as well.
If you even open ended, you get the idea about how this works.
It is nothing but a proxy.
So all the request that goes to the Web server first goes it all goes through the proxy.
So if the proxy allows the traffic, it goes it will be allowed and sent to the Web server.
If a discard, it won't be it won't be going to the Web servers.
Right.
So that means everything that now goes directly from your Web server to the from your Web browser to
the Web server now will be going through the proxy.
And this proxy is.
But it will be having a very detailed solutions in between, you know, in between the section.
But for now, I wanted to show you how this all works.
So for this, what you can do is
for this we can usually keep it off and I can just turn it on.
Let me.
Go to any of the site.
Let me keep it off.
Open the browser.
OK.
Now, the moment I start the intercept, whatever I type.
We'll be going to the Web where you see the moment I hit Enter the question goes to it, if I forward,
it will be forwarded otherwise.
Now, this is again, another request.
If I thought it would be forwarded.
If it is not, then I could see the request over here.
So this is another request coming in, right.
You can keep sending whatever you would be doing on your browser.
It will be coming to your proxy.
But so it has a request and you see this request.
This is for this close Detmold or Tesfai connection.
Is it was what is the what is the browser agent, the scrutiny and user agent.
This is the type of his agent and everything.
What is that if we have searched through the Google.
So that would be the referral and everything.
Right.
That this is how we understand what all that is happening.
We can even test what would be the response really looks like.
So this is how we analyze the beheader in much more detail.
You can make use of your browser.
You can make use of any proxy, the free proxy as well.
We can make use of of us zap.
We can will be making use of Bubbs to be very specific, will be making this above so it heavily throughout
the session.
And we'll also be making use of that throughout the session as well.
So fasten your seat belt and get ready for this.
Thank you.