Burp Suite is a gooey based collection of tools geared toward Web application security, artistic.
No, actually, it is one of the best known as bot for proxy tool.
And there is a free community edition, mainly content their tool is used in many with distinct.
So from here.
Typekit Burp Suite, you can find it here, the community edition, as you can see, OK?
And here you need to accept the conditions and click on next.
And start the Burp Suite.
OK, now it is up and as you can see, it is capturing.
By the way, you can click on the proxy.
You can see that intercept is on currently, so I can turn it off.
OK?
But we want to go to the option from here and here you can see that we have an interface to look at
who's on board 880 now go to the browser from here again, click on that proxy to intercept this.
Keep it as on.
Now, if I go to Google Dot com, for example.
You can see that we didn't capture anything.
Now, why is that?
Because in the browser itself, we didn't edit the proxy settings, so we are not opening as a proxy
to capture the topic.
Now we have to do such a thing from here, from the tools to the preferences.
Scroll down until you see, then it makes you think.
Click on the settings.
And here you can see or use system or manual.
Actually, we want to use the manual proxy configuration.
Now it will be as we saw digital zero 0.1 and on board 880 and click on auto.
Use this and we are ready.
Click on OK.
Now, if I refresh this.
Click on Advanced.
You can see that we are having a problem with the certificate.
Now why is that?
Because this is something external, not internally.
So if I am opening a website inside the system, it will not.
It will work.
It's OK, but because they are using or running, as you can see, the browser detect that there are
some men in the middle attack.
So that's why we are seeing because we are intercepting.
So if I refresh this, it will do again the same thing.
Now how to solve this issue?
Actually, let's go to that Burp Suite from the option here.
You can see that we can import export see certificate.
So its origin rate, as you can see, click on.
Yes.
Then in the browser itself, go to the edge.
FDB, bear this into.
We are inside it here.
The CA certificate downloaded.
Now let's open it.
So here you can see.
Here are the details of it.
Now in the browser itself, now from the privacy and security.
Scroll down and can you see view certificate from the authorities?
Import and choose the certificate?
And yes, you can see the trust this year to display the website and click OK.
Now, if I go to Google this time, you can see that it is working correctly.
If I return back here to the property or intercept the intercept to be on again, let's put here.
Anything and, for example, Google, you can see that it is still binding until you can see that we
are seeing that traffic this time.
So you need to forward it to keep forward, to see what is going on.
As you can see.
And finally, it is working, as you can see.
So if I click on, the intercept is off like this, it will work normally with without any problem.
OK.
No, actually there Burp Suite is a very huge topic, we can't cover it.
All of its aspects.
But don't worry, we will use it in practice once we reach the practical depths.
S..