Capturing HTP traffic, so as we've gone over and hopefully you've learned HDP is the core protocol
that carries everything but doing the Web browser and the Web server, right.
So the browser sends requests to use the resources on the server and also the server sends the associated
response back to the browser.
So while penetration testing, manipulating the FDP messages is a basic and very important ability for
you to have as a penetration tester.
By intercepting HDP messages, you can edit and change any part of the message and then.
We'll see what happens.
So until now, we've just been looking at plain FDP messages.
Now we can capture and manipulate any part of the FDP message on the fly using a local HTTP proxy tool.
So a local HDB proxy tool is one that sits in between the browser and the website, intercepting all
the traffic that flows between them.
So this is best done by acting as a man in the middle and then intercepting every request and response.
It lets you intercept, inspect and modify the raw traffic passing in both directions.
Now, although there are several proxy tools.
There's one called Berp Proxy, and that's pretty much the most widely used that I've seen.
You can also use others such as that attack proxy by a WASP, and there are several others, including
Calli, but I like Proxy a lot and you will, too, by proxy comes in a suite named Berp Suite that
includes tools like Spider Intruder Decoder and a few others.
Its development maintained by Port Swygert Web security.
And the proxy tool that is the heart of burb, that's the one that intercepts all the requests and responses.
Burp can also automate customized attacks against Web applications.
And then the traffic between the server and the browser could be analyzed, modified, visualized and
eventually repeated multiple times.
All right, so Burb Sweet can be downloaded from Port Swygert dot net.
There are three download candidates here and two of them are commercial products.
You can compare them and you can even buy them on this page, but for our purposes and the purpose of
this cause, the community edition is just dandy.
So that's the one we're going to use.
So let's click on the download button to see our download options.
And the download flavors are listed here according to major operating systems and version numbers.
Now, if you're using a different system, click other platforms.
And then you'll find the suitable flavor here.
But now we're going to use Callie as the attacking machine during our course, right, so that means
that Callie has preinstalled, a version of the community edition.
Just remember to update your system before using the tools.
And Callie.
So what does that mean?
Let's open up berp, let's click on this icon.
And a splash screen will welcome you.
Click OK, and then a project screen will come up.
Now here you can create or open an existing berp project.
But I think here, this note in red tells the situation quite clearly.
Next.
Berp gives you a way to save the configuration while working, and if you want to, you can load your
save configuration from this window.
No, I don't have a configuration file here, so I don't need to do anything, so let's click, start
burp.
Wait a few seconds.
And the main window opens.
So when I recorded this video, this is the latest version, and on the right side, there are advertisements
for the pro version and on the left side there are tasks and burp logs.
So I'm just going to hide the add.
And let's look at the tools in burps we.
Target, so this tool allows you to visualize your target applications contents in a folder structure.
It shows all the content that has been discovered by manually browsing the Web application, then it
extracts a map of the application.
And this helps to define the target scope for the application.
Proxy.
So the proxy tool lies at the heart of burps, user driven workflow.
It operates as a Web proxy server and sits as a man in the middle between your browser and destination
Web servers.
So this allows you to intercept, inspect and modify all raw web traffic passing in both directions.
Intruder.
So this is a powerful tool for carrying out automated, customized attacks against Web applications.
It's an extremely powerful and configurable, and it can be used to perform a huge range of tasks from
from simple brute force to the guessing of web directories.
So this process can help to identify Web application security flaws, repeater.
So it's a simple tool for manually modifying and then reissuing individual HTP and WebSocket messages,
as well as analyzing the applications responses.
So you can use a repeater for all kinds of purposes, such as changing parameter values to test for
input based vulnerabilities.
And other things will get there sequencer, this analyzes the quality of randomness in an applications
session, tokens or some other important data items that are intended to be unpredictable.
And here's the decoder, it's a simple tool that allows you to encode and decode data.
It's capable of intelligently recognizing several encoding format, using heuristic techniques.
Compar is a handy tool to compare, obviously, but you compare it visually, any two items of data,
such as pairs of similar Web responses, extender.
So berp allows us to add our own modules to increase burps functionality.
And the extended tool also allows us to load berp extensions from the Burb App Store.
You can view the extensions from here and list them.
Now, Project Options is a place that you can define some global properties about berp and your current
session.
And then use your options.
Well, that's a place that you can add burb and TLM authentication credentials and proxy information
while testing.
You can also add your client SSL certificates under the SSL tab if you need them in a test.
And it's also possible to change user interface options and of course, you can also customize the user
interface right here from the display tab.