Welcome to Part Eight of this module.
It is with reluctance that I will now present Perot's proxy.
This is a very old tool which in fact predates the dinosaurs and has come pre packed with Cally not
from the days of backtrack but all the way back to the days of the original iteration of backtrack which
was wax which was based on what picks which was based on topics.
Paris is a Java based Web proxy for assessing web application vulnerability.
I probably should have mentioned in the earlier module that oh awesome zap is in fact a fork of the
code used for this tool.
It supports editing and viewing each TTP and each TTP messages on the fly to change items such as cookies
and form fields.
It includes a Web traffic recorder web spider hash calculator and a scanner for testing common web application
attacks such as ESC fuel injection and cross site scripting.
It is free and open source and it runs on just about anything as long as it's got Java to launch Paris.
We just go to applications web application analysis and click on Paris.
We could also launch it from the terminal window by typing Paris.
Now we are presented with a very minimalistic graphic user interface that makes Windows three point
one look downright gorgeous and advanced by comparison right away.
You may be wondering why would anyone use this over a wasp zap or burp sweet.
The answer is you probably wouldn't Paro saw the height of its usefulness back in 2006 and pretty much
everything it does is redundant with the better more mainstream programs that you have already seen
in prior modules to begin using this tool.
We need to open up our browser of choice
and configure the proxy settings
so we go to the menu here.
We click on preferences advanced
and then interconnection we click settings
and we will click the radial button that says manual proxy configuration.
Make sure that it is set for 127 0 0 0 1 port 80 80.
The port can be changed but there's no reason not to use the default and make sure that the use this
proxy server for all protocols is checked and click ok just like burps suite and zap Paris is a proxy
that sits between you and the website that you are surfing.
It records all of the requests and responses to and from that Web site through your browser.
We can then scan the Web site to determine what kind of vulnerabilities may be present and we can even
spider the site.
If you have been watching the other videos in this module you've seen all this before.
There is nothing that Paris does differently or better.
It is included here for the sake of completion as before I will be using a metal spoil to a virtual
machine as our target system.
Please never use this or any other tool against a target that you do not personally own written permission
to test or else you may be breaking the law.
OK let's get started.
Now we're going to navigate over to the Met a spoil machine which in my case is going to be the IP address
tender 0 0 dot 8
and we're going to click on motility any one of these would do
we'll give this a moment to load up OK and now we'll move back to Paris and there it is.
So we'll expand to this click on Matilda day and we'll go up to the analyse drag down menu and we'll
go ahead and we'll scan it
this normally takes a while against complex targets but not in this case
we can see that the results from the scan have been placed in report last scan
and it's really supposed to open up automatically but it never does so
we're going to have to open up our files to view the report.
We'll click on Paris.
This isn't the route menu session and here it is the last scan report in each PML format.
We'll launch this and it will bring up the results in our main browser window
and here we see the results of our scan against until today
so this is a dirt simple bare bones vulnerability scan.
It may take a very long time on large sites or if you're using the scan all function to look at multiple
targets.
However it won't take very long against simple targets like Metis Floyd Ebel
pretty straightforward.
We can see the requests and responses data presented in the tabs on the right.
Again this is nothing new.
If you have been following along with these modules in order but in case you are just looking at this
one specific tool what Paris is doing is acting as a middleman between your browser and the Web site.
It will grab the traffic back and forth and allow you to analyze it looking for vulnerabilities.
Paris doesn't come with any special frills though which is to say it won't automatically check your
results against any online database of vulnerabilities and make suggestions interpreting the data will
rest squarely on the shoulders of the user.
You can even trap or block requests and responses if you wanted to.
Perhaps for Eskew l injection or a little malicious activity.
This allows you as a pendant as a penetration tester to find ways to better defend a site.
We can also spider a Web site
by going to analyze and clicking Spider
for a complete explanation of spider ring please watch the first module on burp sweet.
In brief this process is building a site map by looking at all of the other ls associated with that
particular Web site.
This can take longer than the scan itself as is the case with Mantilla de Paris.
Much like its vastly superior successor Oh WASP zap does not allow you to set any kind of limitation
of the threads for spider ring.
As you can with burp sweet so do keep this in mind
and I really should have clicked start their while I was talking.
But you can see that this is going fairly quickly.
I'm probably not going to let it finish all right.
I think that's enough will stop the process
close out of this.
Now we can click one of the associated sites
and we can scan it
and that took a little longer than I expected.
OK so now if we go back to our scanning each team file
and open it we'll find that it has been rewritten with the new scan results.
In theory this file should open when we click okay and it should also update for each new scan.
It doesn't do either.
I'm not sure if this is a flaw with this particular version.
Unique to Kelly 2.0 or if this is just an ancient and poorly maintained tool.
Nevertheless if you wish to keep a prior scan you'll need to back up this last scanned report.
Each team l file in which case if you delete it and perform another scan you'll be presented with the
new scan.
Just keep in mind it doesn't seem to update properly again.
That may be a problem with this version.
You may not have that problem with an up to date version.
If an up to date version exists which to be honest with you I haven't been able to find.
But nevertheless now it may seem like I'm being unduly hard on this tool.
It's only because I don't like it and I think it should be put out of its misery.
Or at least updated to be in line with the tools that it comes packaged with.
We know from previous scans that our target motility had a great many more vulnerabilities than what
was detected by this tool.
Which means that Paris didn't catch anywhere close to everything.
As mentioned Paris does not check against any sort of database in the interest of being fair though.
If you update Paris religiously it should only miss many things instead of a great many things.
Nevertheless it is possible to find some nice vulnerabilities using Paris particularly for things like
cross site scripting.
It works kind of but realistically it is well past its prime and it's not going to be a popular choice
compared to the vastly superior burp suite and a WASP zap.
Paris is not being actively maintained at least not that I could find.
Perhaps there are some individuals out there who are working on it but the project really carried over
into a wasp zap which was the spiritual successor of this program Paris is an extremely lightweight
tool and it might be attractive for a system like a raspberry pi or chip or some other tiny microcomputer
with very limited resources so it has that aspect of versatility going for it.
And that is really all there is to say about this ancient tool.
I hope those of you who are viewing it without the nostalgia goggles are able to find some good uses
for it.
It's not terrible it's just really out of date.
Thank you.