So, guys, in this video, we're going to talk about the basics of food and also we look at this madness.
Of course, this man inspiring is not a very different topic.
First, let me go to Firefox and set up this proxy to the bar so we can try this Foxy Knoxy from the
previous floor.
And I had just turned on this connection to the bar.
You can see here, let me preconditioned.
So what?
This is it.
These the brother request will be displayed here and you can edit as you want and then you can send
it to the Web server.
So let me show you.
So let me go on this, don't you?
There is a local college in my state.
So know the page won't read because the request has been captured by a person because the intercept
is on.
What you can do is you can forward this request to the destination or you can drop this request, deleting
the request and you can also open it.
Brother, let me click on this forward and it will ask so many requests because it's Google.
So simply, you are the father and you can see the page will be loaded here.
So, OK, we need to I think that's it.
So still, it's not ready.
So let me so this Google brother will do, there are so many requests, so I'll just Tannadice Interceptive
and you see the website Rody.
You know, I am not getting the websites.
Soccer opened in a Newtown.
All right.
Let's open another Web site.
Well, that was certainly not working out, is she not, Ragman website?
And the record here in Studio three tab.
I can see the history of the war because we can start using the time also.
As you can see, if out this time the most recent course would be on the up.
So after getting that Ragman request, it also got some font's and other content from other websites.
So what we can do is you can see the request here, the number of requests, uh, and the hostname and
the matter, which is the GDP request matter and the order to the destination and the parameters, there
are any parameters to be checked and the status will not one and the length of the request and you can
see the IP address and so on.
So there is so much information going on.
You can see the detailed information of this request and response.
So can see get to the socket that I will hold to the region to accept, accept and accept language,
etc., there is information about my station and also there is a response which we got from the.
And.
So this is the requestion response, you can watch and watch it for every request, every now and she
will be back.
So it's been considered a request and the response.
So you can also capture the request and you can modify this headers, so let me click on this intercept
on.
So you can see that this should be not one that is that we are asking right next to the horse track,
where you can also change one dot com, maybe, maybe does not exist if you follow this one.
I.
We get for not.
OK, because it's not there in answer we are asking, correct me, one dot com, so let me click on
this.
So now we got the card.
So I just manipulated this the my name to show that we can edit the request and the response she got,
which you can see there is a track we will not call the what if this one.
OK, no, we can try this, you can see we can see particular parameters and you can also see Harrison
hexadecimal values.
So that's what this proxy and you know, we are going to see the target.
So as you can see, there are so many domains.
We are we still aren't sending the GDP data to track.
Meet has sent some request to some other websites to get the finance and other data.
So what you can do is you can add the particular interest domains to the scope.
So what this could mean is you are actually adding subdomains to the scope and you are interested only
in that scope items.
So it will be easy to filter worktop are what the winds are relative to your interest.
Now you need to go to the scope and you can add your order here.
One of the best ways to click on this and click on Add to Scope and you can use and you might react,
may not come easily to score know to filter only the scope.
I need to click on this.
It will say some filter options to show you and you can see where I can click on this show only in scope
items and filtering out is multi internet media extension.
Just actually forgot the name.
So it's extension.
So what do you want to see the first with the seriousness?
Yes, I want to see the seasons and images and so on.
You can also filter that.
You can also check this.
You can also filter for us whether you need to show them to photos or not and then filter before elections.
So federal system is for the pro version and we are not going to see this.
And if I want to show whether BHP Arizpe original or any other person, you need to specify the extension
here.
So if you click on this one, if I click on the stock market and click on this, I would look at all
the other domains.
What I want to do is I'll click on this and click on the show converters.
So do this now.
Everything will be hidden, except I had one dot com.
So if you click on this right arrow Mark, you can see are the photographs of this dot com.
So these are generated when we are asking for that request.
But these are not automatically generated because we need to navigate to distract me.
That is Karmanos.
So I think we're going to login.
And there will be some other, uh, for that is that is a fight that is raging, [REMOVED], go and see
the e-mail and the password and you need to send that to the website.
So this is Amanda spidering.
And if you want to generate so many data to identify some vulnerable, uh, endpoints, you need to
go to every each and everything activities and you need to go to the learning parts network, etc. So
you need to move on to every page and you need to, uh, take care of any vulnerable end points.
And point is nothing but, uh, not a hundred million or not page that does not exist, uh, alone that
you simply don't know.
OK.
So this is the man you need to move around around the website to get some of the data, but there is
a Automator spider spidering that is in the professional of.
So since this is a communication, we do not have this automated crawling or in the community in the.
If you click on this, uh, uh, Automator, smarter than the, uh, spider Lucara for the hour of the
uh, for us and each team ready to go in depth.
And it would give you are the data without you going into that manually for the, uh, things.
So that's, uh, what is automated and, uh.
That's about this Automator spidering and Magna's.
OK, but since we are using this community version, I'm showing you the, uh, this one minus party.
So pretty much you can identify the requestion responses here and you can find any vulnerable, uh,
end points or there.
So you can also see the issue definitions we have.
The order of affordability is here and you can see the description out here like this is good indication.
And I know it's commanding action.
You can see the, uh, response to a description and also the links for their vulnerabilities.
Previous vulnerabilities are the.
So let's talk about this spidering.