Hello, and welcome to the next video. Spidering in
Community Edition, latest version.
On this video, what we are going to learn. So we are going to perform
spiting process, but in latest sweet
person and I'm going to explain the
whole process.
So look me up in the lab setup.
The guys, I'm inside Kali Linux machine and this is the
latest version.
In the previous video we have known
that how you can use a spy ring.
In the old version of bird feed in the
latest version of Kali Linux. Burp, Suite
is alphabet it. So you weren't able to find spidering
option in latest version of
birth.
So if I open briefly, tell us about
food, you can see here that no
sparring, option is available here than what you can
do. In this case of Italy, you are not able to perform spotting process
and Community Edition of Grey
freed. Yes, obviously, if you purchase a professional, wasn't
a bird feet, all actions are available there, but for
practice problems, how you are going to perform spidering.
I think means that we are not able to perform sparring
directly from birth. We need to take
help of some other two so that we can create a proxy
to perform.
Fighting process in latest version
for free.
Now fortunately, we have another tool which we can
use and we can take off the
stool to perform sparring in Brookfield that
you will name is zap provided
by IOS app, which is that attack proxy
and is also open source tool provided
by OS. So we can take help of
Zap and then we can make it to proxy and
then we can transfer. Or is it a weekend set?
Roxy inside Saturday
proxy. So that request will be redirected to
breastfeed.
We can do this.
Alright, so
let's check in proxy in options.
Sewing options. We have proxy settings, oxy,
listeners of living here. 127. 0.
0. 1. + 40 is 80 80. Alright, intercept
should be on. Yeah. I
just want him now like to minimize this.
So we are not able to perform spidering directly
from burps. Eat, that's open in Kali
Linux.
So, you can click here.
Search web application analysis. And here
you can see this app is available. Here is called Saturday
proxies. Let's open this. Click inside Kali,
Linux.
It also has various other options, like spidering and the
active scanning.
Accra.
Cigars that you can see here that this is OS Plus
app.
Now get me started. So what
is sap? Why do we use it?
So you can read his app is an easy-to-use integrated
penetration testing tool for finding.
1 little Beauties in web applications, so
We can use that attic proxy to find where it's kind
of all of it is in web application. For example, injection. Will
Liberty craft festival involved across Olympus forgery, and important
thing is it is open source.
So you don't need to pay for. It is open source provided by
OS so you can use it easily in Kali Linux,
as well as in Windows machine. We are
using in Kali Linux.
All right. Now, what we're
doing here, so
What we have a Target test psp.com. Now,
we cannot perform spiralling that are clean. Perfect,
because we don't have that option in Community Edition. So what we're
going to do we are making zap as
a proxy.
You can also say it has a
mediator. So we will take requests inside
zap first and then Saturday during
the request to burp Suite.
So, we are taking this tool as
a proxy.
So this app is going to perform all kind of
scanning, and the results will be redirected to
proofread.
All right. That's how you can use zap
and breadfruit to perform
sweating process.
In the latest version of Carol next, all
you can send it to us version of perfect.
Okay. So now the next step is to
set proxy settings. So what you
can do here, you can click on settings. Here.
You can see this button. So thick hair.
It will show you all kind of settings
available for Saturday proxy.
Here we go.
so,
you can click on local proxies, first of all, so,
You can see here. Port number is 808-160-8080. You
can change it to 8081 outside so we
can do here if it is raining like this, 8080 to
change it to 8081 local office.
Fine,. Port number should be a delayed one or any
other.
Do not use 800 hair.
Next is we need
to check.
The proxy settings here.
So, let me check what it is.
So you can click on cutting connection, right?
And come down so
you can see use proxy Jane, right? So
what you been doing here, you're supposed to fall selected using outgoing
proxy server. Then provide address
to address should be localized, 127. 0.
0.1, and port number here. You can provide 8080.
Alright, redirect to
this IP and port. And we
know that both shoot uses this IP address
in port number as a proxy listener. So
what is going to happen? We will
take requests inside. Sap sap is going to perform scanning and
that will be redirected to Bourbon Street.
On address localhost port. Number 8080,
All right. So these are the
two settings in connection. Use it as a proxy server change,
the IP address and port number set it.
and,
If you come down and in local proxies, you just
need to change the port number 28081 and
we are done so you
can click on, okay, and we have set all the
proxies inside Zelda proxy.
And we also have broke Freedom label here.
It is Rich's using proxy. 127. 0.
1 + 88 is a phone number. So we
are all set intercept should be on.
Here we have done that a
proxy.
the next thing is,
we need to visit a browser.
And we need to change the proxy settings of
browser because we need to set the port number 28081 because
app is using 80812 now.
Oh, let's do one thing. It also
contains its
Browser, which is freaking field. So, let's
open this browser. Didn't see his Mozilla Firefox. So
let me click here and let me open this Mozilla Firefox.
Should I say I have you do more than a Firefox. Has open. Explore
your application with zap? So let me move the
you out of there and let's test it
HTTP s colon
slash slash test BHP.
Dot-com hit enter.
If you go.
Wake me up in foster Falls Saturday, proxy
year.
Now, guys, you can see that inside Saturday
proxy. We have the website here, right?
So, we have visited the browser and
inside browser. We have used this
website, Saturday proxy have
intercepted. All right.
now Nexus,
we need to perform spidering process
so you can right-click here. And
do you can see, there are various options available here. So
inside those you can select attack in a deck, you
can see spidering is available here so we
can perform spotting in Saturday proxy and then we can redirect this to
grab food since Pride. Ring. We have active
scan. We have a jack spider, passing place
on asking. If I open bird feed
suet bird food. We only have one request. That's fine
because the request has been accepted by
Zelda proxy. And Zelda, proxy has redirected it
rips it, but we have not started the writing
process. So you can see here in
a city PS3. There's only one day that label. All
right, now, let me start the aspiring process in
Saturday proxy.
Search for get Morty.
So right liquor, let
me start a basic spotting process and you can click on
this. So this is the website. All right.
Now, let me start the fighting process
starts can alright.
So it is providing you information about these URLs.
Like robots. EXT site map. XML right
now.
If I go inside Brookfield, you will also see the data
same data. So you
can see here that it is still
coming because Zappa's redirecting
the request in Brookfield. So Deb
is transferring data.
2, Birch Street.
So you can see in the, I shoulda Peachtree. We have robot
star, txt information information of
test. BHP. Wonder bible.com website.
So, we are able to perform spidering process with
the help of data Tech proxy tool. I can
see it. Let me perform some of the tasks. For example, let
me try.
Ajax spider. Spider start scan.
All right.
Now, let me go back to Burke feed and we
can do a
weekend at this website to scope. So I
had to school here.
Yes.
Swing Target have added this
website to scope.
Right-line truck.
See, we have this.
Let me go and send us up. Let me forward this request
forward. Everything.
Right.
Okay.
No, let me go back to.
Is that a proxy switcher? Still running?
And see here that's taking some time. So it
will surely a big daddy tyneside Brooks Street. So that
way you can perform check
this that does the same. You are
available in that block, list. Settings.
Chemical, write. My
date means that Saturday proxies redirecting
data to breakfast and we can
check the daytime set books to read.
Great.
Supervisor, that's how you can use their deck
proxy as a proxy, to perform
spending process inside Brookfield. So you
just need to set proxy setting
inside is that, and then you will be able to redirect all requests
or just clear
the data from the attic proxy to proofread.
And you can check all the data in Brookfield.
Christ.
So this is all about the spending process in latest version of
Bradford. In the next video. We are
going to learn about scanning process.