Hello everybody and welcome back.
And right now we will try to configure our burp suit in order for us to make this a proxy and order
for us to intercept our own requests its deeper requests and responses so the bird suit which is a program
that we will use is already pre installed in clinics.
So if you go on to the applications right here and you go onto the web application analysis it should
be the first one right here.
So this is a first time for you running it.
It might ask you for a root password.
You just type it in and you open up the burbs it.
Now another way that you can open it is through the command line.
So here it will say that appears to be it would basically just give us a message about the version just
click here OK.
Doesn't even matter what it says.
And it should open up our burps it now I already configured my password so it works for me.
Basically I will just show you the process.
We will need to configure some of the things in our Firefox and also some of the things in the pursuit
in order to capture our packets.
So if you just click here or next use purple defaults click here on START burp.
And it should start in a few seconds.
Now what I wanted to say is that you can also run it through a command line with a burps.
Wait let me just notice a little bit with the burbs it and it will just open up the same thing right
here.
Just.
It will use your terminal for it.
So you can have to go to the applications and so on and so on.
So as you can see right here this is the suit.
It is used.
It has a bunch of options.
It is used for us to intercept our own packets.
Here we have some of the options such as age history here we will have deep web sites that we visited
in the current session.
And here you have the intercept.
Here you have the option that the intercept is on and intercept this off.
Now before cover all of these options I just want to show you what you need to do in order to get this
to work.
So what you want to go to is go to the proxy which is the second one from the top from the right.
Pardon me second one from the left and then below that you want to go to the options.
So proxy and then options here.
We are interested in the proxy a listener's part where you will have by default.
This one night 2 1 27 0 0 0 the one on port 88 which is listening on 880 on a local host.
Now what you want to do is select that one and basically just click here on the edit and it should open
up this small window where you want to specify the bind port to be 880.
And here you can just basically you can put here all interfaces or low back only.
I live it and look back only and you can also specify a certain address.
So for example my current IP address of this machine is 1 8 2 that 168 that one that's 6.
But I will leave it on local host an unlocked back only since I will specify that proxy in my Firefox
as well.
So just click here on the.
OK.
So on Port 880 low back only 127 0 0 0 that one click you're on.
OK and now what we want to do is go to our Firefox so open up your browser and where you want to go
is basically here on the right.
These three lines open menu and go to the preferences now under the preferences you want to go to the
general which is already open right here by default you want to scroll all the way down and find the
network proxy.
So here we can see configure how Firefox connects to the Internet.
What we want to do is basically make our Firefox connect to the Internet through our suite.
So click here on the settings and it should open up this area.
This small window by default it should be set on no proxy.
Do what you want to do is change it to be set on the manual proxy configuration.
So once you check that I believe uh since you didn't configure it before it should have only the first
one which is HDP proxy has set on 127 0 0 the one on port 80.
Now what you want to do.
Oh pardon me.
What you want to do is all of these for you want to set on the same set on the same settings which is
basically even the SSL even the FTB even the Sox host.
You want to set all of these four onto the IP address of your local host which is 127 0 2 0 1 and all
of those for want to be set on the port 880 once you set all of this for to be exactly the same.
You want to check here Sox v 5.
It should be checked by default but if it is not check your Sox be five.
Once you do that click here on OK and you should be good to go.
So if you click here settings then we can see that now our manual configuration proxy is set on the
local host.
Now if you go right here and try to search Google dot com for you it and first of all it won't work
for you.
It should say something like uh something like I don't I'm not really sure but if you say insecure connection
or something like that basically it won't let you connect to Google dot com.
But if you for example go to an H CTP website which I'm not really sure.
Let me just find any age TTP website
have anything saved.
Well we have our web application which is not a city.
Yes.
So you should be able to connect to any deep web site but you will not be able to connect to any HDP
s Web site.
Now if you have a few type here any HDP Web site and it is loading on forever you might want to do is
go to your groups with and make intercept.
OK so if your intercept is on like it is right now for me it wont let you load any page since it will
wait for you to
forward or drop the packet.
Let me just show you what I'm talking about.
If I refresh this page right here you will see that this will load forever.
It will never load the page
and in the suite we can see that it basically give us some of the ETP header request header for this
website which is just my virtual machine.
My always vulnerable machine and it will ask me if I want to drop this packet which means to discard
it or to forward that packet to that machine.
Now if I forward it and I open right here once again let me just open up my firefox you can see that
now it's loaded the page because I forwarded the package.
Now if you have that checked on which means the intercept is on you want to make it off so you can load
the page without forwarding every package.
So just click here and make sure that the intercept is off.
And now if I tried to reload the page once again it will reload it normally and open the page.
Now we want to also make sure that we can load our GDP as Web sites.
For me it works but for you it won't work until you install in your Firefox a burp suit.
See a certificate.
Basically we need to install the burps it's a certificate in our Firefox in order for our Firefox to
look.
Burps it as a trusted proxy source.
So in order to do that first of all make sure your burps suit is running.
Make sure that you configured the preferences in firefox.
And then just go once again right here so make sure that this is the same as mine.
Make sure the suit is running.
If it's not running.
This won't work.
You won't be able to download the certificate.
And once this is the same as mine.
And once you run the boot through it and the intercept is off you want to go and open up a new tab and
type here in GDP
and then Burt just that.
So once you typed that it will lead you to this page well it will say burp suit Community Edition welcome
to groups that come into addition what you want to go on here is on the C a certificate and click on
it.
It will ask you if you want to download this file you want to save it.
Yes.
So where the file is 973 bytes so it's not that large.
You just click here on the save and once it downloads you find where you saved it.
Let's just find it.
I already have one downloaded.
So I have it right here you will only have one of these.
So once you find that you want to go to your burps to it a part of me you want to go through Firefox
again to the preferences but instead of going to the networks proxy settings we want to go onto the
privacy and security settings.
So once you're there once you're at the privacy and security settings what you want to do is basically
scroll down and find these certificates should be and maybe there all the way down.
Yeah.
There they are.
So here are the certificates and you want to go on to the new certificates once this window opens up.
It will show you a bunch of these certificates too already in your Firefox web browser.
Now what you want to do is import the already downloaded certificate that we download from this website
which is NCT burp.
How we do that.
Well basically we just go onto the import right here so click on the import and find where this file
is safe for you.
I already imported it so I won't be importing it twice.
Here it is.
Just click on the file and click on the open.
And once it does that click on the OK and you should be good to go now.
After that if you type Google com once again it should be loading the CTP as Web sites as well as the
TTP websites.
Now if this didn't work make sure once again that the purpose of it is running or this will not work.
Make sure that all of these options are already set as mine and you should be good to go now.
Once we made this work for a GDP energy GDP s now we can track all of the packets going through our
own groups and as we can see right here if we go into the target it will give me a list of all the codes
that have already visited.
As we can see right here these are just a bunch of the TTP request packets that I sent in order to visit
my virtual machine which is on the IP address of 182 that 168 that one that 9 now.
In the next story I'll show you some of these packets how you can configure them how you can change
them and all of that and where you can find all the websites that you visited and specific packet.
If you search for it but for now on.
Just make sure that your burps it works and that when you visit a website so it can just show you once
again lets visit Facebook dot com.
It should open up the Facebook page and it should also have here a bunch of other Facebook domains opened
as you can see the pages that you requested will be the darker letters than the ones that it automatically
search for in order to get to the your Facebook page and we can see right here this is our Facebook
page and the ETP requests that we got from it.
So I will make sure to explain the requests and responses better in the next video.
And until then I hope you're having a great day and take care.