So as you must know by now, because I've repeated a few times, Berp works as a man in the middle proxy.
So that means that it does not affect the interception of DGP messages.
But it is not the same for EDPS requests.
So open up your browser and enable the proxy to work with burb.
I will go to the B Web login page.
And then berp will immediately get the TDP request.
So there's no problem with capturing an HDP request, right?
So now I'll try to go to an HTTPS Web application and I'll try https colon slash slash WWE dot, NBA
dot com.
And this message will come up.
So I need to add a security exception.
Each time when I request this application, I'm going to face this message if I don't accept the exception
permanently.
So to use berp proxy most effectively with HTTPS websites, you will need to install burps, see a certificate
as a trusted route in your browser.
So let's just have a look at how to install it in Callies Firefox browser.
Rouse, HTP, Collins, berp.
And click on the certificate button to downloaded.
And save the file.
And after you say the certificate.
Open the Firefox preferences from the menu.
Go to the privacy and security tab and left to the menu.
And then when you scroll down to the certificate's section, click on View Certificate's button.
Now, from the opening pop up, go to the authorities tab.
Then quick on the import button to install the certificate that you just downloaded.
And just check the first option, that's enough.
You can also view the certificate properties of you on.
Then click, OK?
And we import the birth certificate into our browsers trusted root certificate authorities.
All right, so now I'm going to go back to the same Web application.
And this time, there is no security exception message.
And burb immediately intercepts the request.
Now, look at this, here it is, and HDP request.
OK, so I believe the request.
And NBA dotcom is displayed in my browser.
So by default burps CIA certificate is installed in Carly.
So you probably don't get the exception message for some reason, you may need to import their certificate,
so now you know how.