Hello and welcome to the next video. Trusting burps a
certificate.
Now, this video, what we are going to learn, send
this video, we will learn the basics of herbs, you
certificate and why we need it.
So to learn more about burps, his certificate. Let's
open calendar. Next machine.
Now guys, I'm inside gallon and it's machine and we
are learning about Bob CA certificate. So to
learn more about it. Let's open the browser.
And the website is running
here. Let me check my proxy.
I would like me to move it first in preferences.
In settings, no proxy.
And then you could click, okay?
All right.
Now we're learning about Bob, see certificate.
I can die. Burp.
CA certificate.
Enter.
Have you can see here that?
This is the official website portswigger. Net. You can
see installing burp, CA certificate so you
can click it and open the link in your browser.
If you go.
All right.
So insulting, burp. CU certificate.
Nobody steps on all necessary. If you want to lose an
external browser for manual, testing with bow.
Basically, Bob also comes with its browser. But
as you know, that we are using external, browser
means Mozilla Firefox. So and we
are performing manual testing. So that's why does
necessity if you prefer, you can just use
burps Android browser. We just beat them to go to work with
proxy already. Alright, to access
the browser. You can check proxy intercept. A band Clique open
browser, but we are using external browser, which is
Mozilla. So that's why it is necessary.
The process for installing birth certificate.
Where is depending on which browser is? So basically it
depends on the type
of browser you are using for testing.
So please select the appropriate link below
for detailed information about so we will
check it out. Let me come down.
The meaning for a thing is why we need burps. E-certificate.
Why, why should I
install it?
So let's learn about it. So, one
of the key functions of the ALS patient transport layer
of security is still time to get the identity of web servers
that your browser communicate with. So if your browser
is communicating with the web server, for example,
if you are opening a website with needs
of integration process, helps to
prevent a fraudulent or malicious website from from
masquerading as a legitimate. One example, if
you are opening a fake website or fraudulent
website, so it helps to
prevent it exam. Believe it. Also includes the
transmitted data, implements Integrity checks to
protect against man in the middle attacks. So we know about
man in the middle text is also called sniffing. So to prevent
sniffing it, can encrypt the data which is
transmitting and the network in order to
intercept the traffic between your browser in destination Letterman. Bob needs
to bring the TLs connection as a result
if you try and access the https URL.
Light bulb is running your brother will detect that it is
not communicating directly with the HTTP website.
In testing weird issue to be perfect. For example,
if you're testing a website like Instagram or Facebook, right? So
when you will try to intercept the
request inside both feet, so
Obviously, Bob needs to break a TLS connection.
So what will happen? The the
browser will detect that. It is not able to communicate with
the server because it is communicating with the real food.
Food is in middle. So it will show
you our security morning. So, to prevent the
issue of generates its own TLS certificate
for each host signed by its own certificate of
authority. See it. And the CEO certificate is unit. The
first time, we Launch Open store locally. So basically, if
you want to test HTTP website and
without any security warning, you need to
install this Bobbsey certificate inside your browser.
Otherwise, I can show you
a security warning if you try to test a https website.
Obviously, with HTTP website, that will
be no problem because the previous video we have
captured intercepted a request, but
your friend testing you
have to use HTTP websites, then surely
you need both see a certificate. So that's
why we need
both C's and if we get inside browser, so if you have bulbs
to use a different install in your browser, there will
be no security wanting somebody will try to test any kind
of website. All right.
And you can see that there are various kind of birth certificate
for different different.
kind of browsers for, you know, that we are using the
Firefox. So we will try to install this
one, the first link.
So after installation of the certificate, you
won't get any security warnings and you
will be able to test any kind of website.
So this is all about the birth certificate.
I hope. Now, you know why we need birth certificate
inside browser and the next
video on how to install CU certificate
in browser.