Instructor: Welcome back.
Time to configure the tool called Burp Suite.
And Burp Suite is a tool that allows us to intercept
and take a look at different HTTP requests
and HTTP responses.
It also allows us to change those HTTP requests
to our liking and then forward them to our target.
It is also considered a proxy,
so everything and every link that we visit
through our Firefox from now on will go
through Burp Suite first
and we'll be able to inspect all
of our HTTP requests and responses.
Let us see how we can configure it and get it to work.
So we already got Burp Suite
inside of our Kali Linux machine.
If you go onto the menu and then Web Application Analysis,
you will have it right here.
The first thing that we want to do
is double click it to start it up.
This will start up the Burp Suite community edition
and there is also professional edition
that you must pay for.
But for now on,
we're just going to cover the community edition,
inside of this course.
It might give you this error you just want to click on OK.
And in just a few seconds,
we should have the main menu of Burp Suite open up.
And here it is, Terms and Conditions,
I want to click on Accept,
and here it tells us an update is available.
I'm not really interested in the update at the moment.
Here I want to select the Temporary project,
click on that and click on Next.
I want to select right here Use Burp defaults
and start Burp Suite.
After a few seconds, it should open something like this,
and we can see a lot of things are happening on our screen.
If I enlarge it, you will see
that we get bunch of different options
with this Burp Suite tool,
but let's not think about them at the moment.
For now, let us just think
about how we can configure our Burp Suite to be used
by Firefox as a proxy.
Well, the first thing that we want to do is navigate
to the Burp Suite tool,
click on Proxy right here,
and under the Proxy we get this Options tab.
Under the Options, we will have these Proxy Listeners,
and under the Proxy Listeners
you want to select this right here
and you want to click on Edit.
If you don't have anything right here, just click on Add.
Here we want to bind to Port 8080,
and we want to bind to address Loopback only.
Once you get this set up, click on OK.
And after you got this,
what we want to do is we want to navigate to our Firefox,
and on these three lines right here,
we want to navigate to the Preferences.
Under the General tab in the Preferences,
we want to navigate all the way down,
and at the last option where we got Network Settings,
we want to click on Settings.
Here it'll ask us to Configure Proxy Access to the Internet,
and we want to set here Manual Proxy Configuration.
Under the HTTP proxy,
we want to set the IP address,
and in our case we are going to set the IP address
of our localhost which is for everyone
this IP address right here,
and the port should be 8080.
And then we can set Use this proxy for all protocols.
Also, make sure that the SOCKS v5 is checked,
and once you do all of that, you can click on OK.
Now that we did this,
if I go and try to visit google.com,
it'll tell me software is preventing Firefox
from safely connecting to this website.
And you should get this error too.
Why does this happen?
Well, our Firefox doesn't really trust our Burp Suite tool,
and currently all of the packets are going
through this tool before we can see them on our screen.
So we're getting a warning from the Firefox
that some software is preventing
from having a secure connection to that website.
What can we do about this?
Well, we can go to our Firefox,
and visit any HTTP website that we want.
It won't present us a problem for HTTP websites.
It'll only present us a problem for HTTPS websites.
But we also want to visit HTTPS websites,
such as Facebook, such as Google, and all the others.
To do that, we must type this link inside of our search bar,
which is HTTP, two dots, slash slash and then burp.
Press Enter,
and you will open this page right here.
It'll tell us, welcome to Burp Suite Community Edition,
and here we will be able to download the certificate
which we can then import inside of our Firefox,
and make Firefox trust our Burp Suite tool.
So just click on CA Certificate,
click on Save File,
and click on OK.
Once you do that, the file will be inside
of our Downloads directory,
as we can see it right here,
this is its name,
and all we need to do is go back to the Preferences
inside of our Firefox,
navigate to Privacy and Security,
and all the way down, we will have a Certificates part.
Under the Certificates part,
we want to click on View Certificates,
and we want to click on Import a certificate.
Then you want to navigate to the Downloads directory,
select the certificate that we just downloaded,
and then click on Open.
We want to select Trust this CA to identify websites,
and Trust this CA to identify email users.
Click on OK.
And also click on OK, right here.
If I go back and I refresh google.com,
it seems to still load,
it doesn't really do anything.
So why isn't it loading our page?
Well, in the Burp Suite, by default,
you should see if you go back
after trying to open Google once again,
that this Proxy will turn orange,
and this Intercept will also turn orange.
So if we go to Proxy and then Intercept,
we will have an HTTP request.
And this is a request that we just initiated
to the host, www.google.com.
We can see all of those fields that we talked about,
such as Host, such as User-Agent,
under the User-Agent we can see
which type of web browser are we using.
We can also see the Cookie right here.
And the reason why we are not loading the page
and it is still loading right here,
is because the Intercept is turned on.
This means it'll intercept this packet
before it actually forwards it to the web page.
We can forward it manually by pressing this,
or we can just turn the Intercept off
and then it'll not intercept any packets.
So if I go back to Google,
right now you can see we successfully loaded Google.
If we want, we can go right here under the Target
and we can see all the links that we visited
while the Burp Suite was running.
So we can see Google right here
and we can see all of the requests
and response that we got for the Google.
So here is the request for the www.google.com
that we just did,
and here is the response from the Google
that says Status Code 200 OK,
which means we successfully loaded the page,
which we indeed loaded,
and here is the code of that page.
Cool, right?
Now we can intercept any packets to any website.
Great. Now that we covered the configuration of Burp Suite,
in the next video,
we can go and perform our first attack.
And in the future videos,
we're also going to cover more details
about this Burp Suite tool.
But for now on,
we just managed to configure it
and we are ready to,
in the next video,
perform our first attack.
See you there.