‫All right, so now we're getting there, a personal proxy gives you a direct view into how your target
‫application works under the hood.
‫It operates as a web proxy server and sits as a man in the middle between your browser and destination
‫web servers.
‫This lets you intercept, inspect and modify the raw traffic passing in both directions.
‫If the application employs HTTPS, the personal proxy tool breaks the SSL connection between your browser
‫and the server so that even encrypted data can be viewed and modified within the proxy.
‫So here's a demo setting up a personal proxy and your browser to work with each other involves the following
‫elements.
‫First, we need a proxy listener to accept a request from your browser.
‫We can use Burp Suite for this purpose, which is embedded into Kali Linux by default, Burp listener
‫uses Port 880.
‫Second, we need to configure our browser to use the proxy listener as its proxy server.
‫We can change the proxy settings of our browsers from the following menus.
‫Preferences.
‫Advanced network settings.
‫Or even simpler, we can use plug ins, such as Foxy Proxy to change the proxy settings with a single
‫click.
‫When you install the plug in.
‫A Fox icon appears next to the address bar.
‫Since Burp Suite listener listens to the Port A380, we redirect the traffic to that port.
‫Now, let's see how we intercept the traffic and modify the request.
‫Go back to Firefox, see proxy is disabled at the moment.
‫Visit HTP Colon Slash Slash NHS Dot UK or whatever you want.
‫Now open the Burp Suite.
‫In Burp Suite, make sure that the Intercept mode is on.
‫Go to Intercept tab under the Proxy tab.
‫And see, the intercept button is on.
‫So back to the browser and select the personal proxy for Port 880 from the Fox Epoxy plug in type green
‫or whatever you want into the search box in the upper right hand corner and press enter.
‫The responses caught by Burp Suite find the word we search for in the request.
‫Change it, for example, yellow.
‫Press the forward button.
‫Now there will be following requests for the resources of the website, which we are not interested
‫in, so we can turn the intercept off at this point to avoid time laws.
‫Go back to the browser, and as you see, we sent Green to search, but since we changed it using a
‫personal proxy, we have a different result.
‫Now if you try any website which uses HTTPS protocol, such as Google.com, you probably got the message
‫that your connection is not secure to be able to intercept the traffic Burp Suite handshakes with a
‫website and we handshake with ERPs week since we haven't added the Burp Suite certificate as trusted,
‫you get that message, go to advanced and add exception, then you can keep going.
‫Burp Suite makes the handshake with the website, and we make the handshake with Burp Suite.