Hello everybody and welcome back.
In the previous lecture we discussed what was an HDTV request and right now we will discuss what an
age GDP responses.
So as I said they are very similar to the responses.
Basically what servers since back to us for example when we sent an HDP request with to get and then
some in the name of some page we basically want the server to send us that page back.
So it will send us the HDP response e the email code of that server and that's how we load the pages
so that the C the basic structure of the HDP responds.
Here I have a picture and let me just enlarge this a little bit as we can see it right here.
The upper part is the header.
The center of the HDP response.
As I said the HDP responds the consisted of two things which is the header and the body in the header.
We get these information about the server and in the body we basically get the content on the website
each team our code which is basically just the page itself.
So the HDP response starts with the protocol which is current version one point one and then the status
code the state's code basically represents the to Congress right here as we can see it represents the
operation was successfully done.
Now you can also have some of the other codes right here for example if the number right here starts
with four.
That means that you have also an error in a request if the number of cures does for example with five.
There is an error but this is not an error on the client side.
This is an error on the server side.
So the four hundred and then some number is the error in the request site or on decline site and the
500 and then some number the error on the server side also as you said to means that operation was successfully
done and the three hundred means redirection of the Web site.
So for example you try to visit some of Web site and it redirects you to another Web site that will
be specified with the status code of 310 something.
Now there are some of the things that we need to remember right here.
A date doesn't really matter to us that much.
The server is basically important since it keeps us the version of the uh the version and type of the
server itself as it says right here it is a patch 2.0 point sixty three Unix and it is useful for us
attackers because we basically get the permission of the server and we can use it just paste in the
Google and try to find any specific vulnerabilities for that version.
So today some deep web sites even leap out this option.
Right here in the A.P. response just because it is so valuable to the attackers.
But most of them still have it.
So who will be using this option as well in order to try to find and gather some of the other vulnerabilities
for that specific version of the server.
The next thing we are interested in is a thing that isn't freely specified envisage the response but
it's basically a set slash asset minus cookie option.
It is the server that is setting a cookie value for our selves.
So it is basically sending a cookie value that it assigns to my machine in order to track my session
so it is also an important thing.
The here you can see that each other antibody response is divided by these blank line.
So you need to remember it's like that you can basically just remember it as in the content or the body
of the response it will be an HDMI code which is easy to recognize these arrows and basically always
begins with these arrows and closes with these same arrows.
So you will easily know what the HDMI code is now.
That's some of the things that you need to know from the SDP response.
But before we continue there is another thing that I want you to know which is the ATP methods available
the methods are basically that just open my machine that is just log in.
Now we covered one method already in our first ATP request video.
We covered the get method.
So basically when I type the Google dot com or let's say Facebook dot com I sent an SRT P request with
the get method which basically just requested from the server this page.
Now there are a few other methods.
For example post had trays put delete options.
Those are all bunch of the methods that you can send to the server.
The most important for us would be the get method which we have that cover which is just requesting
the website and the post method.
Now the post method is basically sending some of the information to the server.
Now you might be asking what kind of information do we want to send.
Well a simple example would be a sending user username and password.
It is done with the post method.
So let me just open up the picture again so we open the request header.
And here we can see the get method now instead of the get.
If we did a post request it would type here.
Post.
So basically just feel testy.
So the post request would be if we for example on email type here anything and pressed here log in.
This is us sending a post request.
Now it asks.
Of course this isn't a valid account.
We can see we've got someone named Pablo Canseco or whatever that name is.
So that is sending the post request.
Now I will explain it a little bit further once we get to the verb suit installation No not installation
mode most likely configuration since it is.
It can be a little bit difficult to configure first time so I will beat you to that process.
Just for now unquote quotas and show you how you can scan with the things that we did learn already
the available methods HDP methods on a certain website so for example you want to scan a website and
see if there is a post method available had the method available the lead method available or any other
method.
You can do that with a simple map screen.
So we already covered and map before.
So let's just go into our scripts folder which is under this path right here.
Users share that map.
Scripts and what we want to find is the ETP method script.
So let me just type here.
L S in order to list and interest try to correct the HDP.
Yes I forgot the comment grab right here.
As you can see there is a lot of them.
So let me just type here.
Alice Webb and then method may be lists like in type.
Maybe it lists less options as we can see.
There it is and this is the script that we want which is HDP minus method start N S E.
So in order to run that on our OS with a machine that showed how to install before it just check you
so the IP address is not one but nine.
So we just write here and map.
And then minus minus script and then equals.
And now we will copy the script name
pasted right here and then we'll specify specified reports that it should scan.
So it shouldn't really scan all of the ports it isn't necessary.
We know that the DP ports in U.S. ports are 80 and 443.
Now we will also add the port 88 since it can be relatively commonly used as an alternative path to
80.
So let us just type here p minus p for the ports and type here 80 which the Port Authority which is
the port for each DP s and port 88.
And now at the end we want to specify our IP address of the target.
So it is that one dot nine.
Now let this run.
I'm not really sure how long it should take it should finish relatively fast.
Should we go and we can see that it keeps us the output port 80 DP open and GDP and available methods.
We can see right here support methods get ahead post options and trace these are some of these GDP methods
and potentially risky methods is trace so we can see that with this map script we can gather the available
methods for any website with a specified port now in order for us to use the packets that are going
to the website then back we need to use our proxy and for that proxy we will use purpose it which will
let us see all of our packets that we are sending and to let us change them and also it is used for
some of the attacks such as a simple brute forced onto the website the session hijacking and bunch of
other attacks.
Now the process of making the Burchett as your proxy can be a little tricky.
So I will show you how to do that in the next video.
And until then I hope you're having a great day.
Take care.