Welcome back everybody.
And in this tutorial our show you some of the basics of burps it how to know how to intercept packets
how to you packets how to your responses and so on and so on.
You will.
This is also a great way for you to learn more about the package themselves and learn more how an ATP
for example get requests to post requests look like and one you will be seeing them.
So let's first of all run our suit.
So for that just type in your terminal burp suit or you can run it through the applications right here.
It will open up in the exact same way as we can see right here.
We get the message again.
So just click here.
Okay let me just close the terminal right here and here you just go on temporary project.
Project next and then start burp
every time you open the burp suit.
You will notice that under the proxy settings right here the intercept is always on by the default.
So that would mean that if I go on to my Firefox for example and try to load for example Twitter dot
com it will never load it until I forward the packet or turn the intercept intercept off.
So it is useful if you want to watch the packet so we can see the first packet how it looks.
So I requested this page with the protocol ETP one point one.
The host is Firefox dot com.
So basically and the user range it is Mozilla 5.0 ALL THESE THESE ARE JUST MY information since this
is an entity request I am sending this to the server so we can forward it but you will notice that there
will be another packet.
So basically there will be a lot of packets that you will need to forward in order to get to the website
as we can see even though I forwarded the first packet.
It is not still on the website itself.
So let me just forward all of the packets and once you do not get any packet anymore you should be loading
the page as we can see.
There are lots of them.
So this is a big Web site.
In the previous video we did the same with the virtual machine and you saw that I only needed to forward
one packet in order to get to the page of my virtual machine.
But from now on I had to forward several of them.
And right now I should have Twitter loaded as we can see it is not loading anymore.
I forwarded all the packets and I received all of the responses from the server.
Now in order to check that you can go under ETP history and you will see right here all of the domains
all of the websites that you visited in the process of connecting now there are a bunch of these detect
portals you will always have them.
You just want to find the website that you're searching for.
And in mine you find that you can see the response to all of your requests as we can see.
Maybe it is easier for you to view it right here.
So here we have Twitter dot com.
That is the page the search for.
And here we can see the first request that we sent in order to check out the response on that request
that we sent.
You just click here on response.
And this is the response of the server.
And as we talked before it is consisted of the head and body.
So here we have the head and with a bunch of these set cookie options.
Let me just find them I just saw them I can see.
So basically this is just a body right here starts the body which is the age the email code.
We talked about that.
But let me just find the set cookie option here.
This.
So basically this is the option that I was talking about in the HDP response video.
This is the cookie that the Twitter set for us in order to track our session.
So as we can see the option set minus cookie and this is our cookie right here.
Now there are a bunch of the things in the cookie as well as path domain secure which means HDP only
set cookie may max age expires.
It basically says when does the cookie expire.
So it expires on Monday 18 February 2019 which means it expires today on this time.
So that's one of the things that we covered here.
We can also have the status status code which is 200 OK we successfully loaded the page so we got the
status quo 200.
These are just bunch of the options that we do not care about.
So we can go down here and here start the HDMI code of the page itself.
So this is what we load it is basically a huge code.
So we do need to watch it since the Web site is quite big so that's how you can check the request and
the response of a certain package.
You can go on to the post here.
We have a post request.
You can check the response right here.
Here is the request.
Now these are there are some of the options that we do not care about for example this is not really
that important to us.
Now what is important is that as a turn the intercept on once again.
So if I turn right here off and turn it on and here.
So let's say for example I want to log in now.
We said that the packet that we send with our username and password will be a post request.
So once I type here The Post through the username and password we should be sending the post request
to the website.
So let us try that.
If I just I hear anything and press here.
Log in.
You will notice that it is logging since we turn the intercept on.
But right here we have the packet that we want to send as a post request.
Here we can see the basic ETP headers a structure.
And here we can see user name or email for double use and password Five W's so we can see our packet
from here if I forwarded it will send to server the user name and email with this user name and this
password right here and these are just bunch of the things that we do not care about at the moment.
Now if you for example turn the intercept on or forward this packet that is just forward it and forward
a bunch of other packets it doesn't really matter.
It will give us an arrow that this account doesn't exist.
So you might be needing to forward a couple packets as we can see there are no longer packets arriving
so we forwarded them all.
And it says the user name and password to enter did not match our records.
Please double check and try again.
Now let's try to change that in the search.
Let's change the packet itself.
So let's just go back one page.
We should go to the logon page once again
now.
Also I forgot to mention that using purple suit your name Internet might be slower and you will be loading
pages a little bit slower than usually but it is not a big deal.
So we can see that this.
Let's just go to the new menu page.
It doesn't really matter.
Twitter dot com.
It could be that my intercept is on of course.
That's why I couldn't afford it.
So let's just turn it off and we loaded the Twitter page.
Now let us turn the intercept on once again and let us send again the same user name and same path four
which is five w's.
And if I click here log in you can see that it is stuck since our intercept is off.
Now let me just.
This is a previous package.
It doesn't matter.
Here's our packet packet.
And here let me try to change the user name into for these as you can see for peace.
And if I tried to forward this packet and forward all the other packets it will still give us the wrong
user name and password but it will show that the user name wasn't for WS it was for peace.
As you can see right here without any interaction with the page itself through the web browser we managed
to change the user name through our burps it so that is another useful thing to know.
It will be used later on in order for us to brute force Web sites.
For example you just add a password list and you change the packets as they add as your former them
and it tries every different password instead of the password that you specified right here so we can
turn the intercept off right now.
And as I said before in order to check the websites that you visited you can go to the ATP history or
onto the target.
And here you can also see the website that you visited.
Now there are a lot of other options that I will show off that I will show you later on.
For now on it is enough for you to understand that there is a request and response that you can check
out in purple shirt.
And also you can change the structure of packets.
You can also lead some of the things you can also change usernames passwords.
For example you can also
let us go back once again.
So we go back to the log in page intercept on.
And then if I just type here something.
Once again no it doesn't matter what the user name and password is we can say it is stuck and here the
post request with the user name for WS and past for five Ws we can change for example the user agent.
Now if we delete this we will no longer be sending our information to the server who will not send our
basically our what version of Web browsers are we running and what operating system are we running.
So it is good if you do not want the server to know the sum of the information about you.
So if we forward this packet you will get some of the other sites forward them all and let us finish
this these couple packets.
So once it finishes we get the same error.
But if we go right here and we go to the A.P. history let me just go right here to the Twitter and find
the packet
where we sent it.
It should be all the way down I believe.
Let me just find it.
Log in there log in there.
Kay we basically just want to find the post requests here.
There are certainly post requests.
And as you can see right here the different difference between these two which this one was the previous
one and this one was the one we sent right now is that this one has the user range it which basically
says that we are using Mozilla 5.0 Linux and this one below is the same request with the same user name
and same password but we deleted the information about ourselves.
So the server will no longer be getting the information about our browser and our operating system which
is another layer of anonymity for you so that's about it for this story all these were just some of
the basics and me showing some of the things for this program.
We will continue in the next lectures and I hope I see you there.
My.