So let's start at burb and open a proxy tab.
New tabs are opened under proxy.
And the proxy tool is pretty much the heart of the sweet.
And by using this tool, we can manually analyze HTTP messages.
So to accomplish this, we need to configure burb as well as the Web browser to work together.
All right, so let's go to the options tab.
So here's the basic setting for intercepting.
By proxy works as a man in the middle proxy right between the Web browser and the remote server.
So that means a proxy is going to listen to a report on the local machine and we are going to redirect
all browser traffic to that port.
So that means that we need to arrange a port for burb to listen.
But it has a default configuration on Port 80, 80, as you can see here, it listens on Port 80, 80
on the local machine.
And here, one two seven zero zero to one points to your local machine called Linux.
Of course, you can change this configuration using the buttons on the left hand side.
You can easily add, modify or remove listening port or you can always restore to the default configuration.
So after arranging the listening port, the next thing is to define the interception rules.
So Burb provides a rule-based mechanism to intercept traffic directed by the Web browser.
So this way you can focus only on the request that you want to capture.
And you can add, delete or modify any rule by using the buttons on the left.
But for now, we don't need to add any rule.
But when you're doing real tests, I believe you will need it and burb also has the same mechanism for
intercepting server responses.
So you can define or modify rules for your pen test.
But you do need to check this box to enable intercepting responses first.
See, now you can define more granular rules.
OK, so now let's go to the intercept tap.
So this is the main tab that you will display and intercepted HTP message you.
And this button globally enables or disables intercepting HDB messages to analyze manually.
So thanks to these default configurations, we really don't have to do much more.
I did want to give you a little tour, so Berp is ready to work.
So let's open your browser.
And I will assume that you are using callisthenics.
And Kelly has Firefox and Chromium for browsing the web.
As I said before, I'm going to use Firefox as my main browser.
Of course, you can follow these same steps for any other browser.
It's up to you.
It is going to look a little different.
OK, so now I'm opening Firefox preferences from the menu.
And scrolling down below, click the settings button under the network proxy section.
So this window, Firefox enables us to use proxies.
And you can configure their use, so this is the first time that you're opening up here, you probably
will get these settings.
OK, so we need to enable Firefox to redirect all the traffic to port AT&T.
And don't forget the burleson's listens on this port, so check the manual proxy configuration.
Typed the IP address of your local machine, which is one two seven zero zero one.
And the port is 88 and then check this box to send, so it also sends https traffic to berp now before
saving the setting, delete this entry here.
Because it will prevent the redirect local traffic to proxy.
And nothing to add then save.
So now open a new browser tab.
OK, is Barbizon intercept mode?
The browser redirects the traffic to berp, now go to the vulnerable applications login page.
And I'll click this bookmark.
And see, as soon as you have the address, Burke gets a request.
So this is just an HTTP request, as you remember from the previous videos.
So now, after capturing the request, you can do several things.
By using this action button, you can send this request to other tools for further analysis.
Or you can say the request and do many other things with you, and if you are finished with a request,
then you can either drop or forward their request.
So I'm going to forward it.
And then see how immediately catches the associated response message.
So this is a raw response message matters first and then the body of the message comes.
Now clicking on the headers tab, you can display just the headers of this message.
And you can also perform some of the same actions here.
And then when you're done with a response, you can forward or drop it.
So, again, I'm going to forward it.
Now, because berp is in this interception mode, it's also going to intercept some other requests as
well.
So I'm going to forward all of them.
And then finally, the login page is displayed in the browser.
So burb also holds the history information for us.
So let's go to the history tab and click on any request.
And so you'll find the details about that request.
So this is how we intercept HTP messages with the proxy tool.
For better interception experience, we can install a Firefox add on so we can easily redirect the traffic
to burb.
Now, while Penn testing, it's not necessarily efficient to change the proxy settings from Firefox
each time, right.
So what do I do?
I advise you to use a proxy ext.
I'm going to use Foxe proxy and I'll show you how to install it.
But first, let's disable berp interception.
And disable Firefox internal proxy settings.
OK, so now let's go to the Firefox add ONS website.
Let me just zoom in on the page for you.
And type Foxe proxy and the search field.
Click the first result.
Then click add to Firefox.
And click, add.
OK, so it gets installed very quickly.
So after installation, you see this icon in the toolbar.
Click options.
Now, from this page, we can add proxy's to Foxe proxy.
And then later on, we can switch between them very quickly.
So click and I'll put it in the title Berp.
IP addresses are a local machine, 127000 one and port is AT&T.
Like that, you can also assign a color.
So save it.
OK, so we added the configuration.
Then you can close this tab.
And quickly, icon.
And what do you see the configurations listed here?
Now click to activate this configuration, so I think it's really a timesaver.
And go to be Web login page.
And yeah, Berp intercepts a request again.
Forward the messages.
Now I'm going to disable proxy to send traffic to berp.
And there it is, it's just that easy.
So click another page and you can see.
The traffic is not redirected to berp anymore.
Oh, and one last thing to say here, with default browser usage, you will see many unrelated messages
in Inbar, for example, browsers, safe browsing requests, captive portal requests, crashes and reports.
So don't be disturbed by all these messages caused by these features, but you can disable them.
In fact, I recommend it go to about config.
And confirm the message that pops up.
And change the settings that I'll show you here over on the right side.