Web Suite is a Dewey based collection of tools geared toward Web application security testing.
Now, actually, it is one of the best known as board for proxy tool.
And there is a free community edition, mainly containing the tools used in manual testing.
So from here.
Type burp suite.
You can find it here.
The community edition, as you can see.
Okay.
And here you need to accept the conditions and click on next and start the burp suite.
Now it is up and as you can see, it is capturing.
By the way, you can click on the proxy.
You can see that intercept is on currently, so I can turn it off.
Okay.
But we want to go to the option from here and here you can see that we have an interface, the local
host on board 1880.
Now go to the browser from here again, click on the proxy, The Intercept.
Let's keep it as on.
Now if I go to Google dot com, for example.
You can see that we didn't capture anything.
Now, why is that?
Because in the browser itself, we didn't edit the proxy settings, so we are not opening as a proxy
to capture the traffic.
Now, how to do such a thing from here?
From the tools to the preferences.
Scroll down until you see the network setting.
Click on the settings and here you can see or use system or manual.
Actually, we want to use the manual proxy configuration.
Now it will be as we saw the 0.0.1 and on board 88 and click on also use this and we are ready click
on okay.
Now, if I refresh this.
Click on advance.
You can see that we are having a problem with the certificate.
Now what is that?
Because this is something externally, not internally.
So if I am opening a website inside the system, it will not.
It will work.
It's okay.
But because we are using or running.
As you can see, the browser detects that there are some men in the middle attack.
So that's why we are seeing because we are intercepting.
So if I refresh this, it will do again the same thing.
Now how to solve this issue?
Actually, let's go to the burp suite from the option here.
You can see that we can import export, see certificate.
So let's regenerate.
As you can see, click on yes.
Then in the browser itself, go to the HTTP burp, press enter.
We are inside it here the see a certificate, download it now let's open it.
So here you can see.
Here are the details of it now in the browser itself.
Now from the Privacy and Security, scroll down and you see view certificates from the authorities,
import and choose the certificate.
And yes, you can see that trust this C to identify website and click.
Okay.
Now, if I go to Google this time, you can see that it is working correctly.
If I return back here to the proxy or intercept, click the intercept to be on again.
Let's put here.
Anything.
For example, Google, you can see that it is still pending.
And here you can see that we are seeing the traffic this time.
So you need to forward it to keep forward to see what is going on, as you can see.
And finally, it is working as you can see.
So if I click on The Intercept is off like this, it will work normally with without any problem.
Now.
Actually, the burp suite is a very huge topic.
We can't cover it.
All the aspects.
But don't worry, we will use it in practice once we reach the Practical Labs section.