OK, we are aware of the intercept option inside of it, but we did also notice that there are other
things here, such as intruder, repeater and others.
What are those options?
Well, they all have their own purpose.
Let's first start by checking out this target's tab right here.
So in this Target tab will be all the websites that we visited while having it as proxy in the current
session.
They will be listed in this left window right here.
Let's give it a try, for example, if I go and visit Tesla Dotcom, let's first of all, make sure
that intercept is turned off so we don't get stuck on a certain request.
Turn it off.
Go back to the target tab.
And here are all the links that we visited once we tried to visit Tesla Dotcom in order for us to load
Tesla dot com page, we had to send the request to all of these domains right here and somewhere in
here.
We should also see Tesla dot com.
Let me check it out.
Here it is.
It's last in my case.
And once you select it or once you select any of these links or domains in the window to the right,
we will see all of the HTP requests that we performed with that website.
Let's, for example, take a look at this first request, so this is the first request that we performed,
it's us trying to get w w w teszler dot com and here the beheaders of our http get request for this
page.
If we wanted to check out the HTP response, we can take a look at this right window right here.
This is the response to our HTP request.
We can scroll all the way down and we will be able to see the HTML code of Teszler dot com page, which
is this one right here.
We can print it out like this.
We can also take a look at the raw headers right here as well as the code, and we can also press the
render option.
And this will render the HTML code of that page.
And we should be able to see the page right here in just a couple of seconds.
And here it is now, it doesn't look quite that good as it does look right here, but nonetheless,
it tried to render it.
OK, now let's check out these actions right here, but let's check it out on our TV page.
So let's visit our Alaskan BBWAA machine.
Let's navigate once again to this Steve apage.
And once it floats, let us first log out just in case, because we did log in last time we used this
application, and if we go to our targets tab now, we should see somewhere our own virtual machine.
And in my case, here it is.
You should see just the IP address of your Auvers machine.
And you can see once we have the render tab, it does render out the page for us.
But let's go back to the printed response, which will give us the HTP response headers as well as the
HTML code.
Now let's try to find a request where we visit TV w a.
And let's see it right here.
I do believe it's this one.
Let us check out.
And if you don't want to scroll to all of these requests, what you can do is you can just turn on your
intercept and specify once again, incorrect username and password.
And once it intercept this request, you can click on action and let's go with repeater.
Let's send to repeater.
As soon as you click on that, you will see this repeater tab light up, it will become orange.
So for now, we can turn off int., we can navigate to the repeater and there we should be able to see
our request.
Here it is.
Now, what you can do with the repeater is you can send a certain request as many times as you want.
For example, I can try to send this request and in the right we know we will get the response.
Now, you might notice something weird right here.
We're not getting the HTML code down here.
So what does this mean?
Well, if we take a look at this response a little bit better, we're going to see that we didn't get
the code of two hundred, which means that the page loaded successfully.
We got the code of three hundred and two.
And once this happens, this usually means that you're about to get redirected to a certain page.
In that case, we can click on this button, follow redirection and it will redirect us to the page.
As we can see now, we have the HTML code and since we submitted the username and password of test,
we get the log failed the message, which is the same message that we have right here, we specified
incorrect username and password.
So we can also do the same thing that we did with intercept.
We can also do it in repeater.
We can change the incorrect username and password to the correct username and password.
For example, let's go to the intercept turned on.
Let's forward these packets.
Or let me just do it like this, I'm going to type test and then test, turn on the intercept.
And click on login.
Now, let me go and find this specific request for the TV page, and here it is now let's send it once
again to the repeater.
Turn off the intercept, go to the repeater, and here we will have once again this request.
Now you can change any thing that you want in this request.
For example, we can see the user agent tab right here that says Mozilla 5.0 and says the Linux version.
It pretty much gives the information about us.
And if you wanted to hide that information to the TV, a page and to our USB virtual machine, you can
type, for example, that user agent is iPhone seven, for example, and leave it just like this.
And this will get sent to the page.
We can also change the correct details, I mean, correct usernames and passwords to admin and admin.
And then we can send this request, remember that it will get redirected.
So we must follow the redirection and now we shouldn't get that login failure.
Instead, we should successfully log to the page.
And if we go to render, it should render out.
I logged in page, as we can see right here.
Down here, it says user name is admin.
So we successfully logged in, as it says, right here as well.
You will also notice that the next request that we are about to send has the user agent of iPhone seven,
so that is also something that we managed to change.
How cool is that?
OK, this is reporter, it is similar option as to intercept just here, it saves our HTP request.
It allows us to modify it as we like and we send it as many times as we want.
Then we can easily take a look at the response and render its HTML code.
Right here in the next video, we will be checking out the intruder option, which is also really useful.
See you in the next lecture.