Hi everyone.
This is Sadr from a degree and in this lecture I will show you how to set up verbs read with your browser.
So I recommend using Firefox as your penetration testing browser.
Whatever you do in this field do it in Firefox not in Google Chrome because that doesn't give you that
much flexibility right now.
What exactly you want to do is you have to open suite
and it does take some time to start up it's a job application.
There you go.
So it might show you some updates.
That's really fine.
You can close them when you work with verbs suite.
You can either create a project or you can work with a temporary project.
Now generally we go with the temporary projects.
So I will go with it.
Let's click on Next and use the verb de force that's really fine and start up the verb See for me
so here is the verb sweet.
Now the first thing you always want to learn while using verbs read is how to intercept traffic.
So how do you make sure that traffic from your browser go to burps meet from your burps read it go to
the Web site from Web site it comes back to burps tweet from verbs read it comes to the browser.
So it should be in the middle right.
How do you make sure that verbs read is sitting in the middle of your browser and the Web site you do
that by using the proxy.
And that's what we will be setting up now.
So here the second tab of birdseed is the proxy and you will see the proxy can be either tab to intercept
is on or it can be in a set.
All right.
Now how do you set this up.
You just go on the browser
and you say options.
Sometimes it can be found in settings.
You can scroll down and you will see network settings in some old version of Firefox.
It can mean the select panel in settings you say manual proxy configurations.
Right.
And here you give the proxy as local host.
That's gonna be 1 2 7
0 0 dot 1 so 1 2 7 0.
Dot dot dot 1.
All right.
And port will be 8 0
okay and use this proxy server for all protocols.
Also no proxy for you just want to remove this so the see the setup and actually port should be it's
you know it's zero because we also have X imprinting on ports.
So we will change it to port 8 0 8 0 and this is because that's where the purpose sitting at the moment.
Right.
So the actually by proxy it's one two seven dot dot dot dot dot one port is 8 0 8 0 and we are using
the same proxy for all the protocols and no proxy for is this blank right here.
Right.
And now if I tried to visit any website let's say a local host.
Okay so I even then pressed enter and you will see that it intercepts this traffic.
I can see it intercept us off for a minute and let's try to visit a local post again.
So when I say local host it normally works.
Right.
But if I say intercept is on and now let's say I want to open GHB in profile you will see that browser
will not process the request.
The request is going in the proxy this is the request.
Now you have two options.
You can either forward this request to the website or you can drop the request or you can change anything
in this right.
You can change and then you can forward.
So let me just play forward this request I forward this request it go to the website and it then comes
back to the burbs read and then comes to my browser.
Right.
I'm just gonna keep holding them and you will see these page loads right.
That's the thing now purpose sitting in middle and giving us the advantage to modify the request.
Right.
If I want to go back let's say I want to open PSP my admin it will again come into work first and then
I can decide what to do I can modify it I can grow up it I can forward it if I forward this thing and
keep forwarding you will see that PSP my admin loads up right I can go back if the intercept is set
to off burped will not do anything and your browser will work like normal I can just go to any website
you see the works even without going to.
Now the traffic is directly going right.
That's the thing.
So this is how you set up the verb sweet proxy but it is working on local host but it is not gonna work
on the websites that run on SSL for example Google dot com
you will see that it sees that connection is not secure.
Now why is this happening.
Because the data is going Romberg right.
It's going through brb and the browser is not accepting the certificate which Burke is using.
So we need to have the birth certificate for that.
You have to go next GDP brb.
Okay go over there and you will see see a certificate.
Just go there and save this file once you save this file you want to import this file the certificate
is gone.
Options
going privacy and security here you will find import certificate so let's find that
so here it is.
Certificate and it will see views are difficult and we will import in your certificate.
Right.
So here you see import and lets us open the certificate which we just downloaded and you will trust
this thing and then say OK right.
It has been imported.
You say Okay right here and that's all.
Now you should be able to visit any website that uses SSL or DNS.
So let's try to go on Google now and you will see that Google will work.
So here you see Google now works because it is not accepting the certificate of birth right.
That's how you installed your birth certificate.
In this lecture we covered how to install brb sweet Roxy and how to install both.
So it's so difficult right.
That's how you do all this thing.
Now don't just keep watching because follow this thing implement everything and I'll see you in the
next lecture.