Burp suite (from the scratch) Video 19 Video Lecture | Learn all about Burp Suite (English) - IT & Software

alright guys welcome back and in this
lesson I wanted to go over these burp
options right here and also for each of
these categories i want to give you guys
a real brief overview of what they meant
so for example if you don't know what a
socks proxy is i'll give you guys a real
quick you know general broad overview on
it and then you guys make oh that sounds
pretty cool that's something i want to
look into and figure out how to use it
with Bert so there you go so under the
connections tab platform authentication
we are going to know that authentication
just means making sure someone is who
they say they are now we can either do
this with client authentication or
server authentication and burp supports
a bunch of different types of
authentication they're a bunch of
different you know rules on how you want
to think eight burp supports all the
most popular ones and that is what you
can set up right here now upstream proxy
and socks proxy we know what a proxy is
basically a middleman like we said in
you know like the second tutorial in
upstream proxy let's say that a company
hired us to do some pen testing for
their website now the way they have it
set up we can't connect directly with
our server that companies target server
so what we need to do instead is we need
to go through a proxy now a lot of
companies do this to have an extra layer
of security so all traffic leaving or
coming into their main server has to go
through one of their proxies and they do
this like I said for security or they
can keep logs or whatever but if you
ever have to go through an additional
upstream proxy to get to your target
then this is where you can configure
those settings a socks proxy is a little
bit different so the proxies that we've
been looking at so far and especially in
that I don't know like the tutorial
however many videos ago those are great
when you're just doing stuff like
browsing the internet because those are
just HTTP proxies
now you know that whenever you just
start looking at sites you always use
the HTTP protocol however there are some
proxies that allow you to use different
protocols other than HTTP and this is
good if you ever want to do anything
basically other than browse the internet
and also Sox proxies aside from allowing
you to use different protocols there are
also a lot more secure and better
keeping your data private most of the
time so that is what a socks proxy is in
if you ever you know want to use one
then there you go these last couple
timeouts host name resolution and out of
scope requests pretty simple you know
what a timeout is how long do you want
burp to wait for a response from the
server before giving up obviously if
server is not responding you don't want
to wait like two days because that's
just a waste up burps resources host
name resolution obviously is how we're
going to translate host names in other
words ww google com to their IP address
if you ever want to override it from the
default DNS server then you can do it
here out of scope requests we already
know what scope is pretty much the
section of the internet that we want to
work with so what we can do are things
like say you know what any time you
receive a request that's out of our
target scope then you can just drop it
but usually I like to say use sweet
scope to find the target lab because i
like everything managed from that one
scope without any additional settings
anywhere else now in this HTTP tab we
have three different sections
redirections streamer responses and
Status 11 responses redirections we saw
this a little bit earlier whenever we
logged in is how do you want burp to
behave whenever it gets redirected for
example whenever on login page then we
login and it redirects us to my account
page or my profile PHP whatever so this
is how you can deal with how do you want
to handle redirections streaming
responses are let's say that you connect
to a site and you try to watch a movie
well it's not just like a static what
or an image where the surfer gives it to
you and then that's like all right I'm
gonna go do something else whenever you
watch a movie for example that data is
continuously streaming to us so what do
we want to do with streaming responses
well most of the time we don't want to
keep all that data you know not even
your browser keeps all the movie data
whenever you're watching a YouTube video
or whatever so this is how you can
handle streaming responses of course you
like I said I don't want to usually keep
them because they take up a lot of space
so there you go and Status 101 responses
if you don't know what a 10 or exceeding
100 responses it means continue so for
example whenever you submit a form and
then the server has to make another
request to some other file before it
sends you back the final response then
it has to do some intermediary um other
requests so it's going to send you just
to continue and it's basically its way
of saying hold on gotta go do something
else real quick and well there you go
that's what 2101 means so it's not the
final response now in the ssl tab by the
way if you guys ever try using ssl with
java you probably know that java has a
lot of trouble with it and of course
burp suite was written in java so it
sometimes has trouble with sso so
anytime you want to manually um you know
like adjust what algorithms you want to
use what protocols what ciphers then you
can do so right here but I'm going to
warn you you really don't want to mess
with this area too often unless you
really know what you're doing because
you really don't want to mess up the way
burp communicates and works with the
rest of the internet or every other tool
is not going to work not a good thing
and some other things you have client
server ssl certificates of course you
really can't manage server ssl
certificates from here since you you
know this isn't plugged in to your
target server but anytime you have a
client ssl certificate you can add
remove do whatever you want server these
are just for viewing so if you just want
to
check it out there you go now over in
your sessions options here is the
problem that a lot of people have
whenever they're trying to attack a
website they log in through burp and
then they might run some tool do
whatever they find themselves getting
booted off that website a lot now the
reason for this is a bunch of websites
they write their sessions differently
they all wyd i want to say they all but
a lot of websites use custom session
handlers or do something really weird
and this is often due to security
reasons for people like us who are
trying to do weird things to it so what
you might have to do is you might have
to have a custom session rule and that's
what these session rules mean basically
you need to tell burp to do something
when it makes a request so anytime you
need burp to do something special then
you can just add a role in there you go
so this is just the name of it the
action is essentially saying what
exactly do you want me to do and I don't
know maybe we need to check for a valid
session ID before there you go a bunch
of different you know things you can do
for scope this is saying what tools do
you want to follow this rule so maybe
the intruder whenever you're making a
bunch of requests that's when you have
the problem everything else is fine
maybe um I don't know like your spider
you only want your spider to follow it
and the rest of the tools just act as
normal so that's how you can set the
scope that's what that means and of
course the URL scope when do you want to
have this role come into effect you want
to use it all the time do you only want
to use it when you're looking at web
pages within your scope so there you go
that's what rule is now the cookie jar
and macros so your cookie jar
appropriately named burp is going to
keep track of all the cookies and by
default the tools the spider and the
proxy whenever these tools run that's
the only cookies that it keeps track of
so for example whenever you're intruders
are running and it comes across a new
cookie burp doesn't care about that
usually want to leave this as spider and
proxy are the only ones that we're going
to monitor because the cookies that you
get in your tutor they aren't usually
that helpful and of course you can
override this any time if that's you
know a vulnerability that you're looking
for but most of the time just leave
these as default if you don't know what
to do in a macro a macro is basically a
tiny little computer program and they're
kind of similar to the rules but let's
say that for example you needed to have
a new session ID every time you want to
make a request so what you could do is
you could write a little macro and again
what this does is every time you make a
request the macro would run go get a new
session ID give it back to whatever tool
you're using and then you use that
session ID so it's kind of like a little
subcommand it's not an entirely new tool
or plugin or anything like that it's
just something you want to run as like I
said a sub command during your request
now display and miscellaneous these are
nothing I need to talk about how do you
want your font size how do you want the
look and feel what kind of font you want
that's all display stuff miscellaneous
is if you want to add any hot keys what
do you want to log and you know this is
your basic stuff right here these four
tabs were the only ones that would
probably give you trouble so there you
go those are the burp options and now
you know