Give you a better demonstration of using Burp Suite in a different system and
also tunneling
with it through the proxy. I'm going to volunteer my system from the ADEP lab,
so bear with me here
for a second. You can see here that in the ADEP lab, we have our lab that you
will open up as a
learner and I have the CaliBox opened up. Now inside the CaliBox, I'm going to
move this over
and I'm going to keep it static because I'm going to have to blur this out a
little bit.
I'm going to go into the actual proxy settings. You can see here that I have a
manual proxy set.
Well, now on my other screen, I'm going to move in my local Burp Suite version
and I'm going to
turn on the interceptor. If I go into my proxy settings on here, you can see
that I have it tied
to my local IP address in the NAT region. What I did was is on my ISP router, I
forwarded port 8080
from my public facing IPv4 from the ISP to my NAT of 192.168.1.74 port 8080. So
what this is doing
is allowing me to use the ADEP labs to tunnel through my actual system here in
Texas. I'm going
to move this or close this and I have the interceptor turned on. I'm going to
move it like right here.
So you can see that if I go back to the Google and then start typing in, let's
say
CBT nuggets.com and then go back over in my worst suite. There we go. You can
see that I'm
starting to get traffic. It took a second, but I did. I was able to capture the
actual HTTP request
coming from the ADEPT Cali through the host VM all the way back here in Texas
and I can see it
in my Burp Suite here. Now, what does this really mean for us? Well, again, we
're talking about
tunneling and using different locations and also using Burp Suite to keep a
track of that actual
traffic that we're seeing here and go through and try to analyze and crawl the
actual traffic
all in one package. Now, you may be noticing that CBT nuggets is taking a while
to load
and that's because I have the option to actually forward the actual message
itself. Now, I'm going
to move this back over. As you see CBT nuggets start to load. Oh, I'm also
going to show the more
packets coming up and the forward button again. I can also just click on
forward all and I can also
drop packets if I need to, meaning I'm interrupting the traffic between point A
and point B.
Does this sound familiar? Well, it should. We're now conducting a men in middle
attack
using Burp Suite to be able to go through and analyze all this. I wanted to
show you this because
this makes a little bit more sense in our setup because as it is inside of our
virtual labs,
we're just doing everything locally and we're proxying through ourselves to get
to ourselves to be able
to go to ourselves. So this is a little bit of a demonstration you can see in
real world application
that we can go through and incorporate our labs into the real world. But as
always, get that permission.