In this challenge, we're going to see if we can reinforce our interception
skills and make some
modifications before that packet goes forward to the actual website through Bur
p Suite.
Now, what I mean by this is that inside of our lab, bwap.test, you'll notice
that there is a
new user tab right here, and I do have some information typed in there. You'll
also notice
that it's stuck at thinking because I have not allowed the packet to go through
yet.
I wanted to show you this particular page right here. And the point behind this
is, is that we're
going to see if we can create a new user, but change the password as it goes
through our Burp
Suite interception, just like we made some modifications in previous requests
already.
We know that everything right now is going through plaintext, HTTP. So that
shouldn't be too big of
an issue for us to be able to sift through and read some of the traffic. I'll
see you in the
solution where we're also going to take a look at how this affects things on
the wire. Be right back.