Burpsuite proxy browser and App Interception

00:05:55
https://www.youtube.com/watch?v=0CIpMDJmPpc

摘要

TLDRThe video tutorial demonstrates using Burpsuite to intercept traffic from an Android phone connected to a Wi-Fi network. The presenter explains the setup process, including configuring proxy settings and installing certificates. Examples include capturing requests and responses from the McDonald's app and other applications like Gmail. The video highlights challenges with SSL certificates and differences in traffic handling between browsers and apps.

心得

  • 📱 Intercept mobile app traffic using Burpsuite.
  • 🌐 Configure your device's proxy settings to capture traffic.
  • 🔑 Install Burpsuite certificate on your device to intercept HTTPS traffic.
  • ✉️ Forward captured requests for apps like Gmail to send emails.
  • 🍔 Analyze traffic from apps like McDonald's to see data exchanges.
  • ⚠️ Some apps may not work due to SSL certificate issues.
  • 📖 Detailed setup required for full traffic capture.
  • 🔍 Review HTTP history to analyze data sent and received.
  • ⚙️ Burpsuite must be correctly configured for your network settings.

时间轴

  • 00:00:00 - 00:05:55

    In this video, the presenter demonstrates how to intercept traffic from an Android phone using Burpsuite, a tool running on a laptop connected to the same Wi-Fi network. They start by enabling interception and opening the McDonald's app, revealing that data is sent to servers like Facebook and McDonald's. The presenter forwards the traffic allowing the app to update and shows the HTTP history which contains GET requests to McDonald's server regarding menu items like breakfast and Quarter Pounder nutrition information. They then visit a website using Chrome on the phone, which also allows capturing of traffic. The setup process in Burpsuite is explained, detailing the need to configure proxy settings and install a certificate on the phone for traffic capture. It is noted that while browsers handle this well, some apps may face issues due to SSL certificate validation. Lastly, an email is sent using the Gmail app, reiterating that interception and forwarding of traffic is essential for it to work.

思维导图

视频问答

  • What is Burpsuite?

    Burpsuite is a tool used for web security testing that allows for intercepting and analyzing traffic.

  • How do I capture traffic on my phone using Burpsuite?

    You need to connect your phone to the same Wi-Fi network as your laptop running Burpsuite and configure the proxy settings with the correct IP address and port.

  • What do I need to install to capture HTTPS traffic?

    You need to install a Burpsuite certificate on your mobile device to intercept HTTPS traffic.

  • Can I intercept traffic from any app?

    Not all apps will work due to SSL certificate verification issues, which can vary by app and Android version.

  • How do I send requests while capturing traffic?

    You must forward the captured requests in Burpsuite for the application or browser to proceed with sending the data.

  • Is there a difference in capturing traffic from browsers versus apps?

    Yes, browsers generally work better for interception than some applications due to how they handle SSL.

查看更多视频摘要

即时访问由人工智能支持的免费 YouTube 视频摘要！
字幕
en
自动滚动:
  • 00:00:00
    Did you know that it's possible to intercept  traffic from a phone and see what your
  • 00:00:04
    applications are sending and receiving?  In this example I've got an Android phone
  • 00:00:08
    connected to my Wi-Fi network I've also got  this laptop connected to the network and on
  • 00:00:14
    the laptop I'm running Burpsuite which allows  me to intercept traffic sent by this phone on
  • 00:00:20
    the laptop I'm running Burpsuite so what I'll  do here is enable interception so intercept is
  • 00:00:26
    on on the phone I will open the McDonald's app  so that's now started and as you can see there
  • 00:00:33
    traffic is being intercepted we see traffic  going to Facebook which is interesting you can
  • 00:00:38
    see here's an example that traffic is being sent  to McDonald's.com we've got GraphQL execute JSON
  • 00:00:46
    Great Britain cuz I'm in England English language  it's sending information to McDonald's telling
  • 00:00:51
    it that I'm using an Android phone whole bunch  of information is sent nothing is happening on
  • 00:00:56
    the app at the moment because I haven't forwarded  this traffic to McDonald's so if I select all the
  • 00:01:03
    traffic and then click forward we should see  something happen on the app what I'll do is turn
  • 00:01:12
    off interception so that it's no longer stopping  traffic being sent and there you go the app has
  • 00:01:18
    updated we can see information about McDonald's  there if I go to HTTP history we can see that a
  • 00:01:24
    whole bunch of traffic was sent by the phone  if I go to dashboard as an example we can see
  • 00:01:31
    McDonald's here so notice there was a get request  to McDonald's and some information was sent
  • 00:01:35
    back so we can see information with regards to  breakfast whole bunch of information sent to the
  • 00:01:40
    phone what I'll do is go back to proxy and turn  interception on go to more nutrition information
  • 00:01:49
    let's have a look at burgers as an example  and let's have a look at a quarter pounder
  • 00:01:55
    information is being requested but nothing's  being sent at the moment because I'm capturing
  • 00:01:59
    it so I'll forward that information through we  can see quarter pounder with cheese here nutrition
  • 00:02:05
    information is shown there if I go back to HTTP  history notice here we told a quarter pounder
  • 00:02:13
    patty of 100% beef with two slices of cheese and  that's what we see right over here on the phone
  • 00:02:19
    so we are seeing the information being sent to  McDonald's on the left so request and then the
  • 00:02:25
    information sent back so under ingredients we  see this kind of information so ingredients we
  • 00:02:31
    can see 100% pure beef and then we've got wheat  flour here we can see the image that was loaded
  • 00:02:37
    etc if I ran a browser on the phone and I go to  a website let's say davidbombal.com we'll be able
  • 00:02:45
    to see that kind of information here as well so  notice https davidbombal.com the Android phone
  • 00:02:53
    using the Chrome web browser is requesting  information from the server and a bunch of
  • 00:02:59
    information is returned by the server saying David  Bombal start learning today and change your future
  • 00:03:05
    and that's what we see over here so Burpsuite  allows us to intercept traffic from a browser as
  • 00:03:10
    an example or an application now you do have to  do some setup for this to work in Burpsuite you
  • 00:03:16
    have to go to proxy settings and you have to add  the interface that you're going to capture traffic
  • 00:03:21
    from so in my example I used that IP address and  this port number 8080 and I clicked add and that
  • 00:03:28
    allowed me to capture traffic on the device so the  phone as an example under your network so as an
  • 00:03:34
    example your Wi-Fi network you have to configure  your proxy server IP address and port number so
  • 00:03:40
    that matches what I've got configured in Burpsuite  and that then allows me to capture the traffic now
  • 00:03:47
    another thing you'll have to do is browse to the  IP address of your Burpsuite server and the port
  • 00:03:52
    number in my example it's 192.168.0.247 port  8080 and you'll have to install the certificate
  • 00:04:01
    so you'll have to install it using for  instance the certificate installer and
  • 00:04:06
    install the certificate on your phone that will  then allow you to capture traffic i'm not going
  • 00:04:12
    to show the full process on how to install the  certificate that often depends on your phone
  • 00:04:17
    but if you browse to your Burpsuite IP address  and add it to your devices trust store that will
  • 00:04:24
    allow you to capture traffic so on the Burpsuite  website they tell you that you have to install
  • 00:04:30
    your certificates but they're not going to show  you this for every single phone because it really
  • 00:04:34
    depends on the version of Android you're using as  an example or which phone you're using but you've
  • 00:04:40
    got to install the certificate on your device so  have a look at the Burpuite documentation on how
  • 00:04:46
    to do that now I found that this works really  well for a browser it doesn't always work for
  • 00:04:50
    apps depends on the version of Android that  you're using i'll show you in a separate video
  • 00:04:54
    how to install the certificate in the root of the  Android phone because that's a separate process
  • 00:05:01
    what you'll find as an example is some apps will  not work because they will complain about the SSL
  • 00:05:07
    certificate the browser will work fine using a  very basic setup like this and some applications
  • 00:05:12
    like McDonald's will work fine other applications  will not work i'll turn intercept back on and
  • 00:05:18
    let's open another app let's say Gmail i'll send  an email to myself i'll make this test two email
  • 00:05:24
    and just say the message is test and I'll send  the email notice it says sending at the moment
  • 00:05:30
    it's not able to send it because I am capturing  all the traffic so I've got to forward all that
  • 00:05:37
    traffic to allow the email to be sent so I'll  click forward for all of these messages and there
  • 00:05:43
    you go the message has now been sent I've sent it  to myself so I could read that message as well so
  • 00:05:48
    here's an example you can see request messages  i'll turn interception off and there you go
标签
  • Burpsuite
  • Android
  • Traffic Interception
  • Wi-Fi
  • SSL Certificate
  • Mobile Apps
  • HTTP History
  • Proxy Settings
  • Network Security
  • Web Security