From the course: CompTIA CySA+ (CS0-002) Cert Prep: 4 Software and Systems Security

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Interception proxies

Interception proxies

From the course: CompTIA CySA+ (CS0-002) Cert Prep: 4 Software and Systems Security

Start my 1-month free trial

Interception proxies

“

- [Instructor] Interception proxies are an important tool used during the penetration testing of web applications. During normal use of the web, a user launches a web browser on his or her computer and uses it to retrieve information from web servers. The user's web browser creates requests using HTTP, the hypertext transfer protocol. The browser the sends those requests to web servers and the web servers reply with the requested information. When a penetration tester targets a web application he or she usually wants to manipulate the HTTP requests sent to a website so that they contain malicious requests. Now websites aren't set up to accommodate these malicious requests, so the tester needs some additional help. Interception proxies fit this need by intercepting the requests sent by the tester's browser before they're sent to the web server. The interception proxy then allows the tester to manipulate the request…

Contents