From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Unlock the full course today

Join today to access over 24,800 courses taught by industry experts.

Interception proxies

Interception proxies

From the course: CompTIA Cybersecurity Analyst (CySA+) (CS0-003) Cert Prep

Start my 1-month free trial Buy for my team

Interception proxies

“

- [Instructor] Interception proxies are an important tool used during the penetration testing of web applications. During normal use of the web, a user launches a web browser on his or her computer and uses it to retrieve information from web servers. The user's web browser creates requests using HTTP, the Hypertext Transfer Protocol. The browser then sends those requests to web servers and the web servers reply with the requested information. When a penetration tester targets a web application, he or she usually wants to manipulate the HTTP requests sent to a website so that they contain malicious requests. Now, websites aren't set up to accommodate these malicious requests, so the tester needs some additional help. Interception proxies fit this need by intercepting the requests sent by the tester's browser before they're sent to the web server. The interception proxy then allows the tester to manipulate the request before it's sent onto the server. One of the most popular…

Contents