Web: Use Spike and Burp for Computer Security

This updated guide examines Web: Use Spike and Burp for Computer Security and organizes the essential facts, background, and practical takeaways in clear American English.

Figure 1

Figure 2

The last step is to type in ' runme.bat '. Once you've done that, type in the url bar of your web browser http:/// spike / and you'll see SPIKE. Congratulations on installing and configuring an HTTP proxy. What needs to be done with now? The answer is very easy. Let's have a little relaxation with the internet server. In case I installed Apache web server on another VMware for our testing purposes. This will allow us to play with SPIKE in a controlled testing environment. Nothing has been done with the internet server and I installed a website on it. Check time Whenever you do any work, you should have some form of packet sniffer running in the background. The thing to be able to verify the output of the tool you are running in a different situation and with strange results. It is no different for our case. I was thinking of tcpdump from MicroOLAP, which will work well with Windows XP SP2. It is also completely free for home users. After installing this tool, we already have the packet sniffer running in the background. Now it will prompt it to write only packets between the computer that SPIKE is running and the computer on which the Apache web server is running. That will reduce the number of packages that the attacking computer can observe. You can also further refine that by instructing tcpdump to write packets with port 80 in it. For example, this tcpdump can be seen in the picture below.

Figure 3

You can see in the picture that 945 packages were obtained before canceling the tcpdump session. This is the action of running another background mode that I am running on my computer. That shows why you want a relatively narrow selection filter when running experimental tests or performing real tasks. We can see many things, here are some parts to consider before moving on to learn how to use an HTTP proxy. This may also be a homework exercise before moving on to the new issue in the following sections.