1. First install the JavaSetup8u431 file (The files are stored in my ovi.it88 drive, under port swigger folder).
2. Then install jdk-23_windows-x64_bin file.
3. Now open the lostsec.jar file.
4. Change the License Text to your name i.e. licensed to Avi.
5. Now copy the left side License key and click on Run. A pop up will open. Paste the license key there and click Next.
6. Check the box use proxy to connect and click on manual activation.
7. Now click on copy request.
8. Paste it on the Activation Request section on the lostsec.jar window.
9. Then copy the Activation Response from there.
10. Paste it to the Manual Activation window. Then click Next and Finish. You will see success message.
11. Now a pop up window will appear, Delete it. Click Next, Click Start Burp.
12. Next time you just need to click on lostsec.jar file. Then click Run. Then burp will automatically open.
Now time to configure it.
Open burpsuite application lostsec.jar and click on just Run.
Using Firefox:
Open firefox, then click settings. From the search box, type proxy. Under Network Settings click Settings. Under this Manual proxy configuration section, type 127.0.0.1 and port 8080
Also check this box------->Also use this proxy for HTTPS
Using FoxyProxy addons:
Install the addons. Click the addons and go to Options. Go to Proxies tab and click on Add. On the Hostname section type 127.0.0.1 and Port 8080. Then click save. Enable proxy now.
Now open another tab and type https://burp or http://burp
Now the page may tell you, you need to accept the certificate, click allow and permanently store this exception. Now download CA Certificate called cacert.der
Now from firefox settings, go to Privacy & Security, search for Certificates > View Certificates... > Import to import the certificate. Check both the check boxes.
Now when you need to intercept something, just click on foxyproxy 127.0.0.1 or whatever the name you set it to enable it. Then go to burp, Proxy > Http history for the intercepted url's.
How to update this tool?
When clicking on lostsec.jar it will tell you whether you are using burpsuite old version or new. If old version using, it will give you a download option to download the latest burp tool. Download the tool and replace it with older one. Then re-run lostsec.jar to start it from a new version.
Avi
Comments
Post a Comment