This article explains step-by-step how to add events to N-Stalker's Web Proxy feature.
1) Start N-Stalker's Web Proxy and click in "Start Proxy".
2) Click in "Intercept Off" and select "Configure events".
3) Right-click inside the table and select "Add Event".
4) Select the search options:
- Event Type: specifies the event type (request, response or both).
- Location: specifies where the search will be performed (header, body, URI or all three).
- Match Type: capture only the traffic containing the the pattern from "Expression" field ("Positive Match") or the traffic without it
- Expression: specifies the pattern to be found. The search engine is case sensitive.
In the example, the filters are:
- Capture requests and responses containing the pattern "login" in the message body
- Capture requests containing the pattern "POST" in header or body fields
- Capture responses containing the pattern "Server:" in the header field
5) After setting the events, click in "Intercept Off" to select where the traffic will be saved and start navigating through the application.
In this example, the traffic will be displayed in the user's interface and is not going to be available for further analysis. If this operation is successful, the button will switch its name to "Intercept On".
Example: Navigating through an application (Gmail)
6) To see the captured traffic in details, click in "Intercepted Raw Data".
7) When a response to the applicatin is requested, the tab "Intercepted Raw Data" will pop up. Click in "Send Response" to proceed.
Example: Intercepted login data:
8) Click in "Stop Proxy" to stop the capture. In this example, the data was not saved for further analysis due to the option described in step 5. To perform this, the correct option is "Intercept HTTP to a text file".