M 106: Burp and Nox on Windows (20 pts)

What You Need for This Project

Purpose

To get the Nox emulator and Burp working, so you can perform man-in-the-middle traffic interception, to detect SSL certificate validation errors.

Installing Burp

Burp is a very popular proxy, enabling you to view and alter network traffic.

In a Web browser, go to https://portswigger.net/burp

In the "Community Edition" column, click Download", as shown below.

Install the software with the default options.

Click Start, "Burp Suite Community Edition".

An agreement appears. Click "I Accept".

Starting Burp

When Burp starts, the first window asks you to create a project. Accept the default option of "Temporary project" and click Next.

In the next page, click the Start Burp button.

The main Burp window opens, as shown below.

Click the Proxy tab. Click the Intercept sub-tab.

The third button says "Intercept is on", as shown below.

Configuring Burp

In Burp, click the "Intercept is on" button. It changes to "Intercept is off".

On the Proxy tab, click the Options sub-tab.

In the central box, click the Interface address to highlight it, as shown below.

On the left side, click the Edit button.

In the "Edit proxy listener" box, click the "Specific address" button, and select your computer's IP address that is used to connect to the Internet, as shown below.

Click OK.

Burp shows a proxy listener on your IP address and port 8080, as shown below.

Make a note of this address--you will need it below.

Using BlueStacks Instead of Nox

Hey, so I was actually able to get a proxy to work in BlueStacks. There is a utility included with the default installation of BlueStacks v4.260 located at:
C:\Program Files\BlueStacks\Run HD-ConfigHttpProxy.exe
Syntax would be:
>HD-ConfigHttpProxy.exe set host port

ex. HD-ConfigHttpProxy.exe set 10.0.0.13 8080

Restart BlueStacks.
>HD-ConfigHttpProxy.exe reset (Stops/resets the proxy)
Worked like a charm for me!

I've included a write-up on how to get it running as text file. The rest of the project runs exactly the same. The original post is included below:

https://android.stackexchange.com/questions/27224/how-to-configure-bluestacks-app-player-to-use-proxy-settings-when-connecting-to

Let me know if you have any questions! Should negate the need for Nox.

Installing Nox

In a Web browser, go to

https://www.bignox.com/

Download and install the Nox emulator. When it launches, click "Skip Tutorial".

Click OK.

Nox launches, as shown below.

On the lower right, in the black bar of icons, click the second icon from the bottom, which is shaped like an envelope.

The Nox home page opens, as shown below.

On the Nox home page, click Tools.

Click Settings.

In Settings, click Wi-Fi, as shown below.

On the next screen, point to WiredSSD. Press and hold down the left mouse button.

A "WiredSSD" box pops up, as shown below.

Click "Modify network".

In the "WiredSSD" box, click the "Show advanced options" box.

Scroll down and set the Proxy type to Manual.

Enter the IP address you set in Burp above, and a port of 8080, as shown below.

Click Save.

Testing the Proxy

On the lower right, in the black bar of icons, click the second icon from the bottom, which is the Home button.

On the Nox home page, at the top left, click Browser.

A "Security warning" box pops up, as shown below.

This is good! Burp is performing a man-in-the-middle attack and the Android browser is detecting it.

In the "Security warning" box, click Continue as many times as necessary, to get the boxes out of the way.

When you can get to the address bar, enter this address:

ad.samsclass.info

A web page opens, as shown below.

M 106: Server (20 pts)

In Burp, on the Proxy tab, click the "HTTP history" sub-tab.

Scroll down and the GET request that loads ad.samsclass.info as shown below.

Click the GET request. In the lower left pane, click Response.

Find the text covered by a green box in the image below. That's the flag.


Converted to a CTF 2-28-19
Point total made 20 at the bottom 1-13-2020
Bluestacks tip added 2-24-21
Flag changed to M 106.2 8-30-22
Flag changed to M 106 for 20 pts 9-15-22