## Web Proxies

A Proxy sits between You (Client) and the Internet (Server).
*   **Forward Proxy**: Protects the Client. (e.g., Corporate specific proxy filtering Facebook).
*   **Reverse Proxy**: Protects the Server. (e.g., Cloudflare sits in front of a website to stop DDOS).

### The Attacker's Proxy (Intercepting Proxy)
Tools like **Burp Suite** or **OWASP ZAP**.
They allow you to "freeze" time.
1.  You click "Login" on a website.
2.  The browser sends the POST request.
3.  The Proxy CATCHES it before it goes to the server.
4.  You edit the request (change `price=100` to `price=0`).
5.  You forward it.
6.  The server processes the modified request.