Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

How to use fiddler to grab the bag of mobile phone APP

2025-04-06 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >

Share

Shulou(Shulou.com)05/31 Report--

This article mainly explains "how to use fiddler to grab the package of mobile phone APP". The content of the article is simple and clear, and it is easy to learn and understand. Please follow the editor's train of thought to study and learn "how to use fiddler to grab the bag of mobile phone APP".

1. The principle of grabbing bags for fiddler mobile phones.

A http proxy server is opened locally, and then it forwards all http requests and responses. Fiddler works as a proxy web server, using proxy address 127.0.0.1 and port 8888. The network requests to use fiddler,fiddler to intercept data, and because fiddler acts as a middleman, https can be decrypted.

Therefore, it is much easier to use than the bag grabbing tool that comes with firebug or chrome. Not only that, it can also support some advanced features such as request replay. It can also support http package grabbing for mobile applications.

The following is the mobile phone grab bag:

The browser's proxy settings are off by default, and win7 Google browser "Settings-Advanced-system-Open proxy Server-LAN Settings-proxy Server" check. The proxy switch is on: you can catch the package, and the proxy switch is off: you can't catch the package.

2. Prerequisites:

1)。 The computer needs to be installed with Fiddler

2)。 Test phones need to support Wifi

3)。 Testing phones and computers need the same network

4)。 The tested APP needs to support the agent.

3. Basic usage of Fiddler

Interface layout:

After opening Fiddler, make any request in the browser, which can be recorded by Fiddler, including the return code, request protocol, hostname, request address, etc.

You can view the detailed request information in the request area and the detailed return results in the response area.

The figure below is as follows

4. The process of grabbing mobile phones by Fiddler

Step 1: set Fiddler to allow remote connections.

Find Tools- > Fiddler Options- > Connections, select Allow remote computer to connect, click OK, and restart Fiddler.

As shown below:

Step 2: modify the mobile phone connection network to proxy mode.

Open the wifi you are connecting to and find:

1. Modify the network (usually it will appear after a long press)

2. Click to show advanced options-- > Agent-- > Manual.

The host name of the proxy server is set to the local IP address of the computer, and the port is set to: 8888

The figure below is as follows

Add: check the local IP: open cmd, enter ipconfig enter, and then find the IPv4 address

As shown below:

Step 3: verify in Fiddler.

Use a browser or other APP in your mobile phone to make a network request and record it in Fiddler.

For example: open a browser on the phone, search with Baidu, and the request will be recorded in Fiddler.

As shown below:

You can also view different formats of

5. Advantages and disadvantages of Fiddler tools.

These are the common methods and problems I encounter when I use Fiddler to grab packets when testing mobile APP. Let's talk about the advantages and disadvantages of Fiddler, so that you can judge in the first place which situations can use Fiddler and which situations Fiddler can't do.

What Fiddler can do

View Web traffic and its order

Check the Header,Cookies,Cache, body, request time and other information of each pair of Request/Response.

Save the generated request sequence for subsequent viewing or playback

Decrypt HTTPS and view its contents

Modify Request/Response to meet special testing or Hack requirements

6. Powerful programmable network functions can be achieved through FiddlerScript and FiddlerExtention.

What Fiddler cannot do

Fiddler can only be used for debug of HTTP/HTTPS/FTP requests, but for packets that directly use TCP protocol, or use SMTP, POP3, Telnet, IRC and other protocols, it is impossible to take as an example.

Fiddler can only detect traffic through Fiddler proxies

3. Fiddler all requests are stored directly in memory, so it is slow to process large packets.

Fiddler is a very powerful HTTP protocol debugging tool, whether it is used for web testing or client-side API testing is a sharp tool, mastering this tool will make you get twice the result with half the effort in the future.

Thank you for your reading, the above is the content of "how to use fiddler to grab the bag of mobile phone APP". After the study of this article, I believe you have a deeper understanding of how to use fiddler to grab the bag of mobile phone APP, and the specific use needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

Network Security

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report