Shulou(Shulou.com)06/03 Report--

What is grabbing a bag?

Packet capture is to intercept, retransmit, edit and transfer the data packets sent and received by the network transmission. It is also used to check the network security. Grab packets are also often used for data interception and so on. Of course, I know there's more you want to do.

What is Fiddler?

When it comes to package grabbing tools, FireBug is probably the most frequently used plug-in for programmers, while Wireshark is probably the most powerful. For HTTP debugging, Fiddler is probably the most suitable.

Fiddler is a HTTP debugging agent that listens to the HTTP network data flow of the system in the form of a proxy server. To put it bluntly, Fiddler is to use the so-called man-in-the-middle (middleman) to "hijack" and analyze your network data.

The principle is as follows:

Fiddler download address

Official download address: http://www.telerik.com/download/fiddler

In order to avoid being caught in the wall, the little soft-shelled turtle helped everyone move here first.

After Win8 (Version 4.6.1.5)-> Link: http://pan.baidu.com/s/1dDsfXc9 password: 55ou

Before Win8 (Version 2.6.1.5)-> Link: http://pan.baidu.com/s/1dDCyOqX password: x9y3

Mac (Version 4.4.5.0)-> Link: http://pan.baidu.com/s/1qklP0 password: 1zdz

Linux (4.4.8.4)-> Link: http://pan.baidu.com/s/1pJIQb5D password: zti4

Note 1: this tool is quite awesome to use in Windows!

Note 2:Linux and Mac are running environments that use the Mono framework to provide .NET (you need to install the Mono framework first), so the performance and stability are not as good as Windows.

Install Fiddler

Fiddler is easy to install, just click "I do" and resign yourself to fate:

Opening it for the first time will remind you of this:

It probably means that Windows uses an isolation technique called "AppContainer", which makes it impossible for some traffic to be captured properly. After opening the program, click the WinConfig button on the toolbar to break the spell. Then ask if you want to know more? Click "No (N)" to shut it up.

Configure a browser for Fiddler

1. Clear the browser cache

To ensure that all requests are sent and captured, clear the browser's cache before starting work.

What? You don't know how to empty it.

All right, do it yourself, Baidu.

It's easy to search for "your browser name + clear cache", such as "Chrome clear cache"

2a. For IE,Chrome,Safari and Opera browsers

No preprocessing is required, Fiddler will automatically set it up for you.

In fact, the moment you open Fiddler, it helps you set the proxy of these browsers to 127.0.0.1, as shown in the figure below:

Then the moment you shut down Fiddler, it will return to its original form.

It's awesome again.

2b. FireFox browser

By default, FireFox browsers do not have proxies enabled, and you have three options:

First, install the FiddlerHook plug-in, click: Tools > Monitor with Fiddler > Use Fiddler automaticall, and set it through the FiddlerHook plug-in

2. Set manually, click: Tools > Options > Advanced > Network > Settings > Use System Proxy Settings

Also set the proxy to: 127.0.0.1purl 8888

Click Tools > Fiddler Options > Connections in Fiddler first.

Yes, click the link in the red circle above: Copy Browser Proxy Configuration URL

Then open the FireFox browser and click: Tools > Options > Advanced > Network > Settings

Just paste at the bottom!

Decrypt the network data of HTTPS

You think it's safe with HTTPS?

Young man, Too young too simple.

Fiddler can still spoof browsers and servers by forging CA certificates. The general principle is that Fiddler is disguised as a HTTPS server in front of the browser, and Fiddler pretends to be a browser in front of the real HTTPS server, so as to achieve the purpose of decrypting HTTPS traffic.

To decrypt HTTPS, you need to open it manually. Click: Tools > Fiddler Options > HTTPS.

Check Decrypt HTTPS Traffic:

Click the OK button.

At this time, a forged certificate will be generated, and the system will remind you whether or not to allow it for security reasons.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.