Use of Fiddler, use of Fiddler

Use of Fiddler, use of Fiddler

This article mainly records the simple use of mobile Fiddler configuration and Request Interception.
Fiddler Series
You can download Fiddler directly from Baidu and install it all the way to next.
This article includes:

Configure parameters configure mobile phone import certificate installation certificate use interception to send requests

Configuration

The configuration is mainly used to support mobile terminals and https

Parameter configuration

Tools-> options open the configuration


The default port is 8888, which can also be customized.
-- Disable Fiddler after configuration --

Import Certificate on mobile phone

There are two solutions:
1. Use tools> options> https> Actions> Export Root Certificate to Desktop.
Export to the desktop and import it to the mobile phone
2. Open https: // mobile phone ip: port in the mobile browser (8888 by default)
Download Certificate

Install Certificate

Some mobile phones can be directly installed, some advanced settings that need to be enabled for wifi, and click Install.

Mobile Phone: the mobile phone uses a dynamic proxy. The proxy port configuration is consistent with the fiddler configuration.

Use

Preface

If there are too many requests displayed, you can use filter to filter them. Actions-> run... To enable Filtering

You can enter the bold + string in the command line to bold the request. Cancel the bold and press Enter.

Interception

1. intercept all requests: Rules-> Automatic Beakpoints: select to intercept requests before or after the request.
2. Use the command line:
Bpu + related strings (www.google.cn) are used to intercept requests before sending
Bpafter + related strings (www.google.cn) are used for post-response interception.

After blocking, you can directly modify the parameter. The body modification is modified in SyntaxView.
After modification, click run... Or bread on... (Intercept after response)
Intercept the response and modify the response.

Send request

It is relatively easy to simulate sending requests. Just write the address and click excute.

Finally, I put a Fiddler schematic diagram to explain my misunderstanding of https security (in fact, we trust fiddler on our mobile phone)