Fiddler crawling HTTPS requests

HTTPS is HTTP over SSL, which transmits data using SSL encryption, which transmits data in plaintext, so HTTPS is inherently more secure than HTTP. Even if the transmitted data is hijacked, the hijacker cannot obtain the transmitted plaintext. In order to ensure the security of the system, especially for transaction payment services, the security of HTTPS is particularly important.

As a test is unavoidable to use the tool crawl request, but fiddler default Gray crawl HTTP request, then how to crawl HTTPS request, the following according to their own use to summarize how to use fiddler crawl HTTPS request:

Front: Fiddler can crawl HTTP requests

First, fiddler How to crawl the request:

1, fiddler configuration: specific configuration See

2, the mobile phone configuration:

Configuration: Settings--network-to-Advanced---> Manual---> Settings agent, native IP and port number, port number defaults to 8888, can view port number in fiddler

Second, fiddler crawl HTTPS request:

1. Open Fiddler---> Toolbars, click Tools---> Select Fiddleroptions, and configure as follows:

When you are finished, click OK to complete the configuration

2. Install the certificate on the phone

2.1 First need to configure the mobile phone agent (Specific configuration: Settings--Network--Advanced---> Manual---> Settings agent, native IP and port number, port number default is 8888, can be viewed in Fiddler port number)

2.2 Mobile Browser open ' native IP: port number ', download certificate, iOS and some Android phones can install the certificate directly, after installation can crawl HTTPS request ~ ~ ~

2.3 How to install other Android phones:

Download the certificate locally, you can install the certificate manually at this time

1>---More settings in the Phone settings---system security---Install from the storage device-Select the certificate you just downloaded in the browser (name the certificate, other options default (VPN and app))

Then open the app to access the HTTPS request can be seen on the fiddler

First, you can be happy crawling https request La La La

Fiddler crawling HTTPS requests