Fiddler realizes iphone grab bag

Recently a small program fire, many non-professionals are also eager, but in the search for their own session_id is stuck, this article only from the technical aspects of how to crawl through the fiddler phone data, does not involve how to cheat ...

1, the computer installed Fiddler grab Bag tool, Baidu a search on it, it is easy to download, if just on the computer to grab the bag, nothing to say, now said is how to catch the pack on the Apple phone, after installation point Tools--Options menu, according to the following settings https, or can not decrypt

Also with the connections option, check allow remote connections.

The computer-side configuration is over.

2, mobile phone configuration, my iphone system is 11.2.1, other systems should also be similar.

Make sure your phone's network and computer network is connected, the simplest way is to connect to the same WiFi at home.

First look at the computer IP address

Then go to the iphone open settings-Wireless LAN, click the button that is circled behind the network of your link.

After the point is opened at the bottom of the configuration Agent button, open the following page, select Manual, and then the server entered the above we view the computer IP address, port 8888 (corresponding to fiddler inside the connections option in the port)

Set up here, the agent is configured, after the test remember to change this agent back to close, or your mobile phone online will be affected.
Next open the mobile browser, the address bar enter the computer's IP address plus port number

If the above configuration is correct, it will open the following page, click the tagged link, install the certificate.

Install the certificate process

Only install not yet, iphone default does not turn on trust, need to manually add a certificate trust, settings-general-about this machine, the bottom of the Trust Certificate Settings button, opened after the following page, will do_not_trust_fiddlerroot this certificate open, Do not trust this certificate is not able to catch the HTTPS packet, you can also close the same test after the end.

3, through the above basic, the configuration is all over, you can catch the package test, there are several links have session_id, choose one, direct point to the right of the JSON can be very convenient to see their session_id, = number after the long string of letters is. session_id is an important sign of his account, for the sake of security please do not casually, use on your own .

4, now you have the most important parameter, the rest of the work to find their own

5, Android mobile phone capture more simple, you can directly install the application of grasping bag, because I do not have the actual test of Android mobile phone, need to check it yourself ...

Fiddler realizes iphone grab bag