Using Fiddler to carry out Http/https grab kits for iOS apps

Fiddler not only intercepts HTTP requests from various browsers, but also intercepts HTTP/HTTPS requests made by various smartphones. Fiddler can capture requests from iOS devices, such as the iphone, IPad, and MacBook.  Wait for the Apple device. Similarly, can also intercept andriod,windows phone and other equipment issued by the HTTP/HTTPS.

Most crucially, when you grab the iOS app, you do it directly on the Windows PC, and you don't have to be on the Mac. The following steps are used

First, the PC installs Fiddler

Step slightly.

Second, fiddler configuration (remember to restart fiddler after configuration)

Open Fiddler, tools-> Fiddler Options.

Fiddler can intercept HTTPS requests by checking "Decrpt HTTPS traffic"

Select "Allow remote computers to connect". is to allow other machines to send HTTP/HTTPS requests to fiddler.

Third, mobile phone configuration

(1) Network proxy settings

Installing Fiddler machines must be in the same network as the iphone, or the iphone cannot send HTTP to the Fiddler machine. In general, we are on the desktop and mobile phones, desktop only cable, no wireless WiFi, so and the phone is not the same network, then we need to set the agent

Open the iphone, find your network connection, open the HTTP proxy, enter the IP address of the Fiddler machine (for example: 192.168.1.104) and the fiddler port number 8888

(2) Fiddler certificate installation

This step is designed to allow Fiddler to capture HTTPS requests. If you only need to intercept HTTP requests, you can ignore this step

1. First you need to know the IP address of the machine where Fiddler resides: If I installed the Fiddler machine IP address is: 192.168.1.104

2. Open the iphone Safari, visit http://192.168.1.104:8888, click "Fiddlerroot Certificate" and install the certificate

Now you're done, you can grab the bag. Http/https from iphone apps (such as Safari, Firefox, Itunes, App Store) can be captured by fiddler.

Example: Open Safari,

1. Enter Http://www.cnblogs.com/tankxiao. See if Fiddler can capture.

2. Enter https://dynamic.12306.cn/otsweb/to see if Fiddler can capture.

HTTP and HTTPS are intercepted. , you can not only intercept, but also the next breakpoint, modify request, modify response, do what you want.

Iv. Matters of note

(1) After use, remember to turn off the fiddler agent on the iphone to avoid the iphone on the Internet. (2) Only HTTP can be captured, but not HTTPS solution

It is sometimes found that Fiddler can only capture the HTTP requests made by the iphone and not capture HTTPS requests, possibly because the certificate is not installed properly. The solution is:

1. Delete all the fiddler certificates on the iphone (take out the iphone, click "Set"-> "General"-> "description file")

2. Install the above method, reinstall the Fiddler certificate