Get the App
SLTechnology News&Howtos  ›  Network Security  › 

How to use fiddler to grab the bag of mobile phone APP

Shulou Source: shulou.com Published: 2022-05-31 16:25:10 10月03日 Update

This article mainly explains "how to use fiddler to grab the package of mobile phone APP". The content of the article is simple and clear, and it is easy to learn and understand. Please follow the editor's train of thought to study and learn "how to use fiddler to grab the bag of mobile phone APP".

1. The principle of grabbing bags for fiddler mobile phones.

A http proxy server is opened locally, and then it forwards all http requests and responses. Fiddler works as a proxy web server, using proxy address 127.0.0.1 and port 8888. The network requests to use fiddler,fiddler to intercept data, and because fiddler acts as a middleman, https can be decrypted.

Therefore, it is much easier to use than the bag grabbing tool that comes with firebug or chrome. Not only that, it can also support some advanced features such as request replay. It can also support http package grabbing for mobile applications.

The following is the mobile phone grab bag:

The browser's proxy settings are off by default, and win7 Google browser "Settings-Advanced-system-Open proxy Server-LAN Settings-proxy Server" check. The proxy switch is on: you can catch the package, and the proxy switch is off: you can't catch the package.

2. Prerequisites:

1)。 The computer needs to be installed with Fiddler

2)。 Test phones need to support Wifi

3)。 Testing phones and computers need the same network

4)。 The tested APP needs to support the agent.

3. Basic usage of Fiddler

Interface layout:

After opening Fiddler, make any request in the browser, which can be recorded by Fiddler, including the return code, request protocol, hostname, request address, etc.

You can view the detailed request information in the request area and the detailed return results in the response area.

The figure below is as follows

4. The process of grabbing mobile phones by Fiddler

Step 1: set Fiddler to allow remote connections.

Find Tools- > Fiddler Options- > Connections, select Allow remote computer to connect, click OK, and restart Fiddler.

As shown below:

Step 2: modify the mobile phone connection network to proxy mode.

Open the wifi you are connecting to and find:

1. Modify the network (usually it will appear after a long press)

2. Click to show advanced options-- > Agent-- > Manual.

The host name of the proxy server is set to the local IP address of the computer, and the port is set to: 8888

The figure below is as follows

Add: check the local IP: open cmd, enter ipconfig enter, and then find the IPv4 address

As shown below:

Step 3: verify in Fiddler.

Use a browser or other APP in your mobile phone to make a network request and record it in Fiddler.

For example: open a browser on the phone, search with Baidu, and the request will be recorded in Fiddler.

As shown below:

You can also view different formats of

5. Advantages and disadvantages of Fiddler tools.

These are the common methods and problems I encounter when I use Fiddler to grab packets when testing mobile APP. Let's talk about the advantages and disadvantages of Fiddler, so that you can judge in the first place which situations can use Fiddler and which situations Fiddler can't do.

What Fiddler can do

View Web traffic and its order

Check the Header,Cookies,Cache, body, request time and other information of each pair of Request/Response.

Save the generated request sequence for subsequent viewing or playback

Decrypt HTTPS and view its contents

Modify Request/Response to meet special testing or Hack requirements

6. Powerful programmable network functions can be achieved through FiddlerScript and FiddlerExtention.

What Fiddler cannot do

Fiddler can only be used for debug of HTTP/HTTPS/FTP requests, but for packets that directly use TCP protocol, or use SMTP, POP3, Telnet, IRC and other protocols, it is impossible to take as an example.

Fiddler can only detect traffic through Fiddler proxies

3. Fiddler all requests are stored directly in memory, so it is slow to process large packets.

Fiddler is a very powerful HTTP protocol debugging tool, whether it is used for web testing or client-side API testing is a sharp tool, mastering this tool will make you get twice the result with half the effort in the future.

Thank you for your reading, the above is the content of "how to use fiddler to grab the bag of mobile phone APP". After the study of this article, I believe you have a deeper understanding of how to use fiddler to grab the bag of mobile phone APP, and the specific use needs to be verified in practice. Here is, the editor will push for you more related knowledge points of the article, welcome to follow!

Tags: Mobile phones agents networks tests servers browsers services browsing addresses tools support advanced content that is situations computers learning incompetence hosts strengths and weaknesses Apple Docker Huawei Linux macOS MariaDB Microsoft MySQL NVidia OPPO Reno Microsoft Huawei Shulou Technology NVidia Shulou Tech Info