[operation and maintenance Security]-introduction to BurpSuite/Fiddler 03

1.1. BurpSuite introduction

BurpSuite is a necessary integrated testing tool for information security practitioners. It uses automated testing and semi-automatic testing, including:

Proxy,Spider,Scanner,Intruder,Repeater,Sequencer,Decoder,Comparer

Intercepting web packets of HTTP/HTTPS and acting as an intermediary between browsers and related applications to intercept, modify, and replay data packets for testing is a necessary Swiss for web security personnel. The free version and the professional version are officially available. The following is a comparison of the features of the two versions.

1.2. BurpSuite installation

Jdk8

Burpsuite is a jar package.

2.1 Fiddler introduction

Fiddler is a http protocol debugging agent that can record and check all http communications between your computer and the Internet, set breakpoints, and view all "in and out" Fiddler data (cookie,html,js,css and other files). Fiddler is simpler than other web debuggers because it not only exposes http communications but also provides a user-friendly format.

2.2 Fiddler installation

3.1 Firefox browser plug-in

FireFox Live Http Headers

4.1 Kali Linux introduction

A system specially designed for *.

4.2 installation of Kali Linux system