Fiddler learning

Fiddler Profile

fillder is located in the client and server-side HTTP (Hypertext Transfer Protocol) agent

The most commonly used one http packet capture tool

Very powerful, it is a web debugging tool

1, monitoring of all browser http / https traffic  

2, view, analyze the content of the request details

3, forgery client requests and server responses

4, the test site performance

5, decrypted https web sessions

6, global, local break function

7, supports third-party plug-ins

Use scene

1, the interface testing, interface testing, debugging environment online, web performance analysis

2, the front and rear ends of the determination bug, the development environment hosts configuration, the mock, weak network disconnection test

B / s architecture

 

 

HTTP protocol

 

http: //www.baidu.comg/zhidoa/libai

 

http: hypertext transfer protocol
www.badu.com: domain name server ip address

 

/ Zhidoa / libai server path

 

Flddler works

 

 

 

 

 

Specified HTTP client and server connection protocol

 

 

 

 

 

 

 

 

 

 

 

 Request packet and response packet parsed

 

 

 

 

 Introduction of the fields request

POST(请求的方法GET POST) http://crm.austarstudy.com/public/login(统一资源定位符) HTTP/1.1(协议以及版本号,大部分网站都是1.1版本)
Host: crm.austarstudy.com (域名确定请求哪个主机IP)
Connection: keep-alive
Content-Length: 93 
Cache-Control: max-age=0
Origin: http://crm.austarstudy.com
Upgrade-Insecure-Requests: 1
Content-Type(告诉服务器客户端发送的格式): application/x-www-form-urlencoded
User-Agent:(用户客户端系统和版本的说明) Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36
Accept(请求时说明返回的格式): text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Referer(表示我从哪个网址上发起的请求): http://crm.austarstudy.com/public/login
Accept-Encoding(可接受的内容编码

: gzip, deflate

Accpet-Charset (可接受的字符集) 

Accept-Language(表示接受的语言): zh-CN,zh;q=0.9
Cookie: XSRF-TOKEN=eyJpdiI6ImhsQWsyOVhBY1hYbElpTWdqWHNYVVE9PSIsInZhbHVlIjoiNk4yRFUrdkVqdjdSczNtWENRdGRRVzFUZk

(请求发送的内容)_token=fHgqTkrX1AAL31VXOIaq882ZyFUbs6h7PdQdk3m4&mobile=18238388383&random=7437&phoneCode=0099

 

HTTP1.1 请求方法

 

 

 

URL

 

 

请求头 

 

 

 

 

 

 响应报文

 

 

 

 

状态码

 

 

 

响应头

 

 

 

 

 

 

HTTP/1.1(HTTP版本) 200(三位状态码) OK
Server(服务器信息): nginx/1.0.15
Date(响应报文的时间): Sat, 28 Dec 2019 09:13:41 GMT
Content-Type(响应类型和字符集): text/html; charset=UTF-8  
Transfer-Encoding: chunked
Connection: keep-alive(保持TCP连接不关闭,不会永久保持,服务器可设置)
Vary: Accept-Encoding
X-Powered-By: PHP/5.6.9
Cache-Control: private, must-revalidate
pragma: no-cache
expires: -1
Set-Cookie: XSRF-TOKEN=eyJpdiI6InIrUW50UU5ZbDBwUnBqVmNlVjdjWEE9PSIsInZhbHVlIjoibjNJTEo3WWFkNGlLbnU3YzYwR1ppMGp1K0Q3Wk1tQUlTQkFMNGZzaE1pajNhZ1wvcUtmWUlWTXZoMGlORkYrKzMrdXAzc0I5WUJjTnplbHljU3RqaWRBPT0iLCJtYWMiOiI4YTRlOTk0YWU2ZThhOGYwOGFlYzY4YTAyYzJkNjlmMTA0MjdkNTVmZDJkZGRiMjFlZGYzMGI4ZDA4NzJiYjAyIn0%3D; expires=Sat, 28-Dec-2019 11:13:41 GMT; Max-Age=7200; path=/
Set-Cookie: laravel_session=MWc8lKHBeGkozUgTX0ebOBImcN6oyzj1yJV8GiT0; expires=Sat, 28-Dec-2019 11:13:41 GMT; Max-Age=7200; path=/; httponly
Content-Encoding: gzip

 

 

 

fiddler的使用

fiddler组成部分

 

 

工具条  

 

  重放  shift+R 可重放请求多次

筛选会话列表

 

 释放请求

 流模式

 解码 

 

 

 

 保持会话的数量

 选择监听的程序

 查找 Ctrl + F 按照请求或相应url内容查找

 保存saz格式文件

 截图

  查看本地服务信息

会话列表

 

 

  进程

 

 添加备注

 

  命令行断点

 

  高亮搜索

 

 关闭开启代理

 

 选择查看类型

 

辅助标签栏

  简单的性能分析

 检查器查看请求

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Guess you like

Origin www.cnblogs.com/longtongyu/p/12113030.html