实战一次基于Fiddler 进行抓包智能化数据集成与自动化接口交互

embedded/2024/12/25 2:16:48/

Fiddler 进行抓包智能化数据集成与自动化接口交互?通俗易懂来讲就是通过fiddler抓包接口,自动化监听抓包,拿到数据进行上传分析解析。

今天我们来通过fiddlerFiddlerScript 脚本来实现接口的监听然后通过脚本过滤接口进行数据抓取后上传接口分析数据存储或者其他自动化流程。

FiddlerScript 是 Fiddler 工具中的一种脚本语言,它基于 JScript.NET(JavaScript 的一个扩展版本),用于自定义和扩展 Fiddler 的功能。Fiddler 是一个广泛使用的 HTTP 调试代理工具,可以捕获、修改、重放 HTTP 请求和响应。而 FiddlerScript 允许用户在请求和响应的处理中插入自定义脚本,实现更复杂的处理逻辑和自动化操作。

FiddlerScript 的应用场景包括:

  1. 请求/响应的修改:在数据流经代理服务器时,你可以用脚本修改 HTTP 请求和响应内容。例如,你可以改变请求的头部、修改响应体内容或替换请求参数。

  2. 自动化处理:通过编写脚本,你可以在请求发送前或响应返回前自动化地执行特定操作,比如自动处理身份验证、自动注入某些参数等。

  3. 条件过滤:你可以根据请求的 URL、请求头、请求体等条件来决定是否修改某个请求或响应。这种功能非常有用于测试 API 的特定条件下的行为。

  4. 自定义日志记录和分析:可以根据自定义规则对请求或响应进行日志记录,帮助分析和调试 HTTP 流量,甚至是实现自动化的性能分析。

常见的 FiddlerScript 使用场景

  • 修改请求:例如,自动将请求中的某些敏感信息替换为模拟数据,或者模拟不同的用户代理(User-Agent)。
  • 添加自定义头部:为所有请求或响应添加一个特定的 HTTP 头部。
  • 处理重定向:根据请求的目标 URL 修改重定向策略。
  • 模拟不同环境:根据脚本模拟不同的网络环境、地域设置、语言设置等。

FiddlerScript 打开的俩种方式:通过Rules->  Customize Rules. 

这种方式改了配置保存后页面会有提示你脚本是否有问题。推荐这种方式,比如下面直接改了不会有提示,这样不友好。

下面这样打开的方式编辑脚本的话就可以提示你脚本是不是有问题。

而且也有一个好处你新加了脚本他里面为提示你是否是正确的会有绿色的标识告诉你语法是否正确和错误这一点也是很智能的。

下面这样就提示不了的:

FiddlerScript 脚本方法的作用:

1. OnBeforeResponse(oSession: Session)

此方法在服务器响应被发送回客户端之前被调用。你可以使用它来修改或操作响应数据,例如修改响应头、响应体或模拟不同的响应状态。

  • 作用:处理和修改响应数据,影响返回给客户端的数据。
  • 用例:可以用于修改响应体的内容,注入自定义数据,或更改响应状态码等。
static function OnBeforeResponse(oSession: Session) {}

 

2. OnPeekAtResponseHeaders(oSession: Session)

该方法在 Fiddler 看到响应头时就会被调用,但它不会修改响应数据。可以用来查看响应头或根据头部信息做一些分析或记录。

  • 作用:查看并分析响应头信息,但不直接修改响应内容。
  • 用例:用于记录响应头数据,或者基于某些响应头条件决定是否执行后续的处理。
 static function OnPeekAtResponseHeaders(oSession: Session) {}

3. OnBeforeRequest(oSession: Session)

此方法在请求发送到服务器之前调用,你可以在这里修改请求的数据,例如添加或修改请求头、修改请求体等。

  • 作用:修改请求数据,控制请求发起的内容。
  • 用例:修改请求头(如添加认证信息),更改请求的 URL 或请求体内容,或模拟不同的用户代理等。
 static function OnBeforeRequest(oSession: Session) {}

4. OnPeekAtRequestHeaders(oSession: Session)

这个方法会在请求头被发送到服务器之前被调用。可以用来查看或分析请求头信息,但不会改变请求内容。

  • 作用:查看和分析请求头信息,判断请求的来源和目标,或记录请求数据。
  • 用例:记录请求头,检查是否满足某些特定条件,决定是否跳过或处理请求。

   

static function OnPeekAtResponseHeaders(oSession: Session) {}

5. Main()

这是 FiddlerScript 的主入口方法。当 Fiddler 启动时,Main() 方法会被调用,用于初始化脚本中的各种设置和行为。你可以在这里设置全局变量或执行一次性的初始化操作。

  • 作用:初始化脚本的全局配置或变量。
  • 用例:用于全局初始化操作,比如设置默认的请求参数、配置日志等。
 static function Main() {}

6. OnExecAction(sParams: String[]): Boolean

该方法在 Fiddler 执行某个自定义操作时被调用。它通常用于 Fiddler 的自定义菜单或操作按钮,能够捕获用户的交互并执行特定的操作。

  • 作用:处理自定义操作,例如执行某个按钮点击后的动作,或者根据参数做某些操作。
  • 用例:可以用来实现脚本内的命令行操作或自定义事件(如点击自定义按钮时触发某些功能)。
 static function OnExecAction(sParams: String[]): Boolean {}

当然这里还有其他方法就不一一列举了,我们主要是使用OnBeforeResponse 处理数据就行。

FiddlerScript 脚本使用接口调用的五种方式

System.Net.WebRequest 方式

 // 上传数据到目标接口static function CallUploadAPI(data: String) {try {// 目标 URLvar targetUrl = "http://127.0.0.1:8080/api/fiddler/collect";// 创建 WebRequest 对象var request = System.Net.WebRequest.Create(targetUrl);request.Method = "POST";request.ContentType = "application/json";// 将数据转换为字节数组var requestBody = System.Text.Encoding.UTF8.GetBytes(data);request.ContentLength = requestBody.Length;FiddlerApplication.Log.LogString("Request body size (bytes): " + requestBody.Length);// 写入请求正文var requestStream = request.GetRequestStream();requestStream.Write(requestBody, 0, requestBody.Length);FiddlerApplication.Log.LogString("Request body written to stream: " + data);requestStream.Close();// 发送请求并接收响应var response = request.GetResponse();var responseStream = response.GetResponseStream();var reader = new System.IO.StreamReader(responseStream);var responseText = reader.ReadToEnd();// 日志输出FiddlerApplication.Log.LogString("Upload Success: " + responseText);reader.Close();responseStream.Close();} catch (e) {FiddlerApplication.Log.LogString("Error during upload: " + e.message);}
}

这种方式原生就支持不需要引用别的包,推荐使用。

二,System.Net.Http.HttpClient

static function CallUploadAPIWithHttpClient(data: String) {try {// 创建 HttpClient 实例var client = new System.Net.Http.HttpClient();// 设置请求的目标 URLvar targetUrl = "http://127.0.0.1:8080/api/fiddler/collect";// 将数据包装为 JSON 格式的内容var content = new System.Net.Http.StringContent(data, System.Text.Encoding.UTF8, "application/json");// 发送 POST 请求并等待响应var response = client.PostAsync(targetUrl, content).Result;// 检查响应状态码if (response.IsSuccessStatusCode) {// 获取响应内容并记录日志var responseBody = response.Content.ReadAsStringAsync().Result;FiddlerApplication.Log.LogString("Upload Success: " + responseBody);} else {// 响应失败的日志FiddlerApplication.Log.LogString("Upload Failed: HTTP " + response.StatusCode);}} catch (e) {// 捕获异常并记录日志FiddlerApplication.Log.LogString("Error during upload: " + e.message);}}

这种方式也支持友好,代码少 但是需要引入包:import System.Net.Http; 需要导入包

三,FiddlerApplication.oProxy.SendRequestAndWait

	try {// 定义目标 URLvar targetUrl = "http://127.0.0.1:8080/api/fiddler/collect";// 构造请求头部信息var oHeaders = new System.Collections.Specialized.StringDictionary();oHeaders.Add("Content-Type", "application/json");// 将请求数据转换为字节数组var requestBody = System.Text.Encoding.UTF8.GetBytes(data);// 使用 SendRequestAndWait 发送请求var oResponse = FiddlerApplication.oProxy.SendRequestAndWait(targetUrl,      // 目标 URL (String)"POST",         // HTTP 方法 (String)requestBody,    // 请求正文 (Byte[])oHeaders        // 请求头 (StringDictionary));// 检查响应结果if (oResponse != null && oResponse.responseCode == 200) {FiddlerApplication.Log.LogString("Upload Success: " + oResponse.GetResponseBodyAsString());} else if (oResponse != null) {FiddlerApplication.Log.LogString("Upload Failed: HTTP " + oResponse.responseCode);} else {FiddlerApplication.Log.LogString("No Response from Server.");}

这种方式容易对版本产生错误,不建议使用这样的方式,会编译不过。

四,使用第三方库(RestSharp)

	static function CallUploadAPIWithRestSharp(data: String) {try {// 创建 RestSharp 客户端var client = new RestClient("http://127.0.0.1:8080");// 创建请求对象var request = new RestRequest("/api/fiddler/collect", Method.POST);// 设置请求头request.AddHeader("Content-Type", "application/json");// 设置请求正文request.AddParameter("application/json", data, ParameterType.RequestBody);// 发送请求var response = client.Execute(request);// 检查响应状态码if (response.StatusCode == System.Net.HttpStatusCode.OK) {// 成功日志FiddlerApplication.Log.LogString("Upload Success: " + response.Content);} else {// 失败日志FiddlerApplication.Log.LogString("Upload Failed: HTTP " + response.StatusCode);}} catch (e) {// 捕获异常并记录日志FiddlerApplication.Log.LogString("Error during upload: " + e.message);}}

这种方式是使用第三方库RestSharp前提是你的文件需要引用RestSharp.dll 到你的安装目录

这种方式如果读取不到就手动读取在main方法当中读取:

var assembly = Assembly.LoadFrom("path_to_RestSharp.dll"); 然后导入包import RestSharp;

五,自定义插件,也是通过第四种这样的方式引入就好了。

下面演示实战效果,后台写了一个api 接口 

/api/fiddler/collect 这个就是为了接收数据上传,当然你要写其他业务可以自行处理,比如入库,统计,写入持久化es 数据分析统计等都可以。
package com.xyhlw.wechat.controller;import com.xyhlw.wechat.utils.R;
import io.swagger.annotations.ApiOperation;
import lombok.extern.slf4j.Slf4j;
import org.springframework.web.bind.annotation.PostMapping;
import org.springframework.web.bind.annotation.RequestBody;
import org.springframework.web.bind.annotation.RequestMapping;
import org.springframework.web.bind.annotation.RestController;@RestController
@RequestMapping("/api/fiddler")
@Slf4j
public class FiddlerDataCollectController {/*** 处理业务数据** @param json* @return*/@ApiOperation(value = "数据接收", notes = "数据接收", httpMethod = "POST")@PostMapping("/collect")public R getTicket(@RequestBody String json) {//todo 接收数据进行业务处理log.info("json:{}", json);return R.ok("success");}}

我们抓的是京东的搜索接口 下面注意看

https://api.m.jd.com/api

 

 

fiddler的过滤域名一定要开指定域名,不然请求很多

刷新一下网页看看效果

在这里就能看到数据进来了,我们的测试就圆满结束了。

完整的脚本如下:

import System;
import System.IO;
import System.Text;
import System.Windows.Forms;
import Fiddler;
import System.Net.Http;
import System.Reflection;// INTRODUCTION
//
// Well, hello there!
//
// Don't be scared! :-)
//
// This is the FiddlerScript Rules file, which creates some of the menu commands and
// other features of Progress Telerik Fiddler Classic. You can edit this file to modify or add new commands.
//
// The original version of this file is named SampleRules.js and it is in the
// \Program Files\Fiddler\ folder. When Fiddler Classic first runs, it creates a copy named
// CustomRules.js inside your \Documents\Fiddler2\Scripts folder. If you make a 
// mistake in editing this file, simply delete the CustomRules.js file and restart
// Fiddler Classic. A fresh copy of the default rules will be created from the original
// sample rules file.// The best way to edit this file is to install the FiddlerScript Editor, part of
// the free SyntaxEditing addons. Get it here: http://fiddler2.com/r/?SYNTAXVIEWINSTALL// GLOBALIZATION NOTE: Save this file using UTF-8 Encoding.// JScript.NET Reference
// http://fiddler2.com/r/?msdnjsnet
//
// FiddlerScript Reference
// http://fiddler2.com/r/?fiddlerscriptcookbookclass Handlers
{// *****************//// This is the Handlers class. Pretty much everything you ever add to FiddlerScript// belongs right inside here, or inside one of the already-existing functions below.//// *****************// The following snippet demonstrates a custom-bound column for the Web Sessions list.// See http://fiddler2.com/r/?fiddlercolumns for more info/*public static BindUIColumn("Method", 60)function FillMethodColumn(oS: Session): String {return oS.RequestMethod;}*/// The following snippet demonstrates how to create a custom tab that shows simple text/*public BindUITab("Flags")static function FlagsReport(arrSess: Session[]):String {var oSB: System.Text.StringBuilder = new System.Text.StringBuilder();for (var i:int = 0; i<arrSess.Length; i++){oSB.AppendLine("SESSION FLAGS");oSB.AppendFormat("{0}: {1}\n", arrSess[i].id, arrSess[i].fullUrl);for(var sFlag in arrSess[i].oFlags){oSB.AppendFormat("\t{0}:\t\t{1}\n", sFlag.Key, sFlag.Value);}}return oSB.ToString();}*/// You can create a custom menu like so:/*QuickLinkMenu("&Links") QuickLinkItem("IE GeoLoc TestDrive", "http://ie.microsoft.com/testdrive/HTML5/Geolocation/Default.html")QuickLinkItem("FiddlerCore", "http://fiddler2.com/fiddlercore")public static function DoLinksMenu(sText: String, sAction: String){Utilities.LaunchHyperlink(sAction);}*/public static RulesOption("Hide 304s")BindPref("fiddlerscript.rules.Hide304s")var m_Hide304s: boolean = false;// Cause Fiddler Classic to override the Accept-Language header with one of the defined valuespublic static RulesOption("Request &Japanese Content")var m_Japanese: boolean = false;// Automatic Authenticationpublic static RulesOption("&Automatically Authenticate")BindPref("fiddlerscript.rules.AutoAuth")var m_AutoAuth: boolean = false;// Cause Fiddler Classic to override the User-Agent header with one of the defined values// The page http://browserscope2.org/browse?category=selectors&ua=Mobile%20Safari is a good place to find updated versions of theseRulesString("&User-Agents", true) BindPref("fiddlerscript.ephemeral.UserAgentString")RulesStringValue(0,"Netscape &3", "Mozilla/3.0 (Win95; I)")RulesStringValue(1,"WinPhone8.1", "Mozilla/5.0 (Mobile; Windows Phone 8.1; Android 4.0; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 520) like iPhone OS 7_0_3 Mac OS X AppleWebKit/537 (KHTML, like Gecko) Mobile Safari/537")RulesStringValue(2,"&Safari5 (Win7)", "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.21.1 (KHTML, like Gecko) Version/5.0.5 Safari/533.21.1")RulesStringValue(3,"Safari9 (Mac)", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56")RulesStringValue(4,"iPad", "Mozilla/5.0 (iPad; CPU OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12F5027d Safari/600.1.4")RulesStringValue(5,"iPhone6", "Mozilla/5.0 (iPhone; CPU iPhone OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12F70 Safari/600.1.4")RulesStringValue(6,"IE &6 (XPSP2)", "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)")RulesStringValue(7,"IE &7 (Vista)", "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1)")RulesStringValue(8,"IE 8 (Win2k3 x64)", "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; WOW64; Trident/4.0)")RulesStringValue(9,"IE &8 (Win7)", "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)")RulesStringValue(10,"IE 9 (Win7)", "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)")RulesStringValue(11,"IE 10 (Win8)", "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)")RulesStringValue(12,"IE 11 (Surface2)", "Mozilla/5.0 (Windows NT 6.3; ARM; Trident/7.0; Touch; rv:11.0) like Gecko")RulesStringValue(13,"IE 11 (Win8.1)", "Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko")RulesStringValue(14,"Edge (Win10)", "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.11082")RulesStringValue(15,"&Opera", "Opera/9.80 (Windows NT 6.2; WOW64) Presto/2.12.388 Version/12.17")RulesStringValue(16,"&Firefox 3.6", "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.7) Gecko/20100625 Firefox/3.6.7")RulesStringValue(17,"&Firefox 43", "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0")RulesStringValue(18,"&Firefox Phone", "Mozilla/5.0 (Mobile; rv:18.0) Gecko/18.0 Firefox/18.0")RulesStringValue(19,"&Firefox (Mac)", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0")RulesStringValue(20,"Chrome (Win)", "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.48 Safari/537.36")RulesStringValue(21,"Chrome (Android)", "Mozilla/5.0 (Linux; Android 5.1.1; Nexus 5 Build/LMY48B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.78 Mobile Safari/537.36")RulesStringValue(22,"ChromeBook", "Mozilla/5.0 (X11; CrOS x86_64 6680.52.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.74 Safari/537.36")RulesStringValue(23,"GoogleBot Crawler", "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)")RulesStringValue(24,"Kindle Fire (Silk)", "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-us; Silk/1.0.22.79_10013310) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16 Silk-Accelerated=true")RulesStringValue(25,"&Custom...", "%CUSTOM%")public static var sUA: String = null;// Cause Fiddler Classic to delay HTTP traffic to simulate typical 56k modem conditionspublic static RulesOption("Simulate &Modem Speeds", "Per&formance")var m_SimulateModem: boolean = false;// Removes HTTP-caching related headers and specifies "no-cache" on requests and responsespublic static RulesOption("&Disable Caching", "Per&formance")var m_DisableCaching: boolean = false;public static RulesOption("Cache Always &Fresh", "Per&formance")var m_AlwaysFresh: boolean = false;// Force a manual reload of the script file.  Resets all// RulesOption variables to their defaults.public static ToolsAction("Reset Script")function DoManualReload() { FiddlerObject.ReloadScript();}public static ContextAction("Decode Selected Sessions")function DoRemoveEncoding(oSessions: Session[]) {for (var x:int = 0; x < oSessions.Length; x++){oSessions[x].utilDecodeRequest();oSessions[x].utilDecodeResponse();}UI.actUpdateInspector(true,true);}static function OnBeforeRequest(oSession: Session) {// Sample Rule: Color ASPX requests in RED// if (oSession.uriContains(".aspx")) {	oSession["ui-color"] = "red";	}// Sample Rule: Flag POSTs to fiddler2.com in italics// if (oSession.HostnameIs("www.fiddler2.com") && oSession.HTTPMethodIs("POST")) {	oSession["ui-italic"] = "yup";	}// Sample Rule: Break requests for URLs containing "/sandbox/"// if (oSession.uriContains("/sandbox/")) {//     oSession.oFlags["x-breakrequest"] = "yup";	// Existence of the x-breakrequest flag creates a breakpoint; the "yup" value is unimportant.// }if ((null != gs_ReplaceToken) && (oSession.url.indexOf(gs_ReplaceToken)>-1)) {   // Case sensitiveoSession.url = oSession.url.Replace(gs_ReplaceToken, gs_ReplaceTokenWith); }if ((null != gs_OverridenHost) && (oSession.host.toLowerCase() == gs_OverridenHost)) {oSession["x-overridehost"] = gs_OverrideHostWith; }if ((null!=bpRequestURI) && oSession.uriContains(bpRequestURI)) {oSession["x-breakrequest"]="uri";}if ((null!=bpMethod) && (oSession.HTTPMethodIs(bpMethod))) {oSession["x-breakrequest"]="method";}if ((null!=uiBoldURI) && oSession.uriContains(uiBoldURI)) {oSession["ui-bold"]="QuickExec";}if (m_SimulateModem) {// Delay sends by 300ms per KB uploaded.oSession["request-trickle-delay"] = "300"; // Delay receives by 150ms per KB downloaded.oSession["response-trickle-delay"] = "150"; }if (m_DisableCaching) {oSession.oRequest.headers.Remove("If-None-Match");oSession.oRequest.headers.Remove("If-Modified-Since");oSession.oRequest["Pragma"] = "no-cache";}// User-Agent Overridesif (null != sUA) {oSession.oRequest["User-Agent"] = sUA; }if (m_Japanese) {oSession.oRequest["Accept-Language"] = "ja";}if (m_AutoAuth) {// Automatically respond to any authentication challenges using the // current Fiddler Classic user's credentials. You can change (default)// to a domain\\username:password string if preferred.//// WARNING: This setting poses a security risk if remote // connections are permitted!oSession["X-AutoAuth"] = "(default)";}if (m_AlwaysFresh && (oSession.oRequest.headers.Exists("If-Modified-Since") || oSession.oRequest.headers.Exists("If-None-Match"))){oSession.utilCreateResponseAndBypassServer();oSession.responseCode = 304;oSession["ui-backcolor"] = "Lavender";}}// This function is called immediately after a set of request headers has// been read from the client. This is typically too early to do much useful// work, since the body hasn't yet been read, but sometimes it may be useful.//// For instance, see // http://blogs.msdn.com/b/fiddler/archive/2011/11/05/http-expect-continue-delays-transmitting-post-bodies-by-up-to-350-milliseconds.aspx// for one useful thing you can do with this handler.//// Note: oSession.requestBodyBytes is not available within this function!/*static function OnPeekAtRequestHeaders(oSession: Session) {var sProc = ("" + oSession["x-ProcessInfo"]).ToLower();if (!sProc.StartsWith("mylowercaseappname")) oSession["ui-hide"] = "NotMyApp";}*///// If a given session has response streaming enabled, then the OnBeforeResponse function // is actually called AFTER the response was returned to the client.//// In contrast, this OnPeekAtResponseHeaders function is called before the response headers are // sent to the client (and before the body is read from the server).  Hence this is an opportune time // to disable streaming (oSession.bBufferResponse = true) if there is something in the response headers // which suggests that tampering with the response body is necessary.// // Note: oSession.responseBodyBytes is not available within this function!//static function OnPeekAtResponseHeaders(oSession: Session) {//FiddlerApplication.Log.LogFormat("Session {0}: Response header peek shows status is {1}", oSession.id, oSession.responseCode);if (m_DisableCaching) {oSession.oResponse.headers.Remove("Expires");oSession.oResponse["Cache-Control"] = "no-cache";}if ((bpStatus>0) && (oSession.responseCode == bpStatus)) {oSession["x-breakresponse"]="status";oSession.bBufferResponse = true;}if ((null!=bpResponseURI) && oSession.uriContains(bpResponseURI)) {oSession["x-breakresponse"]="uri";oSession.bBufferResponse = true;}}static function OnBeforeResponse(oSession: Session) {if (m_Hide304s && oSession.responseCode == 304) {oSession["ui-hide"] = "true";}// 匹配目标 URLif (oSession.HostnameIs("api.m.jd.com") && oSession.uriContains("/api")) {// 获取响应数据var responseBody = oSession.GetResponseBodyAsString();// 日志记录原始响应内容FiddlerApplication.Log.LogString("Captured Data: " + responseBody);// 调用上传接口CallUploadAPI(responseBody);//	CallUploadAPIWithHttpClient(responseBody);// 调用上传函数//  CallUploadAPIWithRestSharp(responseBody);}}/** 		static function CallUploadAPIWithRestSharp(data: String) {try {// 创建 RestSharp 客户端var client = new RestClient("http://127.0.0.1:8080");// 创建请求对象var request = new RestRequest("/api/fiddler/collect", Method.POST);// 设置请求头request.AddHeader("Content-Type", "application/json");// 设置请求正文request.AddParameter("application/json", data, ParameterType.RequestBody);// 发送请求var response = client.Execute(request);// 检查响应状态码if (response.StatusCode == System.Net.HttpStatusCode.OK) {// 成功日志FiddlerApplication.Log.LogString("Upload Success: " + response.Content);} else {// 失败日志FiddlerApplication.Log.LogString("Upload Failed: HTTP " + response.StatusCode);}} catch (e) {// 捕获异常并记录日志FiddlerApplication.Log.LogString("Error during upload: " + e.message);}} */static function CallUploadAPIWithHttpClient(data: String) {try {// 创建 HttpClient 实例var client = new System.Net.Http.HttpClient();// 设置请求的目标 URLvar targetUrl = "http://127.0.0.1:8080/api/fiddler/collect";// 将数据包装为 JSON 格式的内容var content = new System.Net.Http.StringContent(data, System.Text.Encoding.UTF8, "application/json");// 发送 POST 请求并等待响应var response = client.PostAsync(targetUrl, content).Result;// 检查响应状态码if (response.IsSuccessStatusCode) {// 获取响应内容并记录日志var responseBody = response.Content.ReadAsStringAsync().Result;FiddlerApplication.Log.LogString("Upload Success: " + responseBody);} else {// 响应失败的日志FiddlerApplication.Log.LogString("Upload Failed: HTTP " + response.StatusCode);}} catch (e) {// 捕获异常并记录日志FiddlerApplication.Log.LogString("Error during upload: " + e.message);}}// 上传数据到目标接口static function CallUploadAPI(data: String) {try {// 目标 URLvar targetUrl = "http://127.0.0.1:8080/api/fiddler/collect";// 创建 WebRequest 对象var request = System.Net.WebRequest.Create(targetUrl);request.Method = "POST";request.ContentType = "application/json";// 将数据转换为字节数组var requestBody = System.Text.Encoding.UTF8.GetBytes(data);request.ContentLength = requestBody.Length;FiddlerApplication.Log.LogString("Request body size (bytes): " + requestBody.Length);// 写入请求正文var requestStream = request.GetRequestStream();requestStream.Write(requestBody, 0, requestBody.Length);FiddlerApplication.Log.LogString("Request body written to stream: " + data);requestStream.Close();// 发送请求并接收响应var response = request.GetResponse();var responseStream = response.GetResponseStream();var reader = new System.IO.StreamReader(responseStream);var responseText = reader.ReadToEnd();// 日志输出FiddlerApplication.Log.LogString("Upload Success: " + responseText);reader.Close();responseStream.Close();} catch (e) {FiddlerApplication.Log.LogString("Error during upload: " + e.message);}/**try {// 定义目标 URLvar targetUrl = "http://127.0.0.1:8080/api/fiddler/collect";// 构造请求头部信息var oHeaders = new System.Collections.Specialized.StringDictionary();oHeaders.Add("Content-Type", "application/json");// 将请求数据转换为字节数组var requestBody = System.Text.Encoding.UTF8.GetBytes(data);// 使用 SendRequestAndWait 发送请求var oResponse = FiddlerApplication.oProxy.SendRequestAndWait(targetUrl,      // 目标 URL (String)"POST",         // HTTP 方法 (String)requestBody,    // 请求正文 (Byte[])oHeaders        // 请求头 (StringDictionary));// 检查响应结果if (oResponse != null && oResponse.responseCode == 200) {FiddlerApplication.Log.LogString("Upload Success: " + oResponse.GetResponseBodyAsString());} else if (oResponse != null) {FiddlerApplication.Log.LogString("Upload Failed: HTTP " + oResponse.responseCode);} else {FiddlerApplication.Log.LogString("No Response from Server.");}*/}/*// This function executes just before Fiddler Classic returns an error that it has// itself generated (e.g. "DNS Lookup failure") to the client application.// These responses will not run through the OnBeforeResponse function above.static function OnReturningError(oSession: Session) {}
*/
/*// This function executes after Fiddler Classic finishes processing a Session, regardless// of whether it succeeded or failed. Note that this typically runs AFTER the last// update of the Web Sessions UI listitem, so you must manually refresh the Session's// UI if you intend to change it.static function OnDone(oSession: Session) {}
*//*static function OnBoot() {MessageBox.Show("Fiddler Classic has finished booting");System.Diagnostics.Process.Start("iexplore.exe");UI.ActivateRequestInspector("HEADERS");UI.ActivateResponseInspector("HEADERS");}*//*static function OnBeforeShutdown(): Boolean {// Return false to cancel shutdown.return ((0 == FiddlerApplication.UI.lvSessions.TotalItemCount()) ||(DialogResult.Yes == MessageBox.Show("Allow Fiddler Classic to exit?", "Go Bye-bye?",MessageBoxButtons.YesNo, MessageBoxIcon.Question, MessageBoxDefaultButton.Button2)));}*//*static function OnShutdown() {MessageBox.Show("Fiddler Classic has shutdown");}*//*static function OnAttach() {MessageBox.Show("Fiddler Classic is now the system proxy");}*//*static function OnDetach() {MessageBox.Show("Fiddler Classic is no longer the system proxy");}*/// The Main() function runs everytime your FiddlerScript compilesstatic function Main() {var today: Date = new Date();FiddlerObject.StatusText = " CustomRules.js was loaded at: " + today;// Uncomment to add a "Server" column containing the response "Server" header, if present// UI.lvSessions.AddBoundColumn("Server", 50, "@response.server");// Uncomment to add a global hotkey (Win+G) that invokes the ExecAction method below...// UI.RegisterCustomHotkey(HotkeyModifiers.Windows, Keys.G, "screenshot"); }// These static variables are used for simple breakpointing & other QuickExec rules BindPref("fiddlerscript.ephemeral.bpRequestURI")public static var bpRequestURI:String = null;BindPref("fiddlerscript.ephemeral.bpResponseURI")public static var bpResponseURI:String = null;BindPref("fiddlerscript.ephemeral.bpMethod")public static var bpMethod: String = null;static var bpStatus:int = -1;static var uiBoldURI: String = null;static var gs_ReplaceToken: String = null;static var gs_ReplaceTokenWith: String = null;static var gs_OverridenHost: String = null;static var gs_OverrideHostWith: String = null;// The OnExecAction function is called by either the QuickExec box in the Fiddler Classic window,// or by the ExecAction.exe command line utility.static function OnExecAction(sParams: String[]): Boolean {FiddlerObject.StatusText = "ExecAction: " + sParams[0];var sAction = sParams[0].toLowerCase();switch (sAction) {case "bold":if (sParams.Length<2) {uiBoldURI=null; FiddlerObject.StatusText="Bolding cleared"; return false;}uiBoldURI = sParams[1]; FiddlerObject.StatusText="Bolding requests for " + uiBoldURI;return true;case "bp":FiddlerObject.alert("bpu = breakpoint request for uri\nbpm = breakpoint request method\nbps=breakpoint response status\nbpafter = breakpoint response for URI");return true;case "bps":if (sParams.Length<2) {bpStatus=-1; FiddlerObject.StatusText="Response Status breakpoint cleared"; return false;}bpStatus = parseInt(sParams[1]); FiddlerObject.StatusText="Response status breakpoint for " + sParams[1];return true;case "bpv":case "bpm":if (sParams.Length<2) {bpMethod=null; FiddlerObject.StatusText="Request Method breakpoint cleared"; return false;}bpMethod = sParams[1].toUpperCase(); FiddlerObject.StatusText="Request Method breakpoint for " + bpMethod;return true;case "bpu":if (sParams.Length<2) {bpRequestURI=null; FiddlerObject.StatusText="RequestURI breakpoint cleared"; return false;}bpRequestURI = sParams[1]; FiddlerObject.StatusText="RequestURI breakpoint for "+sParams[1];return true;case "bpa":case "bpafter":if (sParams.Length<2) {bpResponseURI=null; FiddlerObject.StatusText="ResponseURI breakpoint cleared"; return false;}bpResponseURI = sParams[1]; FiddlerObject.StatusText="ResponseURI breakpoint for "+sParams[1];return true;case "overridehost":if (sParams.Length<3) {gs_OverridenHost=null; FiddlerObject.StatusText="Host Override cleared"; return false;}gs_OverridenHost = sParams[1].toLowerCase();gs_OverrideHostWith = sParams[2];FiddlerObject.StatusText="Connecting to [" + gs_OverrideHostWith + "] for requests to [" + gs_OverridenHost + "]";return true;case "urlreplace":if (sParams.Length<3) {gs_ReplaceToken=null; FiddlerObject.StatusText="URL Replacement cleared"; return false;}gs_ReplaceToken = sParams[1];gs_ReplaceTokenWith = sParams[2].Replace(" ", "%20");  // Simple helperFiddlerObject.StatusText="Replacing [" + gs_ReplaceToken + "] in URIs with [" + gs_ReplaceTokenWith + "]";return true;case "allbut":case "keeponly":if (sParams.Length<2) { FiddlerObject.StatusText="Please specify Content-Type to retain during wipe."; return false;}UI.actSelectSessionsWithResponseHeaderValue("Content-Type", sParams[1]);UI.actRemoveUnselectedSessions();UI.lvSessions.SelectedItems.Clear();FiddlerObject.StatusText="Removed all but Content-Type: " + sParams[1];return true;case "stop":UI.actDetachProxy();return true;case "start":UI.actAttachProxy();return true;case "cls":case "clear":UI.actRemoveAllSessions();return true;case "g":case "go":UI.actResumeAllSessions();return true;case "goto":if (sParams.Length != 2) return false;Utilities.LaunchHyperlink("http://www.google.com/search?hl=en&btnI=I%27m+Feeling+Lucky&q=" + Utilities.UrlEncode(sParams[1]));return true;case "help":Utilities.LaunchHyperlink("http://fiddler2.com/r/?quickexec");return true;case "hide":UI.actMinimizeToTray();return true;case "log":FiddlerApplication.Log.LogString((sParams.Length<2) ? "User couldn't think of anything to say..." : sParams[1]);return true;case "nuke":UI.actClearWinINETCache();UI.actClearWinINETCookies(); return true;case "screenshot":UI.actCaptureScreenshot(false);return true;case "show":UI.actRestoreWindow();return true;case "tail":if (sParams.Length<2) { FiddlerObject.StatusText="Please specify # of sessions to trim the session list to."; return false;}UI.TrimSessionList(int.Parse(sParams[1]));return true;case "quit":UI.actExit();return true;case "dump":UI.actSelectAll();UI.actSaveSessionsToZip(CONFIG.GetPath("Captures") + "dump.saz");UI.actRemoveAllSessions();FiddlerObject.StatusText = "Dumped all sessions to " + CONFIG.GetPath("Captures") + "dump.saz";return true;default:if (sAction.StartsWith("http") || sAction.StartsWith("www.")) {System.Diagnostics.Process.Start(sParams[0]);return true;}else{FiddlerObject.StatusText = "Requested ExecAction: '" + sAction + "' not found. Type HELP to learn more.";return false;}}}}
————【没有与生俱来的天赋,都是后天的努力拼搏 】只做原创(我是小杨,谢谢你的关注和支持)

http://www.ppmy.cn/embedded/148499.html

相关文章

IDEA自己常用的几个快捷方式(自己的习惯)

TOC 背景 换工作了, 新的IDEA, 又要重新设置自己的快捷方式了. 灵感 1.这些个性话的配置应该是可以导出的. 然后在新的IDEA直接导入就行了, 感觉应该是有这个功能. 就是这个文件: <keymap version"1" name"Personal KeyMap" parent"$default…

拦截器魔法:Spring MVC中的防重放守护者

目录 简介HandlerInterceptorAdapter vs HandlerInterceptor创建一个防重放拦截器注册拦截器路径模式匹配适配器模式的魅力总结 简介 在构建安全可靠的Web应用程序时&#xff0c;防止请求重放攻击是一项关键任务。当用户或系统发出的请求被恶意第三方捕获并重复发送给服务器…

MySQL InnoDB 存储引擎详解

InnoDB 是 MySQL 中最常用、最强大的存储引擎之一&#xff0c;其支持事务、外键、行级锁等特性&#xff0c;非常适合对可靠性、并发性要求较高的场景。本文将详细解析 InnoDB 的核心特性、内部机制以及使用场景&#xff0c;帮助你更好地理解和优化 MySQL 数据库。 1. 为什么选择…

【漏洞复现】CVE-2022-45206 CVE-2023-38905 SQL Injection

漏洞信息 NVD - CVE-2022-45206 Jeecg-boot v3.4.3 was discovered to contain a SQL injection vulnerability via the component /sys/duplicate/check. NVD - CVE-2023-38905 SQL injection vulnerability in Jeecg-boot v.3.5.0 and before allows a local attacker to…

Scala项目(图书管理系统)

3、service BookService package org.app package serviceimport org.app.dao.{BookDAO, BorrowRecordDAO} import org.app.models.{BookModel, BorrowRecordModel}import java.time.LocalDateTime import scala.collection.mutable.ListBuffer// 图书业务逻辑层 class BookS…

Airwallex空中云汇实现独立站安全高效收款

在数字化浪潮的强劲推动下&#xff0c;全球贸易正加快迈向数字化转型&#xff0c;其中跨境电商已深度融入国际贸易体系&#xff0c;成为促进全球经济互联互通的重要力量。 而独立站在这一领域中扮演着 举足轻重的角色&#xff0c;吸引了越来越多的商家投身于其建设之中&#xf…

[python]使用flask-caching缓存数据

简介 Flask-Caching 是 Flask 的一个扩展&#xff0c;为任何 Flask 应用程序添加了对各种后端的缓存支持。它基于 cachelib 运行&#xff0c;并通过统一的 API 支持 werkzeug 的所有原始缓存后端。开发者还可以通过继承 flask_caching.backends.base.BaseCache 类来开发自己的…

深入解析 StarRocks 物化视图:全方位的查询改写机制

小编导读&#xff1a; 本文将重点介绍如何利用物化视图进行查询改写。文章将全面介绍物化视图的基本原理、关键特性、应用案例、使用场景、代码细节以及主流大数据产品的物化视图改写能力对比。 物化视图在 StarRocks 中扮演着至关重要的角色&#xff0c;它是进行数据建模和加速…