Fiddler 基本用法

官方文档

http://docs.telerik.com/fiddler/KnowledgeBase/OptionsUI

不错的教程
http://blog.csdn.net/ohmygirl/article/details/17849983/

Fiddler console

常用的基本功能

断点

1
2
3
4
5
bpu str # 设置请求断点
bpu # 取消请求断点
bpafter str # 设置响应断点
bpafter # 取消响应断点

重放
Rules - Automatic Breakpoints - Before Request
右键-Replay

Fiddler 导出流量

https://groups.google.com/forum/m/#!topic/httpfiddler/8G1NuQWY1aw

https://m.garysieling.com/blog/adding-export-excel-option-fiddler、

https://github.com/invernizzi/scapy-http

被动式流量分析
解析pcap文件,导出大量URL
对URL进行离线过滤
分析URL参数便于找SSRF
分析UID参数便于找越权
MongoDB存储

https://stackoverflow.com/questions/24728088/python-parse-http-response-string

https://stackoverflow.com/questions/4685217/parse-raw-http-headers

https://www.cnblogs.com/VseYoung/p/pcap_python.html

https://github.com/EmergingThreats/fiddler2pcap

https://github.com/EmergingThreats/fiddler2pcap

https://github.com/secforce/sparta