Fidder抓包工具使用

柔光的暖阳◎ 2022-05-16 05:20 222阅读 0赞

## 阅读目录 ##

> ### [1. Fiddler 抓包简介][1. Fiddler] ###
> 
>     [1）. 字段说明][1_.]
> 
>     [2）. Statistics 请求的性能数据分析][2_. Statistics]
> 
>     [3）. Inspectors 查看数据内容][3_. Inspectors]
> 
>     [4）. AutoResponder 允许拦截制定规则的请求][4_. AutoResponder]
> 
>     [5）. Filters 请求过滤规则][5_. Filters]
> 
>     [6）. Timeline 请求响应时间][6_. Timeline]
> 
> ### [2. Fiddler 设置解密HTTPS的网络数据][2. Fiddler _HTTPS] ###
> 
> ### [3. Fiddler 抓取Iphone / Android数据包][3. Fiddler _Iphone _ Android] ###
> 
> ### [4. Fiddler 内置命令与断点][4. Fiddler] ###

## 序章 ##

Fiddler是一个蛮好用的抓包工具，可以将网络传输发送与接受的数据包进行截获、重发、编辑、转存等操作。也可以用来检测网络安全。反正好处多多，举之不尽呀！当年学习的时候也蛮费劲，一些蛮实用隐藏的小功能用了之后就忘记了，每次去网站上找也很麻烦，所以搜集各大网络的资料，总结了一些常用的功能。

Fiddler 下载地址 ：[https://www.telerik.com/download/fiddler][https_www.telerik.com_download_fiddler]

Fiddler 离线下载地址：[http://pan.baidu.com/s/1i3NvE8P][http_pan.baidu.com_s_1i3NvE8P] 密码：ozem

下载Fiddler要FQ，我费了好大得劲才翻出去下载到…

win8之后用“Fiddler for .NET4”而win8之前用“Fiidler for .NET2”比较好

[![image][]][image 1]

### 1. Fiddler 抓包简介 ###

Fiddler是通过改写HTTP代理，让数据从它那通过，来监控并且截取到数据。当然Fiddler很屌，在打开它的那一瞬间，它就已经设置好了浏览器的代理了。当你关闭的时候，它又帮你把代理还原了，是不是很贴心。。。

[![image][image 2]][image_image 2]

1） 字段说明

Fiddler想要抓到数据包，要确保Capture Traffic是开启，在File –> Capture Traffic。开启后再左下角会有显示，当然也可以直接点击左下角的图标来关闭/开启抓包功能。

[![image][image 3]][image_image 3]

Fiddler开始工作了，抓到的数据包就会显示在列表里面，下面总结了这些都是什么意思：

[![image][image 4]][image_image 4]

<table> 
 <tbody> 
 <tr> 
 <td> 名称 </td> 
 <td> 含义 </td> 
 </tr> 
 <tr> 
 <td> # </td> 
 <td> 抓取HTTP Request的顺序，从1开始，以此递增 </td> 
 </tr> 
 <tr> 
 <td> Result </td> 
 <td> HTTP状态码 </td> 
 </tr> 
 <tr> 
 <td> Protocol </td> 
 <td> 请求使用的协议，如HTTP/HTTPS/FTP等 </td> 
 </tr> 
 <tr> 
 <td> Host </td> 
 <td> 请求地址的主机名 </td> 
 </tr> 
 <tr> 
 <td> URL </td> 
 <td> 请求资源的位置 </td> 
 </tr> 
 <tr> 
 <td> Body </td> 
 <td> 该请求的大小 </td> 
 </tr> 
 <tr> 
 <td> Caching </td> 
 <td> 请求的缓存过期时间或者缓存控制值 </td> 
 </tr> 
 <tr> 
 <td> Content-Type </td> 
 <td> 请求响应的类型 </td> 
 </tr> 
 <tr> 
 <td> Process </td> 
 <td> 发送此请求的进程：进程ID </td> 
 </tr> 
 <tr> 
 <td> Comments </td> 
 <td> 允许用户为此回话添加备注 </td> 
 </tr> 
 <tr> 
 <td> Custom </td> 
 <td> 允许用户设置自定义值 </td> 
 </tr> 
 <tr> 
 <td> 图标 </td> 
 <td> 含义 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234159140-1640771885.gif" rel="nofollow"><img alt="clip_image001[13]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234159468-1047137951.gif" width="13"></a> </td> 
 <td> 请求已经发往服务器 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234159765-1592382397.gif" rel="nofollow"><img alt="clip_image002[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234200047-1757509080.gif" width="13"></a> </td> 
 <td> 已从服务器下载响应结果 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234201172-824376071.gif" rel="nofollow"><img alt="clip_image003[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234201406-1416873112.gif" width="15"></a> </td> 
 <td> 请求从断点处暂停 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234201843-109931155.gif" rel="nofollow"><img alt="clip_image004[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234202375-1737717316.gif" width="15"></a> </td> 
 <td> 响应从断点处暂停 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234202609-1251165508.gif" rel="nofollow"><img alt="clip_image005[4]" height="16" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234202812-1354392122.gif" width="16"></a> </td> 
 <td> 请求使用 HTTP 的 HEAD 方法，即响应没有内容（Body） </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234203187-464520892.png" rel="nofollow"><img alt="clip_image006[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234203515-1304170577.png" width="16"></a> </td> 
 <td> 请求使用 HTTP 的 POST 方法 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234204156-849270471.gif" rel="nofollow"><img alt="clip_image007[4]" height="15" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234204531-965189067.gif" width="14"></a> </td> 
 <td> 请求使用 HTTP 的 CONNECT 方法，使用 HTTPS 协议建立连接隧道 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234205078-161726095.gif" rel="nofollow"><img alt="clip_image008[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234205547-1927498766.gif" width="15"></a> </td> 
 <td> 响应是 HTML 格式 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234205906-1953449875.gif" rel="nofollow"><img alt="clip_image009[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234206203-722749081.gif" width="15"></a> </td> 
 <td> 响应是一张图片 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234206453-344992441.gif" rel="nofollow"><img alt="clip_image010[4]" height="16" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234207000-575730385.gif" width="16"></a> </td> 
 <td> 响应是脚本格式 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234207218-1611954438.gif" rel="nofollow"><img alt="clip_image011[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234207625-740567358.gif" width="16"></a> </td> 
 <td> 响应是 CSS 格式 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234208015-685482882.gif" rel="nofollow"><img alt="clip_image012[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234208297-916097140.gif" width="17"></a> </td> 
 <td> 响应是 XML 格式 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234209140-529820079.png" rel="nofollow"><img alt="clip_image013[4]" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234209640-1298497869.png" width="16"></a> </td> 
 <td> 响应是 JSON 格式 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234209937-1106065906.png" rel="nofollow"><img alt="clip_image014[4]" height="16" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234210172-1709733575.png" width="14"></a> </td> 
 <td> 响应是一个音频文件 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234210453-1729183371.png" rel="nofollow"><img alt="clip_image015[4]" height="16" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234210703-1810906238.png" width="15"></a> </td> 
 <td> 响应是一个视频文件 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234210906-1149932156.png" rel="nofollow"><img alt="clip_image016[4]" height="15" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234211297-1181901939.png" width="16"></a> </td> 
 <td> 响应是一个 SilverLight </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234211547-791281288.png" rel="nofollow"><img alt="clip_image017[4]" height="16" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234213515-1617989240.png" width="13"></a> </td> 
 <td> 响应是一个 FLASH </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234213922-1389767841.png" rel="nofollow"><img alt="clip_image018[4]" height="16" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234214140-838447913.png" width="14"></a> </td> 
 <td> 响应是一个字体 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234214422-971819227.gif" rel="nofollow"><img alt="clip_image019[4]" height="15" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234214828-810550242.gif" width="13"></a> </td> 
 <td> 普通响应成功 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234215125-2125019877.gif" rel="nofollow"><img alt="clip_image020[4]" height="14" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234215406-1088186512.gif" width="14"></a> </td> 
 <td> 响应是 HTTP/300、301、302、303 或 307 重定向 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234215718-1165848356.gif" rel="nofollow"><img alt="clip_image021[4]" height="16" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234216015-2008519780.gif" width="17"></a> </td> 
 <td> 响应是 HTTP/304（无变更）：使用缓存文件 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234216265-1959007927.gif" rel="nofollow"><img alt="clip_image022[4]" height="18" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234216531-1803780843.gif" width="12"></a> </td> 
 <td> 响应需要客户端证书验证 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234216781-677826292.gif" rel="nofollow"><img alt="clip_image023[4]" height="14" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234217078-1617370921.gif" width="14"></a> </td> 
 <td> 服务端错误 </td> 
 </tr> 
 <tr> 
 <td> <a href="http://images2015.cnblogs.com/blog/626593/201601/626593-20160119000323687-304487615.gif" rel="nofollow"><img alt="clip_image0244" height="17" src="https://images2015.cnblogs.com/blog/626593/201601/626593-20160119000324093-1538967179.gif" width="16"></a> </td> 
 <td> 会话被客户端、Fiddler 或者服务端终止 </td> 
 </tr> 
 </tbody> 
</table>

2）. Statistics 请求的性能数据分析

好了。左边看完了，现在可以看右边了

随意点击一个请求，就可以看到Statistics关于HTTP请求的性能以及数据分析了（不可能安装好了Fiddler一条请求都没有…）：

[![image][image 5]][image_image 5]

3）. Inspectors 查看数据内容

Inspectors是用于查看会话的内容，上半部分是请求的内容，下半部分是响应的内容：

[![image][image 6]][image_image 6]

4）. AutoResponder 允许拦截指定规则的请求

AutoResponder允许你拦截指定规则的求情，并返回本地资源或Fiddler资源，从而代替服务器响应。

看下图5步，我将“baidu”这个关键字与我电脑“f:\\Users\\YukiO\\Pictures\\boy.jpeg”这张图片绑定了，点击Save保存后勾选Enable rules，再访问baidu，就会被劫持。

> 这个玩意有很多匹配规则，如：
> 
> 1. 字符串匹配（默认）：只要包含指定字符串（不区分大小写），全部认为是匹配
> 
> <table> 
> <tbody> 
> <tr> 
> <td style="vertical-align:top;">字符串匹配（baidu）</td> 
> <td style="vertical-align:top;">是否匹配</td> 
> </tr> 
> <tr> 
> <td style="vertical-align:top;"><a href="http://www.baidu.com/" rel="nofollow">http://www.baidu.com</a></td> 
> <td style="vertical-align:top;">匹配</td> 
> </tr> 
> <tr> 
> <td style="vertical-align:top;"><a href="http://pan.baidu.com/" rel="nofollow">http://pan.baidu.com</a></td> 
> <td style="vertical-align:top;">匹配</td> 
> </tr> 
> <tr> 
> <td style="vertical-align:top;"><a href="http://tieba.baidu.com/" rel="nofollow">http://tieba.baidu.com</a></td> 
> <td style="vertical-align:top;">匹配</td> 
> </tr> 
> </tbody> 
> </table>
> 
>  
> 
> 2. 正则表达式匹配：以“regex:”开头，使用正则表达式来匹配，这个是区分大小写的
> 
> <table> 
> <tbody> 
> <tr> 
> <td style="vertical-align:top;">字符串匹配（regex:.+.(jpg&nbsp;|&nbsp;gif&nbsp;|&nbsp;bmp&nbsp;) $）</td> 
> <td style="vertical-align:top;">是否匹配</td> 
> </tr> 
> <tr> 
> <td style="vertical-align:top;"><a href="http://bbs.fishc.com/Path1/query=example.bmp" rel="nofollow">http://bbs.fishc.com/Path1/query=foo.bmp&amp;bar</a></td> 
> <td style="vertical-align:top;">不匹配</td> 
> </tr> 
> <tr> 
> <td style="vertical-align:top;"><a href="http://bbs.fishc.com/Path1/query=example.gif" rel="nofollow">http://bbs.fishc.com/Path1/query=example.gif</a></td> 
> <td style="vertical-align:top;">匹配</td> 
> </tr> 
> <tr> 
> <td style="vertical-align:top;"><a href="http://bbs.fishc.com/Path1/query=example.bmp" rel="nofollow">http://bbs.fishc.com/Path1/query=example.bmp</a></td> 
> <td style="vertical-align:top;">匹配</td> 
> </tr> 
> <tr> 
> <td style="vertical-align:top;"><a href="http://bbs.fishc.com/Path1/query=example.Gif" rel="nofollow">http://bbs.fishc.com/Path1/query=example.Gif</a></td> 
> <td style="vertical-align:top;">不匹配</td> 
> </tr> 
> </tbody> 
> </table>

[![image][image 7]][image_image 7]

[![image][image 8]][image_image 8]

4）. Composer 自定义请求发送服务器

Composer允许自定义请求发送到服务器，可以手动创建一个新的请求，也可以在会话表中，拖拽一个现有的请求

Parsed模式下你只需要提供简单的URLS地址即可（如下图，也可以在RequestBody定制一些属性，如模拟浏览器User-Agent）

[![image][image 9]][image_image 9]

5）. Filters 请求过滤规则

Fiters 是过滤请求用的，左边的窗口不断的更新，当你想看你系统的请求的时候，你刷新一下浏览器，一大片不知道哪来请求，看着碍眼，它还一直刷新你的屏幕。这个时候通过过滤规则来过滤掉那些不想看到的请求。

[![image][image 10]][image_image 10]

勾选左上角的Use Filters开启过滤器，这里有两个最常用的过滤条件：Zone和Host

> 1、Zone 指定只显示内网（Intranet）或互联网（Internet）的内容：
> 
> [![image][image 11]][image_image 11]
> 
>  
> 
> 2、Host 指定显示某个域名下的会话：
> 
> [![image][image 12]][image_image 12]
> 
> 如果框框为黄色（如图），表示修改未生效，点击红圈里的文字即可

6）. Timeline 请求响应时间

在左侧会话窗口点击一个或多个（同时按下 Ctrl 键），Timeline 便会显示指定内容从服务端传输到客户端的时间：

[![image][image 13]][image_image 13]

### 2. Fiddler 设置解密HTTPS的网络数据 ###

Fiddler可以通过伪造CA证书来欺骗浏览器和服务器。Fiddler是个很会装逼的好东西，大概原理就是在浏览器面前Fiddler伪装成一个HTTPS服务器，而在真正的HTTPS服务器面前Fiddler又装成浏览器，从而实现解密HTTPS数据包的目的。

解密HTTPS需要手动开启，依次点击：

1. Tools –> Fiddler Options –>  HTTPS

[![image][image 14]][image_image 14]

2. 勾选Decrypt HTTPS Traffic

[![image][image 15]][image_image 15]

3. 点击OK

[![image][image 16]][image_image 16]

### 3. Fiddler 抓取Iphone / Android数据包 ###

想要Fiddler抓取移动端设备的数据包，其实很简单，先来说说移动设备怎么去访问网络，看了下面这张图，就明白了。

[![image][image 17]][image_image 17]

可以看得出，移动端的数据包，都是要走wifi出去，所以我们可以把自己的电脑开启热点，将手机连上电脑，Fiddler开启代理后，让这些数据通过Fiddler，Fiddler就可以抓到这些包，然后发给路由器（如图）：

[![image][image 18]][image_image 18]

1. 打开Wifi热点，让手机连上（我这里用的360wifi，其实随意一个都行）

[![image][image 19]][image_image 19]

2. 打开Fidder，点击菜单栏中的 \[Tools\] –> \[Fiddler Options\]

[![image][image 20]][image_image 20]

3. 点击 \[Connections\] ，设置代理端口是8888， 勾选 Allow remote computers to connect， 点击OK

[![image][image 21]][image_image 21]

4. 这时在 Fiddler 可以看到自己本机无线网卡的IP了（要是没有的话，重启Fiddler，或者可以在cmd中ipconfig找到自己的网卡IP）

[![image][image 22]][image_image 22]

[![image][image 23]][image_image 23]

5. 在手机端连接PC的wifi，并且设置代理IP与端口（代理IP就是上图的IP，端口是Fiddler的代理端口8888）

[![image][image 24]][image_image 24]

6. 访问网页输入代理IP和端口，下载Fiddler的证书，点击下图FiddlerRoot certificate

[![image][image 25]][image_image 25]

【注意】：如果打开浏览器碰到类似下面的报错，请打开Fiddler的证书解密模式（[Fiddler 设置解密HTTPS的网络数据][2. Fiddler _HTTPS]）

No root certificate was found. Have you enabled HTTPS traffic decryption in Fiddler yet?

[![208B4A022896FE5008CFDBD54105185D][]][208B4A022896FE5008CFDBD54105185D 1]          [![13D99A1D77D5528F3EFBA0C3DEA3BD28][]][13D99A1D77D5528F3EFBA0C3DEA3BD28 1]

[![FDE79CDC9CB62CC6CF68F98C33CB281A][]][FDE79CDC9CB62CC6CF68F98C33CB281A 1]          [![8F268C0A1192E2DF41BD0F5DEFD525D9][]][8F268C0A1192E2DF41BD0F5DEFD525D9 1]

7. 安装完了证书，可以用手机访问应用，就可以看到截取到的数据包了。（下图选中是布卡漫画的数据包，下面还有QQ邮箱的）

[![image][image 26]][image_image 26]

### 4. Fiddler 内置命令与断点 ###

Fiddler还有一个藏的很深的命令框，就是眼前，我用了几年的Fiddler都没有发现它，偶尔在别人的文章发现还有这个小功能，还蛮好用的，整理下记录在这里。

FIddler断点功能就是将请求截获下来，但是不发送，这个时候你可以干很多事情，比如说，把包改了，再发送给服务器君。还有balabala一大堆的事情可以做，就不举例子了。

[![image][image 27]][image_image 27]

<table> 
 <tbody> 
 <tr> 
 <td style="vertical-align:top;"> 命令 </td> 
 <td style="vertical-align:top;"> 对应请求项 </td> 
 <td style="vertical-align:top;"> 介绍 </td> 
 <td style="vertical-align:top;"> 示例 </td> 
 </tr> 
 <tr> 
 <td> ? </td> 
 <td> All </td> 
 <td>问号后边跟一个字符串，可以匹配出包含这个字符串的请求</td> 
 <td> ?google </td> 
 </tr> 
 <tr> 
 <td style="vertical-align:top;"> &gt; </td> 
 <td style="vertical-align:top;"> Body </td> 
 <td style="vertical-align:top;">大于号后面跟一个数字，可以匹配出请求大小，大于这个数字请求</td> 
 <td style="vertical-align:top;"> &gt;1000 </td> 
 </tr> 
 <tr> 
 <td> &lt; </td> 
 <td> Body </td> 
 <td>小于号跟大于号相反，匹配出请求大小，小于这个数字的请求</td> 
 <td> &lt;100 </td> 
 </tr> 
 <tr> 
 <td> = </td> 
 <td> Result </td> 
 <td>等于号后面跟数字，可以匹配HTTP返回码</td> 
 <td> =200 </td> 
 </tr> 
 <tr> 
 <td> @ </td> 
 <td> Host </td> 
 <td>@后面跟Host，可以匹配域名</td> 
 <td> @www.baidu.com </td> 
 </tr> 
 <tr> 
 <td> select </td> 
 <td> Content-Type </td> 
 <td>select后面跟响应类型，可以匹配到相关的类型</td> 
 <td> select image </td> 
 </tr> 
 <tr> 
 <td> cls </td> 
 <td> All </td> 
 <td>清空当前所有请求</td> 
 <td> cls </td> 
 </tr> 
 <tr> 
 <td> dump </td> 
 <td> All </td> 
 <td>将所有请求打包成saz压缩包，保存到“我的文档\Fiddler2\Captures”目录下</td> 
 <td> dump </td> 
 </tr> 
 <tr> 
 <td> start </td> 
 <td> All </td> 
 <td>开始监听请求</td> 
 <td> start </td> 
 </tr> 
 <tr> 
 <td> stop </td> 
 <td> All </td> 
 <td>停止监听请求</td> 
 <td> stop </td> 
 </tr> 
 <tr> 
 <td colspan="4">断点命令&nbsp;</td> 
 </tr> 
 <tr> 
 <td> bpafter </td> 
 <td> All </td> 
 <td>bpafter后边跟一个字符串，表示中断所有包含该字符串的请求</td> 
 <td> bpafter baidu（输入bpafter解除断点） </td> 
 </tr> 
 <tr> 
 <td> bpu </td> 
 <td> All </td> 
 <td>跟bpafter差不多，只不过这个是收到请求了，中断响应</td> 
 <td> bpu baidu（输入bpu解除断点） </td> 
 </tr> 
 <tr> 
 <td> bps </td> 
 <td> Result </td> 
 <td>后面跟状态吗，表示中断所有是这个状态码的请求</td> 
 <td> bps 200（输入bps解除断点） </td> 
 </tr> 
 <tr> 
 <td> bpv / bpm </td> 
 <td> HTTP方法 </td> 
 <td>只中断HTTP方法的命令，HTTP方法如POST、GET</td> 
 <td> bpv get（输入bpv解除断点） </td> 
 </tr> 
 <tr> 
 <td> g / go </td> 
 <td> All </td> 
 <td>放行所有中断下来的请求</td> 
 <td> g </td> 
 </tr> 
 </tbody> 
</table>

示例演示：

**?**

[![image][image 28]][image_image 28]

**>**

[![image][image 29]][image_image 29]

**<**

[![image][image 30]][image_image 30]

**=**

[![image][image 31]][image_image 31]

**@**

[![image][image 32]][image_image 32]

**select**

[![image][image 33]][image_image 33]

**cls**

[![image][image 34]][image_image 34]

**dump**

[![image][image 35]][image_image 35]

断点命令：

断点可以直接点击Fiddler下图的图标位置，就可以设置全部请求的断点，断点的命令可以精确设置需要截获那些请求。如下示例：

[![image][image 36]][image_image 36]

命令：

**bpafter**

[![image][image 37]][image_image 37]   [![image][image 38]][image_image 38]

**bps**

[![image][image 39]][image_image 39]

[![image][image 40]][image_image 40]

**bpv**

[![image][image 41]][image_image 41]

[![image][image 42]][image_image 42]

**g / go**

[![image][image 43]][image_image 43]

[![image][image 44]][image_image 44]

[1. Fiddler]: https://www.cnblogs.com/yyhh/p/5140852.html#l01
[1_.]: https://www.cnblogs.com/yyhh/p/5140852.html#l11
[2_. Statistics]: https://www.cnblogs.com/yyhh/p/5140852.html#l12
[3_. Inspectors]: https://www.cnblogs.com/yyhh/p/5140852.html#l13
[4_. AutoResponder]: https://www.cnblogs.com/yyhh/p/5140852.html#l14
[5_. Filters]: https://www.cnblogs.com/yyhh/p/5140852.html#l15
[6_. Timeline]: https://www.cnblogs.com/yyhh/p/5140852.html#l16
[2. Fiddler _HTTPS]: https://www.cnblogs.com/yyhh/p/5140852.html#l02
[3. Fiddler _Iphone _ Android]: https://www.cnblogs.com/yyhh/p/5140852.html#l03
[4. Fiddler]: https://www.cnblogs.com/yyhh/p/5140852.html#l04
[https_www.telerik.com_download_fiddler]: https://www.telerik.com/download/fiddler
[http_pan.baidu.com_s_1i3NvE8P]: http://pan.baidu.com/s/1i3NvE8P
[image]: /images/20220516/67c68538273642d1916eed88933351e6.png
[image 1]: http://images2015.cnblogs.com/blog/626593/201601/626593-20160118234151922-2118606677.png
[image 2]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234154922-335265309.png
[image_image 2]: /images/20220516/a82bf1b1216043e28488b4fe7b56aaff.png
[image 3]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234157312-154346340.png
[image_image 3]: /images/20220516/587f699cea5a465fb975bc5ed43546a3.png
[image 4]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234158609-143657944.png
[image_image 4]: /images/20220516/49c9ca6f332f4430a12a200a514d4999.png
[image 5]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234218890-2133347180.png
[image_image 5]: /images/20220516/f7d4588f77f74399952a52bb434a8667.png
[image 6]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120130545953-2034481316.png
[image_image 6]: /images/20220516/4b9982fc24d64fd9adaa592015161f2f.png
[image 7]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234219765-703426619.png
[image_image 7]: /images/20220516/5d3b858df60e42a7b454109fd1905792.png
[image 8]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234224843-907043204.png
[image_image 8]: /images/20220516/8f4e1b8d6d754269b2d1482ea6a7948f.png
[image 9]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234227062-846408602.png
[image_image 9]: /images/20220516/40eda0220ee040e9968cac1a4f7f37de.png
[image 10]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125401968-22426265.png
[image_image 10]: /images/20220516/d0f722cea185436f947c991a8ce0966b.png
[image 11]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118235316718-1553324600.png
[image_image 11]: /images/20220516/94c5e24da3d944cbabadec1fa80afa59.png
[image 12]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118235317328-711964625.png
[image_image 12]: /images/20220516/b4112233048c4b69903d769fbd444d01.png
[image 13]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118235318172-1052872585.png
[image_image 13]: /images/20220516/a8407db544c8490e9a1ab81c4a0d1018.png
[image 14]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234228140-2037050814.png
[image_image 14]: /images/20220516/eaf8d3e3794d49b098a33e02b4affe44.png
[image 15]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234229250-1993071078.png
[image_image 15]: /images/20220516/8ca582d146144366bb79bea60d0d6d3a.png
[image 16]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160118234230343-471116797.png
[image_image 16]: /images/20220516/7ab7d665df004d9eaadcf6111d49127f.png
[image 17]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124738422-909023754.png
[image_image 17]: /images/20220516/fe01a4f808f448d892d2b82005e75aec.png
[image 18]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124739218-1083286524.png
[image_image 18]: /images/20220516/3d5a65e9a0444ce1ab130fbadc1d637b.png
[image 19]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124740203-69950239.png
[image_image 19]: /images/20220516/fd772c6ad4b54354bab381f79462561b.png
[image 20]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124747047-421831359.png
[image_image 20]: /images/20220516/286b7270549f4879ac11001ec26d2af2.png
[image 21]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124843828-142667262.png
[image_image 21]: /images/20220516/1371c771aff64f828804771962d96494.png
[image 22]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124848922-1087943477.png
[image_image 22]: /images/20220516/af49fa62729648f6ad70c8c81e35f4d2.png
[image 23]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124849640-39807059.png
[image_image 23]: /images/20220516/7fb186ecbed84a15a81ca655c4de4ebe.png
[image 24]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124855281-1725826056.png
[image_image 24]: /images/20220516/080998e16f2d4f0486b58d4af820e900.png
[image 25]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124905156-91772621.png
[image_image 25]: /images/20220516/f63aedcc90214c778f36e5a9ac582c9f.png
[208B4A022896FE5008CFDBD54105185D]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120124911547-1662798136.png
[208B4A022896FE5008CFDBD54105185D 1]: http://images2015.cnblogs.com/blog/626593/201601/626593-20160120124906687-1656785164.png
[13D99A1D77D5528F3EFBA0C3DEA3BD28]: /images/20220516/4cb6977eccbf4237aeb848116cbceb75.png
[13D99A1D77D5528F3EFBA0C3DEA3BD28 1]: http://images2015.cnblogs.com/blog/626593/201601/626593-20160120124935859-1823496174.png
[FDE79CDC9CB62CC6CF68F98C33CB281A]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125000843-2060195202.png
[FDE79CDC9CB62CC6CF68F98C33CB281A 1]: http://images2015.cnblogs.com/blog/626593/201601/626593-20160120125000515-1465458167.png
[8F268C0A1192E2DF41BD0F5DEFD525D9]: /images/20220516/35f9dc03a5c740258d390f21a8276581.png
[8F268C0A1192E2DF41BD0F5DEFD525D9 1]: http://images2015.cnblogs.com/blog/626593/201601/626593-20160120125001187-2034345997.png
[image 26]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125406187-1394564312.png
[image_image 26]: /images/20220516/ccf36e129b4640fe8677c9508b598337.png
[image 27]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125408672-279510487.png
[image_image 27]: /images/20220516/6a9e3932a4b546358c96950a7bb7ae43.png
[image 28]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125409703-1678932502.png
[image_image 28]: /images/20220516/22235b95bf074a5eb93b0f5513fe4f7b.png
[image 29]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125414093-255856593.png
[image_image 29]: /images/20220516/18cefd7eb9be4f6d91bb603102d4dee4.png
[image 30]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125414797-2077867027.png
[image_image 30]: /images/20220516/dc74aa52461b43a88891e9b367b74400.png
[image 31]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125415547-1825599853.png
[image_image 31]: /images/20220516/2b8217944cb54fa88d8f36dd3b1e9bba.png
[image 32]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125416093-439467539.png
[image_image 32]: /images/20220516/a2b8586cd4a74c098cf0fb974ead93e5.png
[image 33]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125417734-817450905.png
[image_image 33]: /images/20220516/e8868d4763324d3d925c16dedc3a539e.png
[image 34]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125418343-1404670131.png
[image_image 34]: /images/20220516/631f46c2de084406ba053905b3b8e111.png
[image 35]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125418906-1712835498.png
[image_image 35]: /images/20220516/6d380947dbad41d48cb0d3927ab66ca5.png
[image 36]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125424047-1175695668.png
[image_image 36]: /images/20220516/1c5e2accf75f484dadb46090eb7cc85a.png
[image 37]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125424797-1724110564.png
[image_image 37]: http://images2015.cnblogs.com/blog/626593/201601/626593-20160120125424500-1575845348.png
[image 38]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125425984-995334279.png
[image_image 38]: /images/20220516/230ca71de5f2466585b52c098831e8ef.png
[image 39]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125426687-1642870815.png
[image_image 39]: /images/20220516/c3a37c3cbb504e09a73d8f3908420a54.png
[image 40]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125430750-1560884194.png
[image_image 40]: /images/20220516/559eeb2421334e2eba65d9475972551f.png
[image 41]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125431687-881357645.png
[image_image 41]: /images/20220516/4becb5b58ffe47daaaf5498d3e48fc29.png
[image 42]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125433422-1492238172.png
[image_image 42]: /images/20220516/8b18b3d47fb8482b94a49780095d1a6c.png
[image 43]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125437359-2010010315.png
[image_image 43]: /images/20220516/ded7f7a1a0514ef191476120c7fa316f.png
[image 44]: https://images2015.cnblogs.com/blog/626593/201601/626593-20160120125438093-1008328282.png
[image_image 44]: /images/20220516/16778f400a954d83b1a35dd27b5fc629.png