Fiddler特殊中间人劫持数据

ゞ浴缸里的玫瑰 2023-10-03 01:55 2阅读 0赞

## Fiddler中间人特殊劫持数据 ##

如果遇到加密严重的情况下，又想拿到数据，可采取该方法。

**1.在菜单栏中 Rules下找到Customize Rules (快捷键 CTRL + R)**

![请添加图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg_size_16_color_FFFFFF_t_70]

**2.在 Fiddler ScriptEditor 中 修改 OnBeforeResponse 函数，达到控制Response返回的数据。**  
![请添加图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg_size_16_color_FFFFFF_t_70 1]

**3.将修改的函数保存，重启后可以将数据写入本地。**

public static var company_id: String = '';
    
    	static function OnBeforeResponse(oSession: Session) {
        
    		if (m_Hide304s && oSession.responseCode == 304) {
        
    			oSession["ui-hide"] = "true";
    		}
    		try{
        
    			var fso = new ActiveXObject("Scripting.FileSystemObject");
    			var URL = oSession.fullUrl
    			//判断是否监控的该网址
    			if (URL.Contains("https://api.cvsource.com.cn/app/v3/app/company/topInfo/") || URL.Contains("https://api.cvsource.com.cn/app/v3/app/company/shell/financing/history/") || URL.Contains("https://api.cvsource.com.cn/app/v3/app/company/info/teamMember/")) {
        
    				oSession.utilDecodeResponse();
    				company_id = oSession.url;
    				var idu;
    				//判断oSession.url连接是否包含?参,取其ID值
    				if (company_id.Contains("?")){
        
    					idu =  company_id.slice(company_id.lastIndexOf('/')+1,[company_id.indexOf('?',0)]);
    				}else{
        
    					idu = company_id.slice(company_id.lastIndexOf('/')+1);
    				}
    				//写入D盘CVS目录下
    				var path = "D:\\CVS\\"+idu+".txt";
    				var file = fso.OpenTextFile(path,8 ,true, true);
    				if (URL.Contains("https://api.cvsource.com.cn/app/v3/app/company/topInfo/")) {
        
    					file.writeLine("https://api.cvsource.com.cn/app/v3/app/company/topInfo/");
    					file.writeLine(oSession.GetResponseBodyAsString());
    					file.writeLine("https://api.cvsource.com.cn/app/v3/app/company/topInfo/");
    				}else if(URL.Contains("https://api.cvsource.com.cn/app/v3/app/company/shell/financing/history/")) {
        
    					file.writeLine("https://api.cvsource.com.cn/app/v3/app/company/shell/financing/history/");
    					file.writeLine(oSession.GetResponseBodyAsString());
    					file.writeLine("https://api.cvsource.com.cn/app/v3/app/company/shell/financing/history/");
    				}else if(URL.Contains("https://api.cvsource.com.cn/app/v3/app/company/info/teamMember/")) {
        
    					file.writeLine("https://api.cvsource.com.cn/app/v3/app/company/info/teamMember/");
    					file.writeLine(oSession.GetResponseBodyAsString());
    					file.writeLine("https://api.cvsource.com.cn/app/v3/app/company/info/teamMember/");
    				}
    			}
    			file.close();
    
    		}catch(error){
        
    
    		}
    	}

**4.自行改成函数可实现无需破解加密，即可拿到数据方式。**  
![请添加图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg_size_16_color_FFFFFF_t_70 2]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/662610d439d74aa5830390cfe1eb2944.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/3ffad8b00f8848a8bbd6c5f1a0f98b48.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg_size_16_color_FFFFFF_t_70 2]: https://img-blog.csdnimg.cn/a117c4562b5d4a129246f33a1666c222.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODkyNzUyMg==,size_16,color_FFFFFF,t_70