使用fiddler脚本修改x-frame-options

之前的抓包工具一直在使用charles,对比Charles和fiddler,我觉得
Fiddler功能更加的强大,扩展能力更强,Charles满足的最基本的功能,Ui和交互很舒服。

fiddler最强大的功能就是提供了脚本能力,可以通过脚本操作请求数据和相应数据,依托这个功能,说fiddler是一个man in middle也毫不为过。

例如通过脚本修改响应数据

     if (oSession.fullUrl.Contains("somestring")){
           
           
            oSession.utilSetResponseBody("{\"code\":0,\"message\":\"\",\"body\":{\"display\":true},\"success\":true}");
           
           // FiddlerObject.alert("hello");      
                
        }

例如有些网站,设置了x-frame-options不能放到iframe里面,这时候可以通过fiddler修改响应头,移除x-frame-options,从而达到能够在iframe内访问的效果

charles vs fiddler

https://stackify.com/fiddler-vs-charles/#:~:text=The%20user%20interface%20in%20Charles%20is%20dramatically%20cleaner,Charles%20provides%20is%20the%20ability%20to%20limit%20bandwidth.

起始时间

both these tools have been around for many years and are highly mature. Fiddler was recently (well if 2012 is still recent) bought by Telerik who now maintain it, but it was originally released in 2003. Even before Fiddler, the Charles proxy existed having been released in 2002.

Fiddler高级功能

Fiddler provides some very advanced capabilities in its script editor.

posted @ 2022-03-06 10:37  叶常落  阅读(39)  评论(0编辑  收藏  举报