Fiddlercore intercept and modify Web HTTPS links, JS achieve injection

Original Source: https: //www.cnblogs.com/Charltsing/p/FiddlerCoreHTTPS.html

Fiddlercore can intercept and modify http web content, code, in many Baidu.

If you want to use the web Fiddlercore intercept and modify Https, you will encounter problems intimate connection, resulting Chrome can not open the page. How to solve this problem?

Fiddlercore interception Https Https principle is to create a certificate yourself, re-link data transmission is encrypted site, so we want to create a https certificate to Fiddlercore through the code.

Create a Https Certificate in two ways, one is through MakeCert.exe, the other is created by CertMaker.dll and BCMakeCert.dll.

In the official website description, clearly say two things:

1, MakeCert.exe use the Windows API to generate the certificate is stored in the user \ Personal \ Certificates store. These certificates are not compatible with iOS devices, which need not set a specific field in the certificate by MakeCert.exe.
2, CertMaker.dll use BouncyCastle C # library (BCMakeCert.dll) from scratch generate a new certificate. The certificate is stored only in memory in and is compatible with iOS devices.

Notice the red word! !

When we Fiddlercore programming, often using dll way to create a certificate, the certificate is created in the memory. Therefore, only when the program first started, we need to create a certificate, start the program later, you do not need to create a certificate, and the process continues until the computer restarts so far.

Certificates created with two key messages: fiddler.certmaker.bc.cert and fiddler.certmaker.bc.key. After these two pieces of information created, to be saved somewhere to prepare for digital certificates created before the call to get the next start. In general, we can put two pieces of information (that is, string) into App.Config file inside.

Install the certificate using CertMaker.createRootCert (), uninstall a certificate using removeFiddlerGeneratedCerts ()

 

Here is a tool to inject JS, use Fiddlercore complete support of HTTPS web pages.

If you have any technical problems exchanges, contact QQ564955427.

 

*****************

 

Guess you like

Origin www.cnblogs.com/Charltsing/p/FiddlerCoreHTTPS.html