Charles capture HTTPS phone settings and certificate installation

Reference article: charles capture phone

charles often capture webpages on your phone, such as going to copy someone else website images or scripts when o (∩_∩) o;

Phone capture of principle, and similar PC, mobile and server rely charles dialogue;

Objectives: The mobile phone network commissioned agents to charles;

Phone capture settings need to be three steps;

The first step, set permissions to allow mobile phone network in charles in; you need to charles set to allow the state and the setting allows the port number, so the phone side to get it to access;

The second step, the phone is configured in accordance with charles IP and port;

The third step, after the phone successfully paired, charles will be whether to allow pop; (charles Although open the port, but did not know is that mobile phones will fit into this window acts as tips and safety protection;)

The above three steps, somewhat similar to the HTTP handshake principle, both to ensure the normal communication, you can have fun playing up;

Step 1: Set charles enable state, and set the access port ;

On the menu bar of Charles "Proxy" -> "Proxy Settings", fill in the proxy port 8888 (note that this is not necessarily fill port 8888, you can also write other ports, but keep in mind this segment expansion, because here settings It allows access to the port-side configuration of the phone when you need to use), and the hook on "Enable transparent HTTP proxying" completes the setup on the Charles. As shown below;

Charles need to find a native IP;

Click HTLP -> local IP Address can see the current IP address of the machine;

Of course, you can open the view in the terminal, such as window, cmd lower; ipconfig input of the machine can check the IP

At this point we can see, charles allow mobile phones to access IP and port are 192.168.0.103:8888

At this point if you manually enter this in the browser HOST will find charles will prompt a window asking whether you allow access;

Part II: The phone is configured in accordance with charles IP and port ;

Phone Link wifi, wifi HTTP proxy manually select that item (similar to Android)

In the iPhone's "Settings" -> "Wireless LAN", you can see the name of the current wifi connection, key details by clicking on the right, you can see the details of the current wifi connection, including the IP address, subnet mask and other information. In its very bottom there is "HTTP proxy" one, we'll switch it to manual, then fill in the IP Charles computer is running, and port number 8888

After the third step, the mobile phone pairing is successful, charles popups asking for permission ;

Once set up, we need to open the program to any communications network on the iPhone, you can see the confirmation pop-up menu Charles iPhone connection request

Pop in the above chart, click Allow to; this time has been the pairing is successful, pleasant start capture it;

For example, at this time, accesszhubangbang.com

You can catch it access to resources on the computer;

Because the site is using SSL, so if you have not configured charles too, is not content to crawl HTTPS encryption protocol of this;

If you need to grab resources HTTPS site, please see Charles's HTTPS packet capture methods and principles

Note : there may be a need to understand the drawbacks, if you put the phone's Internet-related things entrusted to charles, charles then when an error or not turned on, the phone can surely no way to access the Internet; this must be understood, because a lot of people the IP phone after the commission agent to charles, this time, the phone will default wifi link on the morning of your favorite HD wifi; wifi settings and at this time there may have been entrusted to charles, but at this time just do not open the computer or restart charles ip changes and other; cause charles does not work properly; thus causing the problem without Internet access;

Note charles capture this way, it can only capture the resource request, if it is APP, the internal code and resources, because there is no heat request to the server, so it was not caught;

Judgment is not to call internal resources, you can put the phone network was shut off, if at this time can be a normal display, indicating that the resource is written on the inside of APP, by the way agents are not caught;

Acting principles described in " packet capture tool of Charles Tutorial " inside the schematic presentation;
herein by reference: https://www.axihe.com/

Guess you like

Origin www.cnblogs.com/broszhu/p/11576082.html