Charles -- teach you how to use the packet capturing tool from 0-1

1. install

Go to the official website to download , Address ：https://www.charlesproxy.com/download/

2. Activate

Here is the activation account found online , Just fill in

![Registered Name: https://zhile.io
License Key: 48891cf209c6d32bf4 ])

3. To configure

3.1 Certificate installation

Help->ssl proxying

1. Charles Root Certificate
2. Charles Root Certificate in iOS Simulators
3. Change the key chain to always trust
   
4. iphone Certificate installation
   
   open Charles Root Certificate on a Mobile Device or Remote Browser, It will appear as shown in the figure
   

Configure the agent first , Jump 3.2/3.3 Configure agent , Access after configuration

Chls.pro/ssl

A pop-up box will pop up asking whether to install , Agree to install .

Don't be happy too soon , The installation is completed on the mobile phone Set up -> Universal -> About the machine -> Certificate trust settings ->charles Proxy CA, Tick the switch , The certificate takes effect .

3.2 Agent settings

You can set the packet capture data type , Include http And socket data . You can do it on demand proxies Check under column .

If you need to catch Mac Browser data on , Need to be in macOS bar , Check http.

3.3 Mobile phone use agent

Connect your mobile phone to the LAN wifi, And charles It must be under the same external network .

1. Automatic agent

On the connected wifi Click more , Enter the configure agent page . Check auto , In the input box URL Input in ：

Https://chls.pro/10.10.11.235:6666.pac

That is, automatic proxy is set .

2. Manual proxy
   Input charles Of ip And port
   

3.4 HTTPS Grab the bag

HTTPS Grab the bag , Need to go through SSL.

Proxy->SSL Proxy setting

The following interface will be opened . Click on Add,Host Column and Port Fill in all columns （ Means to catch all SSL request ）, Sure you can. .

notes ： If this item is not configured , During a visit to https Data time , You will find that the visit failed ,Structure The bar shows the small lock logo .

3.5 Accessible control

charles Can pass Access control Settings To control the allowed access list . If this machine is not allowed IP, Visit will not go Charles, Of course, I can't catch the bag .

Not configured obsolete , The list is empty. . When the phone first visits ,charles Whether to allow pop-up box will pop up , Click on allow, I agree to this mobile connection .

Of this phone ip The address will also appear in Access control Settings List of .

I am generally configured to allow all , stay Access control Settings in Add, Input 0.0.0.0/0, Can be added to .

3.5 Map Local

This feature is quite useful , Data can be requested response Get from local file .
such as ： I have a system upgrade function , Upgrade mode upgradeType There are three kinds of ： mandatory / Ordinary / silent , However , I want to test and verify three scenarios , You have to bother the background to modify the data . Now ,Map Local It's time to play .

1. Save remote response:
   

2. Set up Map Local:
   
   

3. Hit the saved json file , Modify the return value ：
   
   Then re request , It will leave your modified local file data . Don't bother back-end students frequently anymore , You can simulate various data scenarios by yourself .
   How to close ？
   charles The toolbar -> Tools -> Map Local, Click to enter

4. Some common questions

4.1 Stuck in real machine verification application ？

Developed as apple , A lot of times Xcode Make yourself small Demo Run it on the phone , It uses a free personal certificate , You need to trust the certificate on your mobile phone , And verification application . If you set packet capture ,ssl It can't be verified .
terms of settlement ：
ssl when , Only catch the designated website , Don't set full grasp * .charles The toolbar -> Proxy -> SSL Proxy Settings, Only focus on the background address of the project .

5. summary
Go through the above steps , You can grasp happily https 了 . To sum up ：

certificate ：Mac/ Simulator /iphone certificate ( Don't forget to trust certificates ).
Proxy setting Check HTTP And SOCKS.
Same LAN .
Mobile settings agent .
Access control Settings Agree to access SSL proxy Add star .

Of course ,charles It's more than that , Very powerful , There are many functions waiting to be discovered . Such as ： The breakpoint / Intercept , Return the modified data / Simulated disconnection / Analog network is poor .

Link to the original text ：https://www.jianshu.com/p/9f4ebde9c518