Proxyman, a native high-performance packet capturing tool, is for you who love learning

Thank you for your time

.

.

“

Nowadays, there are many kinds of bag grabbing tools , such as Fiddler,Charles,LightProxy etc. , Each has its own advantages and disadvantages , Recently, I saw a new packet capturing tool , A person with strong curiosity like me , How can I miss , Let's study together ！

”

One .Proxyman brief introduction

Proxyman It is a native high-performance macOS End grab tool , It enables developers or testers to easily capture 、 Inspection and operation HTTP or HTTPS request / Respond to .

Two . Download address

https://proxyman.io/

3、 ... and . Interface description

1. install Proxy Helper Tool

Install Proxy Helper Tool

2. Installation certificate

Installation certificate

Installation successful

3. Interface description

Interface description

• 1. Filter by different content

• 2. Custom layout display

• 3. request URL

• 4. Interface request message

• 5. Interface response message

• 6. Filter requests based on keywords

• 7. favorites

Four . Grab the bag

1.PC End

PC It is relatively simple to capture packets on the end , Just click the open button

2. Mobile terminal ( With Android For example )

• Install the corresponding certificate on the mobile terminal ( If the certificate has been installed after the first download and installation , You can ignore )

Install mobile terminal certificate

• After the certificate is successfully installed , Will get the current Ip And port information

• mobile phone WIFI Set up Long press WIFI, Select the agent as manual , Input IP(192.168.2.101) and port (9090), Click save .（ explain ： This is actually the same as other packet capturing tools ）

• Mobile download Proxyman certificate The mobile browser opens http://proxy.man/ssl, Click download now

• Mobile terminal installation Proxyman certificate Click phone settings -> Security -> More security settings -> Encryption and credentials -> Install from storage settings -> Select the certificate you just downloaded -> Enter the certificate name ( Whatever the )-> Click ok

• stay Android Add in application Proxyman To configure ( Only applicable to Android 10 And above ), add to res/xml/network_security_config.xml, Replace with the domain to block

<network-security-config>
    <debug-overrides>
        <trust-anchors>
            <!-- Trust user added CAs while debuggable only -->
            <certificates src="user" />
            <certificates src="system" />
        </trust-anchors>
    </debug-overrides>

    <base-config cleartextTrafficPermitted="true">
        <trust-anchors>
            <certificates src="system" />
        </trust-anchors>
    </base-config>

    <domain-config>
        <!-- Make sure your URL Server here -->
        <domain includeSubdomains="true">your_production_domain</domain>
        <trust-anchors>
            <certificates src="user"/>
            <certificates src="system"/>
        </trust-anchors>
    </domain-config>
</network-security-config>

---

Add the following code to AndroidManifest.xml

<manifest>
    <application android:networkSecurityConfig="@xml/network_security_config">
    </application>
</manifest>

Friendship tips ： Make sure to remove these configurations from production .

---

A little help

Finally, thank everyone who reads my article carefully , Watching the rise and attention of fans all the way , Reciprocity is always necessary , Although it's not very valuable , If you can use it, you can take it

​ These materials , For those engaged in 【 software test 】 For our friends, it should be the most comprehensive and complete war preparation warehouse , This warehouse also accompanied me through the most difficult journey , I hope it can help you ！ Everything should be done as soon as possible , Especially in the technology industry , We must improve our technical skills . I hope that's helpful ….