官方版

Create a New Request

The Composer allows you to craft custom requests to send to a server. You can either create a new request manually, or you can drag and drop a session from the Web Sessions list to create a new request based on the existing request.

Modes

There are two modes for the Composer. In Parsed mode, you can use the boxes to build up a HTTP(S) request. In Raw mode, you must type in a properly formatted HTTP request yourself. Generally, using Parsed Mode is what you want.

Options

The Options tab exposes options that allow you to customize the behavior of the Composer.

  • Inspect Session selects the new session and activates the Inspectors tab when the request is issued.
  • Fix Content-Length Header adjusts the value of the Content-Length request header (if present) to match the size of the request body.
  • Follow Redirects causes a HTTP/3xx redirect to trigger a new request, if possible. The Composer will follow up to fiddler.composer.followredirects.max default redirections.
  • Automatically Authenticate causes Fiddler to automatically respond to HTTP/401 and HTTP/407 challenges that use NTLM or Negotiate protocols using the current user’s Windows credentials.

    Tips and Tricks

  1. Use drag-and-drop from the Session List to create a new request based on a previously-captured request.
  2. Use a # character in the RequestURL to be prompted for a series of sequentially-numbered URLs to download. If you enter a leading 0 (zero) before the “Start At” value, then all numbers will be padded with leading zeros (if necessary) to get to that width.

For instance, if you have the URL http://www.example.com/#/?a=#, and enter the Start At value as 08 and the End At value as 11, the Composer will request the following URLs:

  1. http://www.example.com/08/?a=08
  2. http://www.example.com/09/?a=09
  3. http://www.example.com/10/?a=10
  4. http://www.example.com/11/?a=11
  1. Shift+Click the Execute button to immediately break the new request for further editing using Fiddler’s Inspectors
  2. Add a dummy header Fiddler-Encoding: base64 and encode your body using base64 if it contains any binary data. Fiddler will decode the data before transmitting it to the server.
  3. Add a dummy header Fiddler-Host: targettesthost if you would like Fiddler to send your request to the specified server (http://targettesthost, in this case) while retaining the URL and host header specified elsewhere in the request. This is a convenience method that setS the X-OverrideHost, X-IgnoreCertCNMismatch and X-OverrideGateway flags on the new Session, removing the dummy header before contacting the specified server.
  4. Click the Upload File link to have the composer inject one or more local files into the request body as it is sent to the server.

If you would like the uploaded file to be sent as base64 (as you might in an XML post body) insert the token base64 into the string. For instance:

  1. <xml><mybody type=binary><@INCLUDE base64 *C:\Users\lawrence\Desktop\test.bin*@></mybody></xml>

谷歌翻译版

创建新的请求

Composer允许您制作自定义请求以发送到服务器. 您可以手动创建一个新请求,或者您可以从Web Sessions列表中拖放会话,以基于现有请求创建新请求。

模式

这是Composer的两种模式. 在解析模式下,您可以使用这些框构建一个HTTP(S)请求。在原始模式下,您必须自己输入正确格式的HTTP请求。通常,您需要使用解析模式。

设置

Options选项卡公开了允许您自定义编写器行为的选项。

  • Inspect会话选择新的会话,并在发出请求时激活检查器选项卡。
  • 修改 Content-Length 标头 调整Content-Length请求标头的值(如果存在)以匹配请求正文的大小。
  • 遵循重定向 导致HTTP / 3xx重定向触发新请求, 如果可能. Composer将遵循fiddler.composer.followredirects.max默认重定向。
  • 自动验证 导致Fiddler使用当前用户的Windows凭据自动响应使用NTLM或协商协议的HTTP / 401和HTTP / 407。

    Tips and Tricks

  1. 使用“会话列表”中的拖放操作可基于先前捕获的请求创建新请求。
  2. 在RequestURL中使用#字符,将提示输入一系列要下载的按顺序编号的url。 如果在“Start At”值之前输入前导0(0),那么所有数字都将使用前导0填充(如果需要)以达到该宽度。.

例如, 如果你有一个URL http://www.example.com/#/?a=#, 并将“开始于”值输入为08,将“结束于”值输入为11,Composer将请求以下URL:

  1. http://www.example.com/08/?a=08
  2. http://www.example.com/09/?a=09
  3. http://www.example.com/10/?a=10
  4. http://www.example.com/11/?a=11
  1. Shift+单击Execute按钮,立即中断新请求,以便使用Fiddler的检查器进行进一步编辑
  2. 添加一个伪头fidder - encoding: base64,如果body包含任何二进制数据,则使用base64对其进行编码。Fiddler在将数据传输到服务器之前会对数据进行解码。
  3. 如果您希望Fiddler将请求发送到指定服务器(在本例中为http:// targettesthost),同时保留请求中其他位置指定的URL和主机头,则添加一个虚拟头Fiddler-Host:targettesthost. 这是一种方便的方法,可以在新会话上设置X-OverrideHost,X-IgnoreCertCNMismatch和X-OverrideGateway标志,并在联系指定服务器之前删除虚拟头。
  4. 单击Upload File链接,让编写器在发送到服务器的请求主体中插入一个或多个本地文件。

如果希望将上传的文件以base64的形式发送(就像在XML post主体中一样),请将标记base64插入到字符串中。例如

  1. <xml><mybody type=binary><@INCLUDE base64 *C:\Users\lawrence\Desktop\test.bin*@></mybody></xml>