-
Notifications
You must be signed in to change notification settings - Fork 86
/
CustomRules.js
1932 lines (1699 loc) · 71.7 KB
/
CustomRules.js
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
/*!
* Fiddler CustomRules
* @Version 2.2.2
* @Author xxxily
* @home https://github.com/xxxily/Fiddler-plus
* @bugs https://github.com/xxxily/Fiddler-plus/issues
*/
/**
* 全局配置项
* 可配置链接类型的颜色，代理、替换地址等，
* 默认对象的键【key】为要匹配的规则，值【key】为匹配后的配置
*/
var GLOBAL_SETTING: Object = {
// 全局开启禁止缓存功能【不建议开启，严重影响上网体验】
disableCaching: false,
// 自定义禁止缓存列表【针对性禁止缓存，进行项目调试的时候不影响其它网站的上网体验】
disableCachingList: [
"xxxily.com.cn|xxxily.net.cn",
// 禁止本地所有连接的缓存，包括IP为192段或127段的所有地址
// "http://localhost|http://192|http://127",
// "https://localhost|https://192|https://127"
],
// 过滤配置【用于过滤出哪些URL需要显示，哪些需要隐藏】
Filter: {
// 只显示URL包含以下字符的连接
showLinks:[
// "qq.com",
// "baidu.com"
],
// 不能直接吧 :443规则写在 hideLinks 过滤项上，否则大部分的无关链接都会被间接隐藏
// Tunnel To 影响前端审查，隐藏掉，目前无法彻底隐藏，逻辑待优化
hideTunnelTo:true,
// 隐藏URL包含以下字符串的连接 过滤
hideLinks: [
/*隐藏静态资源*/
// ".jpg|.jpeg|.png|.gif",
// "baidu.com|qzone.qq.com|qq.com",
/*隐藏热更新时的请求*/
// "browser-sync|sockjs-node",
// "192.168",
// "hm.baidu.com",
// "google.com|googleapis.com|mail.google|www.google",
],
// 头部字段过滤器,除非您很熟悉或想测试下这部分功能，否则不建议您使用该过滤项
headerFieldFilter: [
{
//可选值 Referer Content-Type|Cookie|User-Agent|Accept-Language|Host 等，只要是头部支持的值都可以
fieldName:'Referer',
workAt:'request', // request|response
display:true,
filterList:[
'xxxily.cc'
],
enabled: false
}
],
// 只显示以下文件类型【注意：是根据header的 Content-Type字段进行匹配的，所以js文件直接写js是不行的,但支持模糊匹配 】
// 附注：使用ContentType过滤的时候不一定准确，不带 ContentType的连接会被自动隐藏，该过滤选项的逻辑还有待优化和完善
showContentType: [
// "image"
// "css",
// "html",
// "javascript"
],
// 隐藏以下文件类型
hideContentType: [
// "image"
// "css",
// "html",
// "javascript"
]
},
// 替换URL【可用于多环境切换、解决跨域、快速调试线上脚本等】
replace:{
"http://xxxily.com/":"http://xxxily.cc/",
/*替换成本地某个对应目录下的文件*/
"http://xxxily.com/m":"D:\\work\\"
},
// 替换URL的高级版，可以实现多个项目区分管理，进行二级匹配等
replacePlus:[
{
describe:"将【xxxily】服务器上的静态资源替换成本地服务器上的资源",
source:[
"http://xxxily.net",
"http://xxxily.org",
"http://xxxily.ac.cn",
"http://xxxily.cc"
],
/*Referer限定，方便精确控制【注意：Referer限定会导致只能在当前限定页面下查看后续链接，否则会不能正常代理】*/
Referer:[
'\\w*.html'
],
subRules:[
{
describe:"subRules 字段跟父级字段完全一致，主要是方便对特殊情况进行单独处理"
}
],
urlContain:"\\.html|\\.css|\\.js|\\.jpeg|\\.jpg|\\.png|\\.gif|\\.mp4|\\.flv|\\.webp",
replaceWith:"http://localhost:3000",
enabled:false
},
{
describe:"将【本地】请求的接口替换成某个服务器上的接口内容",
source:[
"http://localhost:3000/",
"http://127.0.0.1:3000/",
"http://192.168.0.101:3000/"
],
urlContain:"",
urlUnContain:"\\.html|\\.css|\\.js|\\.jpeg|\\.jpg|\\.png|\\.gif|\\.ico|\\.mp4|\\.flv|\\.webp|/browser-sync/",
// bgColor:"#2c2c2c",
color:"#FF0000",
// bold:"true",
replaceWith:"http://xxxily.cc/",
enabled:false
}
],
// 脚本注入
scriptInject:[
{
describe:"脚本注入使用示例",
// 要注入的脚本路径，可以是本地目录下的脚本，也可以是线上URL脚本
scriptPath:"D:\\work\\debugTools\\commonInject.js",
// 指定脚本要放置在哪个dom标签里面，默认html 可选值有：html,body,head,title
tagName:"head",
// 指定放置在标签的哪个位置，默认是before 可选值有 before,after
// position:'after',
/*禁止注入脚本的缓存，也就是为scriptPath增加时间戳参数，默认true*/
noCaching:true,
/*条件限定*/
urlContain:[],
urlUnContain:[],
enabled: false
}
],
// callbackAcion 主要用于自由度更高得自定义操作，通常是为了实现某些特定的功能
// 例如修改某个接口的数据，从而跳过界面的操作的设定值，进行某些功能的破解或自动化操作
// 注意：如果匹配的链接过多，很容易导致：数组下标超限/未将对象应用设置到对象实例等错误弹窗提示
callbackAcion:[
{
describe: "回调操作示例代码",
source:[
'http://xxxily.cc/dispather-app/dispacher\\?method=dispacher'
],
// exclude:[],
include:[
'.html',
'.jsp'
],
// 可选值有：OnBeforeRequest OnPeekAtResponseHeaders OnBeforeResponse OnDone OnReturningError ，想匹配多个事件可以使用|进行分隔
onEvent:'OnBeforeRequest',
callback:function(oSession,eventName){
var t = this;
console.log(eventName);
if(eventName === 'OnBeforeRequest'){
var Cookie = oSession.oRequest['Cookie'];
if(Cookie){
console.log(Cookie);
}else {
console.log('没找到对应的 Cookie');
}
console.log('callbackTest:',oSession.fullUrl);
oSession.oRequest['Cookie'] = "aaa";
}
},
enabled: false
},
{
describe: "篡改登录信息示例",
source:[
'https://xxxily.cc/portal/userLoginAction!checkUser.action'
],
onEvent:'OnBeforeRequest',
callback:function(oSession,eventName){
var webForms = oSession.GetRequestBodyAsString(),
strConv = coreApi.strConv,
webFormsObj = strConv.parse(webForms);
webFormsObj['username'] = "testUser";
webFormsObj['password'] = "testPw";
/*重设请求参数*/
oSession.utilSetRequestBody(strConv.stringify(webFormsObj));
},
enabled: false
},
{
describe: "本地脚本注入示例",
source:[
"xxxily.net.cn",
"xxxily.com.cn"
],
include:[
'.html',
'.jsp',
'vendor.js',
'commonInjectForDebug'
],
onEvent:'OnBeforeResponse',
callback:function(oSession,eventName){
/*给HTML页面注入调试脚本*/
if ( oSession.oResponse.headers.ExistsAndContains("Content-Type", "text/html") && oSession.utilFindInResponse("</body>", false)>-1 ){
oSession.utilDecodeResponse();
var oBody = System.Text.Encoding.UTF8.GetString(oSession.responseBodyBytes);
/*注入到head标签之前*/
var oRegEx = /<head>/i,
scriptList = [
'<script src="./commonInjectForDebug.js"></script>',
'\n<head>'
];
oBody = oBody.replace(oRegEx, scriptList.join(''));
oSession.utilSetResponseBody(oBody);
}
/*将注入的脚本地址内容替换成本地文件，实现本地脚本内容注入*/
if( oSession.fullUrl.indexOf('commonInjectForDebug') > -1 ){
oSession["x-replywithfile"] ="D:\\work\\debugTools\\commonInject.js";
}
},
enabled: true
}
],
// 进行字符串查找，如果查找到将在Log面板显示查找结果
Search: {
inRequestHeaders: [],
inResponseHeaders: [],
inResponseBody: []
},
// 界面显示配置【可以对不同链接进行颜色标识，以便快速定位相关链接】
UI: {
// 默认文本颜色
color: "#c0c0c0",//灰白色
// 默认背景颜色
bgColor: "#2c2c2c",//浅黑
bgColor_02: "#2f2f2f",//浅黑【用于做交替背景，可以不设置】
// bgColor_02:"#4b4a4a",
// 链接返回报错时的颜色
onError: {
// bgColor:"#2c2c2c",
color: "#FF0000" //错误红
// ,bold:"true"
},
// 不同关键词匹配对应的连接颜色，key 对应的是匹配的关键字，val对应的是匹配的颜色
linkColor: {
"^http": "#ccccff",
"^https": "#ccffff",
"\\.jpg|\\.png|\\.gif": "#ffccff", //粉紫色
"\\.js": "#00ff00", //原谅色
"\\.css": "#ffcc66", //米黄
"\\.html": "#00d7ff", //蓝色
"\\.php": "#fff32d", //大黄
"\\.jsp": "#fd4107" //砖红
},
// 根据 contentType 匹配连接颜色
contentTypeColor: {
"image": "#ffccff",
"css": "#ffcc66",
// html 类型容易跟其他接口数据混淆，无特别明确情况下不建议对其进行特殊标识
// "html":"#00d7ff",
"javascript": "#00ff00"
},
// 可以为特殊状态码设置不同颜色，方便快速定位一些错误链接，例如404等
// 注意：这个只是根据responseCode 来匹配的，一些不存在response的链接配置是无效的，例如 502,504状态，应该是在onError里配置的
statusCode: {
"404|408|500|502|504": "#FF0000", //错误红
"304": "#5e5e5e" //浅灰色
},
// 高亮，对特殊的链接进行高亮设置，方便跟踪查看链接
highlight: {
/*
".action": {
color: "#FF0000", //警告红
describe: "标红接口，好快速定位接口连接"
},
*/
/*
"positionAjax.json": {
color: "#FF0000", //警告红
describe: "标红接口，好快速定位接口连接"
},
*/
/*
"http://localhost|192.168":{
// bgColor:"#2c2c2c", //浅黑
color:"#00ff00", //原谅色
bold:"true",
describe:"高亮测试"
},
"youdao.com":{
bgColor:"#FF0000", //红色
color:"#fdf404", //黄色
bold:"true",
describe:"高亮测试"
},
"google.com|googleapis.com":{
bgColor:"#00ff00", //原谅色
color:"#fdf404", //黄色
bold:"true",
describe:"高亮测试"
},
*/
"": ""
}
},
// 一些实用工具集，先列个可能会开发的工具集，留个坑以后有时间再开发
Tools: {
// TODO API 测试工具
apiTest: {},
// TODO 重放攻击工具>
replay: {},
// TODO 内容注入工具
contentInject: {},
// TODO 类似 weinre 这样的注入调试工具
weinre: {}
},
// 多项分隔符号【同一个配置需匹配多项规则时可以通过分隔符进行区分，这样就不用每个规则都要新开一份配置那么繁琐】
splitStr: "|",
// 正则匹配的修饰符：i,g,m 默认i，不区分大小写
regAttr: "i"
};
//全局配置项 END
// 调试方法 BEGIN
if (!console) {
var console = {};
console.log = function (arg1, arg2, arg3, arg4, arg5, arg6) {
// 不支持 arguments ，尴尬！
var args = [arg1, arg2, arg3, arg4, arg5, arg6];
var argsLen = 0;
for (var i = 0; i < args.length; i++) {
var arg = args[i];
if (typeof arg === "undefined") {
break;
}
argsLen += 1;
var argType = typeof arg;
if (argType === "string" || argType === "number") {
FiddlerObject.log(arg);
} else if (argType === "boolean") {
FiddlerObject.log("boolean:" + arg);
} else if (argType === "object" && arg.toString) {
FiddlerObject.log(arg.toString());
} else {
try {
FiddlerObject.log("尝试遍历输出：" + argType);
for (var str = "" in arg) {
FiddlerObject.log(str + ":" + arg[str]);
}
} catch (ex) {
FiddlerObject.log("遍历输出失败：" + ex);
FiddlerObject.log(arg);
}
}
}
if (argsLen > 1) {
FiddlerObject.log("----------------------------------------------");
}
}
}
if (!alert) {
var alert = FiddlerObject.alert;
}
// 调试方法 END
/*核心API 内置一些常用的方法 BEGIN*/
var coreApi: Object = {
/*字符串转换器*/
strConv:{
/**
* 把具有某些规则的字符串转换为对象字面量，例如：a=1&b=2&c=3
* @param regularStr （String） -必选，某个规则的字符串
* #param splitStr （String） -可选 分隔符，默认&
*/
parse:function parse (regularStr,splitStr) {
var str = regularStr || '',
splitStr = splitStr || '&',
obj = {},
arr = str.split(splitStr),
len = arr.length;
for(var i = 0 ; i < len ; i++){
var curArr = arr[i].split('=');
obj[curArr[0]] = curArr[1];
}
if(!str){
obj = {} ;
}
return obj ;
},
/**
* 把使用上面的parse方法转换的对象，重新转换成字符串表达形式
* @param obj （object） -必选，某个对象
* #param splitStr （String） -可选 分隔符，默认&
*/
stringify:function (obj,splitStr) {
if(!obj){
return ;
}
var splitStr = splitStr || '&',
strArr = [] ;
for (var key in obj) {
var val = obj[key],
valType = typeof val ;
if( (valType === 'string' || valType === 'number') && val != "" ){
strArr.push(key+'='+val);
}else if(valType === 'object'){
/*二级对象是不支持的，为了不报错，将二级对象使用[object]进行代替*/
strArr.push(key+'='+'[object]');
}
}
return strArr.join(splitStr);
}
}
};
/*核心常用API 内置一些常用的方法 END*/
/**
* 自动移除禁止项，减少后续逻辑不必要的循环消耗
* @param obj 要操作的对象
*/
function removeDisableItem(source) {
var me = this,
result = {}
;
if(typeof source != 'object'){
return source;
}
if (Object.prototype.toString.call(source) === '[object Array]') {
result = [];
}
if (Object.prototype.toString.call(source) === '[object Null]') {
result = null;
}
for (var key in source) {
if(typeof source[key] === 'object'){
/*跳过enabled为false的项目*/
if(Object.prototype.toString.call(source[key]) === '[object Object]' && source[key]['enabled'] === false){
continue;
}else {
result[key] = removeDisableItem(source[key])
}
}else{
result[key] = source[key]
}
}
return result;
}
// 实测 GLOBAL_SETTING 每个请求都要加载一次，所以此优化可能出现反效果，后续如果出现很多enabled为false的配置再开启实测下
// GLOBAL_SETTING = removeDisableItem(GLOBAL_SETTING);
// .NET Framework API document
// https://docs.microsoft.com/zh-cn/dotnet/api/index?view=netframework-4.7.2
import System;
import System.Windows.Forms;
import Fiddler;
// INTRODUCTION
//
// Well, hello there!
//
// Don't be scared! :-)
//
// This is the FiddlerScript Rules file, which creates some of the menu commands and
// other features of Fiddler. You can edit this file to modify or add new commands.
//
// The original version of this file is named SampleRules.js and it is in the
// \Program Files\Fiddler\ folder. When Fiddler first runs, it creates a copy named
// CustomRules.js inside your \Documents\Fiddler2\Scripts folder. If you make a
// mistake in editing this file, simply delete the CustomRules.js file and restart
// Fiddler. A fresh copy of the default rules will be created from the original
// sample rules file.
// The best way to edit this file is to install the FiddlerScript Editor, part of
// the free SyntaxEditing addons. Get it here: http://fiddler2.com/r/?SYNTAXVIEWINSTALL
// GLOBALIZATION NOTE: Save this file using UTF-8 Encoding.
// JScript.NET Reference
// http://fiddler2.com/r/?msdnjsnet
//
// FiddlerScript Reference
// http://fiddler2.com/r/?fiddlerscriptcookbook
class Handlers {
// *****************
//
// This is the Handlers class. Pretty much everything you ever add to FiddlerScript
// belongs right inside here, or inside one of the already-existing functions below.
//
// *****************
// The following snippet demonstrates a custom-bound column for the Web Sessions list.
// See http://fiddler2.com/r/?fiddlercolumns for more info
/*
public static BindUIColumn("Method", 60)
function FillMethodColumn(oS: Session): String {
return oS.RequestMethod;
}
*/
// The following snippet demonstrates how to create a custom tab that shows simple text
/*
public BindUITab("Flags")
static function FlagsReport(arrSess: Session[]):String {
var oSB: System.Text.StringBuilder = new System.Text.StringBuilder();
for (var i:int = 0; i<arrSess.Length; i++)
{
oSB.AppendLine("SESSION FLAGS");
oSB.AppendFormat("{0}: {1}\n", arrSess[i].id, arrSess[i].fullUrl);
for(var sFlag in arrSess[i].oFlags)
{
oSB.AppendFormat("\t{0}:\t\t{1}\n", sFlag.Key, sFlag.Value);
}
}
return oSB.ToString();
}
*/
// You can create a custom menu like so:
/*
QuickLinkMenu("&Links")
QuickLinkItem("IE GeoLoc TestDrive", "http://ie.microsoft.com/testdrive/HTML5/Geolocation/Default.html")
QuickLinkItem("FiddlerCore", "http://fiddler2.com/fiddlercore")
public static function DoLinksMenu(sText: String, sAction: String)
{
Utilities.LaunchHyperlink(sAction);
}
*/
/*参考文档 BEGIN*/
QuickLinkMenu("&Docs")
QuickLinkItem("FiddlerScript", "http://docs.telerik.com/fiddler/KnowledgeBase/FiddlerScript/ModifyRequestOrResponse")
QuickLinkItem("Fiddler-plus", "https://github.com/xxxily/Fiddler-plus")
QuickLinkItem("FiddlerScript-API", "https://github.com/xxxily/Fiddler-plus/blob/master/doc/FiddlerScript_api_reference.md")
QuickLinkItem(".netFramework.4.7", "https://docs.microsoft.com/zh-cn/dotnet/api/index?view=netframework-4.7.2")
public static function DoLinksMenu(sText: String, sAction: String)
{
Utilities.LaunchHyperlink(sAction);
}
/*参考文档 END*/
/*Fiddler-plus 选项开关 BEGIN*/
public static RulesOption("disable All plus rules", "Fiddler-plus")
var m_off_allPlusRules: boolean = false;
public static RulesOption("disable Filter rules", "Fiddler-plus")
var m_off_filterRules: boolean = false;
public static RulesOption("disable Promiscuous mode", "Fiddler-plus")
var m_off_promiscuousMode: boolean = false;
public static RulesOption("disable Tunnel To", "Fiddler-plus")
var m_off_tunnelTo: boolean = false;
public static RulesOption("disable Replace rules", "Fiddler-plus")
var m_off_replaceRules: boolean = false;
public static RulesOption("disable Inject rules", "Fiddler-plus")
var m_off_injectRules: boolean = false;
public static RulesOption("disable callbackAcion", "Fiddler-plus")
var m_off_callbackAcion: boolean = true;
/*Fiddler-plus 选项开关 END*/
public static RulesOption("Hide 304s")
BindPref("fiddlerscript.rules.Hide304s")
var m_Hide304s: boolean = false;
// Cause Fiddler to override the Accept-Language header with one of the defined values
public static RulesOption("Request &Japanese Content")
var m_Japanese: boolean = false;
// Automatic Authentication
public static RulesOption("&Automatically Authenticate")
BindPref("fiddlerscript.rules.AutoAuth")
var m_AutoAuth: boolean = false;
// Cause Fiddler to override the User-Agent header with one of the defined values
// The page http://browserscope2.org/browse?category=selectors&ua=Mobile%20Safari is a good place to find updated versions of these
RulesString("&User-Agents",true)
BindPref("fiddlerscript.ephemeral.UserAgentString")
RulesStringValue(0,"Netscape &3","Mozilla/3.0 (Win95; I)")
RulesStringValue(1,"WinPhone8.1","Mozilla/5.0 (Mobile; Windows Phone 8.1; Android 4.0; ARM; Trident/7.0; Touch; rv:11.0; IEMobile/11.0; NOKIA; Lumia 520) like iPhone OS 7_0_3 Mac OS X AppleWebKit/537 (KHTML, like Gecko) Mobile Safari/537")
RulesStringValue(2,"&Safari5 (Win7)","Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.21.1 (KHTML, like Gecko) Version/5.0.5 Safari/533.21.1")
RulesStringValue(3,"Safari9 (Mac)","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11) AppleWebKit/601.1.56 (KHTML, like Gecko) Version/9.0 Safari/601.1.56")
RulesStringValue(4,"iPad","Mozilla/5.0 (iPad; CPU OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12F5027d Safari/600.1.4")
RulesStringValue(5,"iPhone6","Mozilla/5.0 (iPhone; CPU iPhone OS 8_3 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12F70 Safari/600.1.4")
RulesStringValue(6,"IE &6 (XPSP2)","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)")
RulesStringValue(7,"IE &7 (Vista)","Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1)")
RulesStringValue(8,"IE 8 (Win2k3 x64)","Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; WOW64; Trident/4.0)")
RulesStringValue(9,"IE &8 (Win7)","Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)")
RulesStringValue(10,"IE 9 (Win7)","Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)")
RulesStringValue(11,"IE 10 (Win8)","Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)")
RulesStringValue(12,"IE 11 (Surface2)","Mozilla/5.0 (Windows NT 6.3; ARM; Trident/7.0; Touch; rv:11.0) like Gecko")
RulesStringValue(13,"IE 11 (Win8.1)","Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko")
RulesStringValue(14,"Edge (Win10)","Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.11082")
RulesStringValue(15,"&Opera","Opera/9.80 (Windows NT 6.2; WOW64) Presto/2.12.388 Version/12.17")
RulesStringValue(16,"&Firefox 3.6","Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.7) Gecko/20100625 Firefox/3.6.7")
RulesStringValue(17,"&Firefox 43","Mozilla/5.0 (Windows NT 6.3; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0")
RulesStringValue(18,"&Firefox Phone","Mozilla/5.0 (Mobile; rv:18.0) Gecko/18.0 Firefox/18.0")
RulesStringValue(19,"&Firefox (Mac)","Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:24.0) Gecko/20100101 Firefox/24.0")
RulesStringValue(20,"Chrome (Win)","Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.48 Safari/537.36")
RulesStringValue(21,"Chrome (Android)","Mozilla/5.0 (Linux; Android 5.1.1; Nexus 5 Build/LMY48B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.78 Mobile Safari/537.36")
RulesStringValue(22,"ChromeBook","Mozilla/5.0 (X11; CrOS x86_64 6680.52.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.74 Safari/537.36")
RulesStringValue(23,"GoogleBot Crawler","Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)")
RulesStringValue(24,"Kindle Fire (Silk)","Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-us; Silk/1.0.22.79_10013310) AppleWebKit/533.16 (KHTML, like Gecko) Version/5.0 Safari/533.16 Silk-Accelerated=true")
RulesStringValue(25,"&Custom...","%CUSTOM%")
public static var sUA: String = null;
// Cause Fiddler to delay HTTP traffic to simulate typical 56k modem conditions
public static RulesOption("Simulate &Modem Speeds","Per&formance")
var m_SimulateModem: boolean = false;
// Removes HTTP-caching related headers and specifies "no-cache" on requests and responses
public static RulesOption("&Disable Caching","Per&formance")
// 默认禁止缓存
var m_DisableCaching: boolean = false;
public static RulesOption("Cache Always &Fresh","Per&formance")
var m_AlwaysFresh: boolean = false;
// Force a manual reload of the script file. Resets all
// RulesOption variables to their defaults.
public static ToolsAction("Reset Script") function DoManualReload() {
FiddlerObject.ReloadScript();
}
public static ContextAction("Decode Selected Sessions") function DoRemoveEncoding(oSessions: Session[]) {
for (var x: int = 0; x < oSessions.Length; x++) {
oSessions[x].utilDecodeRequest();
oSessions[x].utilDecodeResponse();
}
UI.actUpdateInspector(true, true);
}
// ------------ 通用公共方法 BEGIN ------------
/**
* 准确地获取对象的具体类型 参见：https://www.talkingcoder.com/article/6333557442705696719
* @param obj { all } -必选 要判断的对象
* @returns {*} 返回判断的具体类型
*/
public static function getType(obj) {
if (obj == null) {
return String(obj);
}
return typeof obj === 'object' || typeof obj === 'function' ?
obj.constructor && obj.constructor.name && obj.constructor.name.toLowerCase() ||
/function\s(.+?)\(/.exec(obj.constructor)[1].toLowerCase() :
typeof obj;
}
/**
* 判断某个字符串是否和另外一个字符串相匹配，是对 System.Text.RegularExpressions.Regex.IsMatch 的简单封装
* @param s_str (String) -必选 源字符串
* @param m_str (String) -必选 需要匹配的字符串
*/
public static function isMatch(s_str, m_str) {
return System.Text.RegularExpressions.Regex.IsMatch(s_str, m_str);
}
/**
* 根据字符串创建一个正则表达式
* @param str (String) -必选 正则字符串
* @param attributes (String) -可选 匹配修饰符，i,g,m, 默认不添加任何修饰符
*/
static function createPattern(str, attributes) {
try {
var att = attributes || GLOBAL_SETTING.regAttr || "";
return new RegExp(str, att);
} catch (ex) {
console.log(ex.toString());
return false;
}
}
/**
* 判断某个字符串是否存在另外一个字符串里面，如果存在则进行相关回调操作，不存在则忽略
* @param s_str (String) -必选 源字符串
* @param m_str (String) -必选 需要匹配的字符串
* @param callback (Function) -必选 匹配成功的回调操作，回调中返回匹配到的字符串、源字符串、需匹配的字符串
* @param splitStr (String) -可选 多项分隔符，默认为|,
* @param attributes (String) -可选 匹配修饰符，i,g,m, 默认不添加任何修饰符
*/
public static function matchPlus(s_str, m_str, callback, splitStr, attributes) {
if (!s_str || !m_str || typeof callback !== "function") {
return false;
}
var spStr = splitStr || GLOBAL_SETTING.splitStr || ",",
att = attributes || GLOBAL_SETTING.regAttr || "",
regArr = m_str.split(spStr),
len = regArr.length,
i = 0,
canBreak = false;
for (i; i < len; i++) {
var regStr = regArr[i];
// var patt = new RegExp(regStr,att);
var patt = createPattern(regStr, attributes);
if (!patt) {
canBreak = callback(null);
} else if (patt.test(s_str)) {
canBreak = callback(regStr);
} else {
continue;
}
if (canBreak === true) {
break;
}
}
}
/**
* 根据配置项 匹配 oSession里面的url对象，进行相关处理，注意：为了方便查看，配置项使用"|"进行多项分隔，所以如果写复杂的正则也包含|时会存在匹配冲突
* 故有特殊需要的可以改变下面代码中的分隔符，使其能进行更复杂的正则匹配（配置项注意使用跟如下一致的分隔符）
* @param str (String) -必选 要进行匹配判断的字符串（例如url）
* @param settingItem (Object|Array) -必选 GLOBAL_SETTING 下的某个配置项，可以是对象，也可以是数组
* @param callback (Function) -必选 如果存在跟配置项匹配的选项则进行相关回调处理
* @param errorMsg (String) -可选 出错时提示信息，方便快速定位问题
*/
public static function settingMatch(str, settingItem, callback, errorMsg) {
var settingItemType = getType(settingItem);
if (!str || !settingItem || (settingItemType === "array" && settingItem.length === 0)) {
return -1;
}
var canBreak = false; // 是否可以终止循环，停掉没必要的循环，减少资源消耗
var errorMsg = errorMsg || "url匹配时出现错误，请检查您的配置";
// 为了节省代码类型为object 和 array的其实可以合并一起处理，这里为了区分对待，暂时不打算合并
if (settingItemType === "object") {
// 对象类的配置是包含匹配项和下级配置项的，所以要进行特殊处理
for (var itemKw = "" in settingItem) {
matchPlus(str, itemKw, function (matchStr) {
if (!matchStr) {
console.log(str, errorMsg);
} else {
canBreak = callback(settingItem[itemKw], matchStr);
return canBreak;
}
}, null, null);
if (canBreak === true) {
break;
}
}
} else if (settingItemType === "array") {
// 数组类的配置项其实和字符串类的配置项一样，只是为了进行多项配置时查看更方便
var tmLen = settingItem.length;
for (var i = 0; i < tmLen; i++) {
matchPlus(str, settingItem[i], function (matchStr) {
if (!matchStr) {
console.log(str, errorMsg);
} else {
canBreak = callback(settingItem[i], matchStr);
return canBreak;
}
}, null, null);
if (canBreak === true) {
break;
}
}
} else if (settingItemType === "string") {
// 字符串类的配置，只关注是否匹配成功，不存在下级配置项
matchPlus(str, settingItem, function (matchStr) {
if (!matchStr) {
console.log(str, errorMsg);
} else {
canBreak = callback(settingItem, matchStr);
return canBreak;
}
}, null, null);
} else {
return false;
}
}
/**
* 所有参数和settingMatch一致，唯一区别是，在不匹配时进行回调，回调里不带任何参数
*/
public static function settingUnMatch(str, settingItem, callback, errorMsg) {
var isMatch = false;
var result = settingMatch(str, settingItem, function (conf, matchStr) {
isMatch = true;
return true;
}, errorMsg);
if (!isMatch && result !== -1) {
callback();
}
}
/**
* 判断是否通过了URL的约束限定
* @param fullUrl (string) -必选 完整的url地址
* @param contain (array|string) -必选 包含某些字符串
* @param unContain (array|string) -必选 不包含某些字符串
*/
public static function isPassUrlRestriction(fullUrl, contain, unContain) {
var isPass = true;
// urlContain限定
if(isPass && contain && contain.length > 0){
settingUnMatch(fullUrl, contain, function (matchStr) {
isPass = false;
}, "【isPassUrlRestriction里面的urlContain】配置出错，请检查你的配置");
}
// urlUnContain限定
if(isPass && unContain && unContain.length > 0){
settingMatch(fullUrl, unContain, function (matchStr) {
isPass = false;
}, "【isPassUrlRestriction里面的urlContain】配置出错，请检查你的配置");
}
return isPass;
}
/**
* 判断某个字符串是否为本地路径
*/
public static function isLocalPath(pathStr) {
return /^[a-zA-Z]:\\\w*/.test(pathStr)
}
/**
* 把链接地址统一成数组形式
* @param links (string|array) -必选 链接地址
*/
public static function linksToArr(links) {
var arr = [];
if(links && typeof links === 'string'){
arr.push(links);
}else if(Object.prototype.toString.call(links) === '[object Array]'){
arr = links;
}
return arr;
}
/**
* 跟进分割字符串提取后面的路径片段
* @param fullUrl (string) -必选 完整的url地址
* @param splitStr (string) -必选 分割字符串
*/
public static function extractPathSection(fullUrl,splitStr) {
return fullUrl.replace(splitStr,'|cutoff|').replace(/^.*\|cutoff\|/,'');
}
/**
* 进行本地路径拼接
* @param localPath (string) -必选 本地路径（起始段）
* @param pathSection (string) -必选 需拼接起来的路径片段
*/
public static function joinLocalPath(localPath,pathSection) {
var path = localPath,
section = pathSection;
/*确保path结尾为\*/
if(!/\\$/.test(path)){
path+='\\'
}
/*将/转为\并且删除?或#后面的所有字符串*/
section = section.replace(/\//g,'\\').replace(/[\?#].*$/,'');
/*确保section起始不包含\*/
if(/^\\/.test(section)){
section = section.replace(/^\\/,'');
}
var realPath = (path+section).replace(/\\$/,'');
return realPath;
}
/**
* 提取需要展示的连接，由于每个连接都要重新提取和进行匹配计算，所以会造成较大的性能开销
* 此功能处于测试阶段，如果出现较多报错建议 将 m_off_promiscuousMode 设为true
*/
public static function extractShowLinks() {
var showLinks = linksToArr(GLOBAL_SETTING.Filter.showLinks);
/**
* 使用混杂模式的话，自动提取各个选项需要展示的URL地址
* 由于不进行重复性判断，所以可能会出错和造成性能下降
* */
if(!m_off_promiscuousMode && !m_off_allPlusRules){
/*提取replace里面要显示的连接*/
for (var key in GLOBAL_SETTING.replace) {
if(key){
showLinks.push(key);
}
}
/*提取replacePlus里面要显示的连接*/
for (var i=0; i < GLOBAL_SETTING.replacePlus.length; i++) {
var item = GLOBAL_SETTING.replacePlus[i];
if(item.enabled && item.source){
showLinks = showLinks.concat(linksToArr(item.source));
}
}
/*提取 scriptInject 里面要显示的连接*/
var hasInjectLocalFile = false;
for (var i=0; i < GLOBAL_SETTING.scriptInject.length; i++) {
var item = GLOBAL_SETTING.scriptInject[i];
if(item.enabled && item.scriptPath){
if(isLocalPath(item.scriptPath)){
hasInjectLocalFile = true;
}else {
showLinks.push(item.scriptPath);
}
if(item.urlContain){
showLinks = showLinks.concat(linksToArr(item.urlContain));
}
}
}
if(hasInjectLocalFile){
showLinks.push('locationScriptInjectByFiddlerForDebug.js');
}
/*提取callbackAcion里面要显示的连接*/
for (var i=0; i < GLOBAL_SETTING.callbackAcion.length; i++) {
var item = GLOBAL_SETTING.callbackAcion[i];
if(item.enabled && item.source){
showLinks = showLinks.concat(linksToArr(item.source));
}
}
/*提取UI.highlight里面要显示的连接*/
for (var key in GLOBAL_SETTING.UI.highlight) {
if(key){
showLinks.push(key);
}
}
}
return showLinks;
}
/**
* 脚本注入器
* @param oSession (session) -必选 session对象
*/
public static function scriptInjecter(oSession) {
if(m_off_injectRules || m_off_allPlusRules){
return false;
}
var scriptInject = GLOBAL_SETTING.scriptInject;
if(scriptInject && scriptInject.length > 0){
var len = scriptInject.length;
for (var i = 0; i < len; i++) {
var settingItem = scriptInject[i];
if (settingItem.enabled === true && settingItem.scriptPath) {
/*将注入的脚本地址内容替换成本地文件，实现本地脚本内容注入*/
if( oSession.fullUrl.indexOf('locationScriptInjectByFiddlerForDebug') > -1 && isLocalPath(settingItem.scriptPath)){
oSession["x-replywithfile"] = settingItem.scriptPath;
}else {
var isHtmlType = oSession.oResponse.headers.ExistsAndContains("Content-Type", "text/html"),
isPass = isPassUrlRestriction(oSession.fullUrl,settingItem.urlContain || [],settingItem.urlUnContain || []);;
if(isHtmlType && isPass){
oSession.utilDecodeResponse();