在 Firefox 中篡改 URL 请求的第一行

发布于 2024-09-06 12:25:58 字数 376 浏览 2 评论 0原文

我想更改请求的 HTTP 标头的第一行,修改方法和/或 URL。

(优秀的)Tamperdata firefox 插件允许开发人员修改请求的标头,但不能修改 URL 本身。后一部分是我想要做的。

所以像...

GET http://foo.com/?foo=foo HTTP/1.1

... 可能会变成...

GET http://bar.com/? bar=bar HTTP/1.1

对于上下文,我需要篡改(纠正)来自 Flash 的错误请求,看看是否可以通过修复 url 来纠正错误。

有什么想法吗?听起来像是可能需要在代理级别上完成的事情。在什么情况下,建议?

I want to change first line of the HTTP header of my request, modifying the method and/or URL.

The (excellent) Tamperdata firefox plugin allows a developer to modify the headers of a request, but not the URL itself. This latter part is what I want to be able to do.

So something like...

GET http://foo.com/?foo=foo HTTP/1.1

... could become ...

GET http://bar.com/?bar=bar HTTP/1.1

For context, I need to tamper with (make correct) an erroneous request from Flash, to see if an error can be corrected by fixing the url.

Any ideas? Sounds like something that may need to be done on a proxy level. In which case, suggestions?

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(3

ま柒月 2024-09-13 12:25:58

查看 Charles Proxy(多平台)和/或 Fiddler2(仅限 Windows)以获得更多客户端解决方案 - 这两个解决方案都作为代理运行,并且可以在请求发送到服务器之前修改请求。

如果您有权访问网络服务器并且它正在运行 Apache,您可以设置一些重写规则将在主 HTTP 引擎处理 URL 之前对其进行修改。

Check out Charles Proxy (multiplatform) and/or Fiddler2 (Windows only) for more client-side solutions - both of these run as a proxy and can modify requests before they get sent out to the server.

If you have access to the webserver and it's running Apache, you can set up some rewrite rules that will modify the URL before it gets processed by the main HTTP engine.

兰花执着 2024-09-13 12:25:58

对于那些从搜索引擎访问此页面的人,我还推荐 Burp Proxy 套件: http:// /www.portswigger.net/burp/proxy.html

虽然更具体地针对安全测试,但它仍然是一个非常宝贵的工具。

For those coming to this page from a search engine, I would also recommend the Burp Proxy suite: http://www.portswigger.net/burp/proxy.html

Although more specifically targeted towards security testing, it's still an invaluable tool.

说好的呢 2024-09-13 12:25:58

如果您试图拦截 HTTP 数据包并在出去时修改它们,那么 Tamperdata 可能是您想要采用的路线。

但是,如果您想要对这些事情进行精细控制,那么最好使用诸如 curl

Curl 之类的实用程序来模拟整个浏览器会话:http://curl.haxx.se/

If you're trying to intercept the HTTP packets and modify them on the way out, then Tamperdata may be route you want to take.

However, if you want minute control over these things, you'd be much better off simulating the entire browser session using a utility such as curl

Curl: http://curl.haxx.se/

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文