Paros抓包工具

 用于抓取应用软件接口,获取数据

 file:///Volumes/Captivity/第三方软件/paros抓包/paros-1/paros.jar

1. iphone/android 电脑在同一个网段
2. iphone Setting 电脑ip 地址 里端口是随意写的 不要保>1024

3. paros

4. 代理 ,入和 iphone 对应ip 和端口

5. 然后运行 iphone 上程序就可以看到数据包了

数据分析: GET 协议分析


http://wbapp.mobile.sina.cn/interface/ninesquares/getsearchicon.php?udid=e4 :ce:8f:7c:9c:41&uid=&wm=b207&posid=pos4f9ba29064868&from=603009301 2
就是网址,可以直接放在浏览器中示 也可以使用 ASI 直接获取

POST 协议分析

POST 一些。里面的参数需要你使用程序参数才能使用,比如 http://api.maopao.com:80/maopao/v2.0/postlocation deviceid=1dfe9be1f679d04ebcec86cf74d41813bcbc0daf&geolat=40.0340&geol ong=116.3441

似代如下:
- (void) foo {

    NSURL *url = [NSURL
URLWithString:@"http://api.maopao.com:80/maopao/v2.0/post
location"];
    ASIFormDataRequest *r = [ASIFormDataRequest
requestWithURL:url];
//deviceid=1dfe9be1f679d04ebcec86cf74d41813bcbc0daf&geola
t=40.0340&geolong=116.3441
    [r
setPostValue:@"1dfe9be1f679d04ebcec86cf74d41813bcbc0daf"
forKey:@"deviceid"];
    [r setPostValue:@"40.0340" forKey:@"geolat"];
[r setPostValue:@"116.3441" forKey:@"geolong"];
[r setDelegate:self];
[r startAsynchronous];

}

片上使用
- (void)setData:(id)data withFileName:(NSString


*)fileName andContentType:(NSString *)contentType
forKey:(NSString *)key

注意如果有: 如下面些就是:

POST http://api.maopao.com:80/maopao/v2.0/postlocation HTTP/1.1 Host: api.maopao.com:80
UserAgent: iPhone:6.0.1/maopaopaipai:1.3.6/source:mppp_I_app/deviceinfo:iPhone3,1 Proxy-Connection: keep-alive

Content-Type: application/x-www-form-urlencoded Content-Length: 81
Accept-Language: zh-cn
Accept: */*

Connection: keep-alive
User-Agent: mppp/1.3.6 CFNetwork/609 Darwin/13.0.0 Paros/3.2.13

ASI
r.requestHeaders = [NSMutableDictionary dictionaryWithObjectsAndKeys:

    @"api.maopao.com:80", @"Host",
@"iPhone:6.0.1/maopaopaipai:1.3.6/source:mppp_I_app/devic
einfo:iPhone3,1",
    @"UserAgent",
    @"mppp/1.3.6 CFNetwork/609 Darwin/13.0.0
Paros/3.2.13", @"User-Agent",

n 

posted @ 2015-04-24 17:11  captivity  阅读(227)  评论(0)    收藏  举报