Pending Review
Last Updated: 01 Feb 2019 09:37 by sim
sim
Created on: 28 Jan 2019 07:59
Type: Bug Report
1
Unable to deal with some response in apps for ios.

Some responses can not be shown in fiddler,for example,i am analysising the package of 植物大战僵尸2(pvz2) for ios.it shows "400 .net error response headers...",but other app like burpsuite can deal with it well...

 

so i've to set the proxy of iphone to "192.168.1.2:8080" and the gateway of fiddler to "127.0.0.1:8888" where burp listens, then fiddler works ok...but it's also too complicated.

 

thx for your reply...(may u have a try?)

4 comments
sim
Posted on: 01 Feb 2019 09:37
thanks very much! it's ok!!!
Eric
Posted on: 29 Jan 2019 20:57

If I resend the same request locally as was captured in your failing capture, it works.

Looking at the data in the capture, we see:

X-HTTPPROTOCOL-VIOLATION: [ProtocolViolation] Incorrectly formed Request-Line. abs_path was empty (e.g. missing /).

This is a bug in the client. Your client is sending

   

   POST http://cloud.pvz2ios.popcap.com.cn HTTP/1.1\r\n

It should be sending

   POST http://cloud.pvz2ios.popcap.com.cn/ HTTP/1.1\r\n

Fiddler does not automatically fix this up for you. To fix it yourself, click Rules > Customize Rules.

Scroll down to

    static function OnBeforeRequest(oSession: Session) {

And add the following lines:

if ((oSession.HTTPMethodIs("GET") || oSession.HTTPMethodIs("POST")) && oSession.PathAndQuery == "") {
oSession["ui-backcolor"] = "orange";
oSession.PathAndQuery = "/";
}

 

Save the script and Fiddler will rewrite your requests to something the server will accept.

 

sim
Posted on: 29 Jan 2019 07:56

ok here is the err saz of fiddler without extent setting and fiddler through burp.

 

 

and y can not i add .saz attachment...

EricLaw
Posted on: 28 Jan 2019 23:15
What exactly is "400 .net error response headers..."? Please attach a .SAZ file showing exactly what you mean.