12 Useful Tips for Using Fiddler HTTP Sniffer

12 Useful Tips for Using Fiddler HTTP Sniffer

Songqin Software Testing Adhere to Educational Principles Both Ask About Harvest and Cultivation When it comes to packet capturing, many people think it’s just about using a tool to capture data easily. Yesterday, during an interview for an Android reverse engineering position, I was directly told, “Packet capturing has no technical content.” Here, I must … Read more

Understanding HTTP Proxies: Theory and Practice

Understanding HTTP Proxies: Theory and Practice

/ Today’s Tech News / Sam Altman, the CEO of OpenAI, known as the “father of OpenAI”, warned at a Brookings Institution discussion on artificial intelligence and geopolitics that the economic impact of AI may be greatly underestimated. Altman said, “What I am most worried about right now is what kind of changes socioeconomic changes … Read more

Implementing a Simple HTTP Proxy in Golang

Implementing a Simple HTTP Proxy in Golang

This article details the implementation of an HTTP proxy using Golang. Those who have such needs in practical business can start learning! A proxy is an important function in the network, which serves to proxy network users to obtain network information. Figuratively speaking, it is a transfer station for network information. For clients, the proxy … Read more

Why Does HTTPS Return Large Data While HTTP Returns Line by Line?

Why Does HTTPS Return Large Data While HTTP Returns Line by Line?

Background: Recently, while debugging a ChatGPT dialogue website, I encountered issues with large data responses, leading me to use stream reading. The initial HTTP calls worked without any problems, but when switching to HTTPS in production, I kept facing errors. After struggling with this issue for two days, I finally resolved it with the help … Read more

General Penetration Testing Approaches for AES+SM4 Encryption

General Penetration Testing Approaches for AES+SM4 Encryption

General Penetration Testing Approaches for AES+SM4 Encryption Article originally published on: Zgao’s blog In a recent penetration testing project, the website’s traffic utilized the AES+SM4 dual-layer encryption algorithm for secure transmission. When encountering a website with encrypted transmission, it is usually impossible to perform vulnerability scanning. Manual testing is inefficient, hence the exploration of general … Read more