在Fiddler中,是否可以欺骗客户端IP地址?

时间:2017-05-10 16:48:32

标签: client ip-address fiddler clientip

在我们的应用程序的生产环境中,当我们在C#WebBrowser控件上调用Navigate操作时,我们首先将身份验证详细信息和重定向URL发送到身份验证服务器。此服务器验证并发回HTTP 302响应,该响应提示WebBrowser控件重定向到另一个服务器。由于在执行重定向时IP地址发生了变化,屏蔽目标URL的指纹监视器向我们发送了一个挑战。然后,我们转发cookie以及我们从验证服务器收到的内容。

现在,问题是,当我们在非prod环境中调试它时,因为客户端IP保持不变,监视器没有发出任何挑战,我们无法测试我们的更改,确保所有权利authenticatoin信息从早期的Authentication Server的响应转发。

是否有可能在重定向之间进行此类客户端IP地址欺骗,以便我们测试我们的代码?我正在使用Fiddler,据我所见,没有可以修改的属性。 Session变量“x-clientip”是一个只读变量。

1 个答案:

答案 0 :(得分:0)

您的服务器如何确定客户端的IP地址?例如,如果查看<!DOCTYPE html> <html lang="en"> <head> <title>Woodrow Lawn and Turf</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <meta name="keywords" content=""> <meta name="description" content=""> <link rel="stylesheet" href="../CSS/index.css"> <link href="https://fonts.googleapis.com/css?family=Asap:400,400i,500,500i,700,700i" rel="stylesheet"> </head> <!-- DEVELOPER NOTES --> <!-- - Keywords and description meta are still subject to change by the client. - Make sure to add correct target attributes and file paths to the nav links. - All images used in this mockup are subject to copyright currently. - Make sure to add alternate font families to the font-family style. (2 only) - Fix non-colored area below the footer. --> <body> <header> <h1 id="Logo">Woodrow Lawn and Turf</h1> <nav> <ul id="Navigation"> <li><a href="index.html">About Us</a></li> <li>|</li> <li><a href="#">Lawn Stuff</a></li> <li>|</li> <li><a href="#">Dirt Stuff</a></li> <li>|</li> <li><a href="#">Flower Bed Stuff</a></li> <li>|</li> <li><a href="#">Patio Stuff</a></li> <li>|</li> <li><a href="#">Firepit Stuff</a></li> <li>|</li> <li><a href="#">Commercial and Business Stuff</a></li> </ul> </nav> </header> <div id="Wrapper"> <h1 id="Greeting">Welcome!</h1> <p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.</p> <p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.</p> <p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.</p> <p>Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.</p> </div> <div id="Footer"> <footer> <p id="Copyright">&copy; Copyright Woodrow Lawn and Turf LLC 2017</p> <ul id="Contact"> <li>Contact:</li> <li><a href="tel:+1-999-999-9999">(999)999-9999</a></li> <li>|</li> <li><a href="mailto:stuffcompany@comp.net">stuffcompany@comp.net</a></li> </ul> </footer> </div> </body> </html>请求标头,Fiddler可以轻松更改它。

如果没有,不,Fiddler本身并没有一些神奇的方法来让流量来自不同的IP地址。如果您的计算机有多个NIC,Fiddler可以使用X-EgreesIP通过特定的IP地址将第二个请求指向出口。或者,您可以让Fiddler通过在具有不同IP地址的其他计算机上运行的不同代理(例如,另一个Fiddler实例)来指示给定请求;使用X-Forwarded-For标志来做到这一点。