Introduce you how to use Charles tools to enhance your web development. we can use this to figure out the problem exactly and develop quickly.

1. Charles Tool Sharing
By Vincent Chang

2. Installation
 JRE
 Charles installer
 Version : v3.11.4

3. Key features
 SSL Proxying
 Bandwidth Throttling
 AJAX
 AMF
 Requests / Responses Editing
 Breakpoints

4. Charles – Web Proxy
 Http
 Https
 Socks

5. Principle

6. Proxy Configuration
 Windows
 Firefox
 Http proxy
 Bypass proxies

7. Windows Proxy

8. Firefox Proxy

9. Http Proxy

10. Bypass proxies

11. Sessions
 Can be saved.
 Can open multiple sessions.
 At the same time, only one session is
being recorded.

12. Recording
 Recording limits
 Included list
 Excluded list

13. Recording options

14. Request & Response
 Header Viewers
◦ Query parameters
◦ Form parameters
◦ Cookies
◦ JSON headers

15. Request & Response
 Body Content Viewers
◦ XML
◦ AMF
◦ Form parameters
◦ JSON
◦ Compressed data
◦ Protocol Buffers

16. Chart
 Timeline
◦ Request
◦ Latency
◦ Response
 Sizes
 Duration
 Types

17. Chart

18. Session Export
Format Import to Charles
Charles Session File(.chls) Can
CSV(.csv)
Http Trace File(.trace) Can
XML Summary File(.xml)
XML Session File(.xml) Can
Html Archive (.har) Can

19. Import
Format
Charles Session File(.chls)
AMF Dumps(.amf0, .amf3)
Http Trace File(.trace)
Json Dumps(.json)
XML Session File(.xml)
Http Archive(.har)
Fiddler Session File(.saz)
Libpcap(.pcap)

20. SSL Proxying Principle
 Normal SSL work flow

21. SSL Proxying Principle
 Charles SSL Proxying work flow

22. SSL Proxying
1. Enable SSL Proxy
2. Choosing Hosts to SSL Proxy
3. Trusting Charles’s SSL Certificates
◦ Windows
◦ Browser(Firefox)

23. Web Interface
 Allow you to control Charles from
◦ A browser
◦ A external program
 http://control.charles/
 Can configure username and
password.

24. No Caching
 For Request part
◦ Removed
 If-Modified-Since
 If-None-Match
◦ Added
 Pragma: No-cache
 Cache-control: no-cache
 For response part
◦ Removed
 Expires
 Last-Modified
 Etag
◦ Added
 Expire: 0
 Cache-Control: no-cache

25. Block Cookies
 For the Request part
◦ Removed : Cookie
 For the Response part
◦ Removed : Set-Cookie

26. Map Remote
 Enables you to map site to site
 Map dir. to dir.
 Map file to file
 Map a dir. with file pattern to dir.
◦ aaa.com/yyy/*.php to bbb.net/xxx/
 Map https to http, vice versa.

27. Map Local
 Enables you to map your local
machine file as the client side
resources.

28. Rewrite
 Enables you to create a rule to modify the
request / response while proxying.
 Set
◦ Rewrite configs.
 Location
◦ Host to be rewrited.
 Rule
◦ Rewrite rule for request/response content to be
modified

29. Rewrite

30. Black List
 Do block while requesting
 Blocking action
◦ Drop connection
◦ Return 403
 Able to use wildcard to describe
subdomain.

31. White List
 Same purpose with Black List but
different way.
 By default, all request are blocked, only
selected locations is not being blocked.
 Blocking action
◦ Drop connection
◦ Return 403

32. DNS Spoofing
 Like Windows “host” file

33. Mirror
 Saves latest responses to disk.
 Alternative
◦ Right-click => save all response
 Rather than the alternative way, Mirror
is no limited.

34. Thanks for your listening