I'm having an issue with an WinHTTP application I'm intercepting and modifying data for. I'm setting the WinHTTP proxy as a loopback to capture and modify the response, however the WinHTTP application checks for a loopback after the response and denies authorization if one is found.

I've tried setting the loopback, decoding the response, and right before sending my modified response, resetting the WinHTTP settings to default. The problem i'm facing is that this WinHTTP application actually polls the server twice in a row, so if I reset the proxy once, i need to set it again and then reset it again before modifying the response a 2nd time.

Is there a way I can delay the 2nd request so that I have enough time to reset and set the first one? I've tried using Thread.Sleep but that doesn't work. Thanks.

        void Start()
        {
            CaptureConfiguration.CaptureDomain = "https://toirplusvip.com/";

            SetWinHTTPProxy();

            FiddlerApplication.AfterSessionComplete += FiddlerApplication_AfterSessionComplete;
            FiddlerApplication.BeforeRequest += FiddlerApplication_BeforeRequest;
            FiddlerApplication.BeforeResponse += FiddlerApplication_BeforeResponse;
            FiddlerApplication.Startup(8877, false, true, true);
        }

        public void SetWinHTTPProxy()
        {
            var proc1 = new ProcessStartInfo();
            string anyCommand = "netsh winhttp set proxy 127.0.0.1:8877 \"<-loopback>\"";
            proc1.UseShellExecute = true;
            proc1.WorkingDirectory = @"C:\Windows\System32";
            proc1.FileName = @"C:\Windows\System32\cmd.exe";
            proc1.Verb = "runas";
            proc1.Arguments = "/c " + anyCommand;
            proc1.WindowStyle = ProcessWindowStyle.Hidden;
            Process.Start(proc1);
        }

        public void ResetWinHTTPProxy()
        {
            var proc1 = new ProcessStartInfo();
            string anyCommand = "netsh winhttp reset proxy";
            proc1.UseShellExecute = true;
            proc1.WorkingDirectory = @"C:\Windows\System32";
            proc1.FileName = @"C:\Windows\System32\cmd.exe";
            proc1.Verb = "runas";
            proc1.Arguments = "/c " + anyCommand;
            proc1.WindowStyle = ProcessWindowStyle.Hidden;
            Process.Start(proc1);
        }

        private void FiddlerApplication_BeforeResponse(Session oSession)
        {
            if (oSession.fullUrl.ToLower().Contains("toirplusvip.com/checklogin_vip_aimode2.php"))
            {
                Console.WriteLine(oSession.fullUrl.ToLower());
                Console.WriteLine("beeuty");
                oSession.utilDecodeResponse();
                var oBody = System.Text.Encoding.UTF8.GetString(oSession.responseBodyBytes);
                var epoch = (int)DateTime.UtcNow.Subtract(new DateTime(1970, 1, 1, 0, 0, 0)).TotalSeconds;
                var sessionID = "8763c665bc13e4ba56ee578c161dc1f4";
                String input = "rnd='&ret=" + sessionID + "&token=" + epoch + "&code=0";
                Console.WriteLine(input);
                Cryptography c = new Cryptography();
                String nBody = c.EncryptString(input, key, iv);

                ResetWinHTTPProxy(); // needs to be reset in between

                oSession.utilSetResponseBody(nBody);
                return;
            }
        }

My specific role requires me to reinstall an operating system on my Window's Desktop once every other week. I am trying to write a batch/PowerShell script that does all my initial set up automatically. One thing that I am trying to automate is configuring Fiddler. Is their any way I can enable HTTPS decyption and allow all App Containers through a script?

I tried copying the files from %UserProfile%\Documents\Fiddler2  that remain after uninstalling with the option to keep your desired settings and then robocopy'ing them after I re-install Fiddler with no luck. Thank you in advance.

Q1. Fiddler Everywhere is Fiddler Orchestra?

Q2. Has the development of Fiddler Orchestra been interrupted?

Q3. Fiddler Everywhere supports mobile (Android / iOS) devices?

Hi,

I am trying to troubleshoot web services issue. When i try to call the http URL from the pc browser requests are not capturing in Fiddler. If i call the same URL from local machine browser requests are captured in Fiddler.

 

Can anyone please let me know what is the issue.

 

Regards,

Purushotha

Hi,

I'm trying to capture request from https://management.azure.com/ but for some reason, I see the requests in the developer tools but not in .

 

I'm running Windows 10

Fiddler Info
v5.0.20182.28034 for .NET 4.6.1
Built: Wednesday, June 27, 2018

64-bit AMD64, VM: 1,578.0mb, WS: 508.0mb
.NET 4.7.1 WinNT 10.0.17763.0

 

Avi

this was what popped up

 

---------------------------
Awww, Fiddlesticks!
---------------------------
Fiddler has encountered an unexpected problem. If you believe this is a bug in Fiddler, please copy this message by hitting CTRL+C, and submit a bug report at http://www.telerik.com/forums/fiddler.

Could not load file or assembly 'Xceed.Zip.v5.4, Version=5.4.13572.13590, Culture=neutral, PublicKeyToken=ba83ff368b7563c6' or one of its dependencies. The system cannot find the file specified.

Type: System.IO.FileNotFoundException
Source: Fiddler
   at Fiddler.FiddlerApplication.„€()

   at Fiddler.frmViewer.‹•(String[] ˆ•)

   at Fiddler.frmViewer.‡•(String[] ˆ•)


Fiddler v5.0.20182.28034 (x64 AMD64) [.NET 4.0.30319.42000 on Microsoft Windows NT 10.0.17134.0] 
---------------------------
OK   
---------------------------

 

if you could please help me, that would be great! it comes up in a gray box 2 seconds after i try and launch the app. i am running the latest version of windows. thank you.

 

 

 

I am creating a Fiddler extension in which users will have the ability to filter the sessions in the session list. Based on the user's filter condition I want to show/hide/highlight the sessions in the Fiddler's session list. But the problem that I am facing right now is that oSession["-hide"] = true.ToString().ToLower(); does not make that session hidden. Also now I am not sure how can I highlight that session in the session list.

After set agent on mobile phone, how to capture mobile traffic via fiddllercode, like fiddler4 does.

 

Can you supply a sample code?

App looks fantastic but.... decryption coming soon?

Out of curiosity, is there active development going on? are there new releases or updates?