I am using fiddlercore in my C# windows application form but I'm really struggling to capture httprequest headers of certain website

My first issue is with the certificate, so whenever I visit any website while the application is running, it just says it's not secure.

My second issue is that I want to display POST headers that are being sent using web browser to the console, yet I've only managed to show me the website url

If there is any c# developer that could help me that would be great as this is a project I am doing in my spare time while learning this new programming language

My target is to obtain a log file in real time using Fiddler, and extrapolate certain informations contained in the website, in my case, I need the Json when the expression begin with a specifc event or words.

I found the RTLogger of Eric Lawrence for the real time log, that works, after a little edit I did it on Visual Studio, the log file is created with all the information of the page (request, response, Html Code, etc.), so I need to "filter" or remove this useless information and keep only the JSON.

My code in CS project is:

using System;
using log4net;
using Fiddler;

[assembly: log4net.Config.XmlConfigurator(Watch=true)]
[assembly: Fiddler.RequiredVersion("2.4.5.0")]
namespace RTLogger
{
    public class RTLogger: IAutoTamper
    {
        private static readonly ILog log = LogManager.GetLogger(System.Reflection.MethodBase.GetCurrentMethod().DeclaringType);
        public void AutoTamperRequestAfter(Session oSession) { }
        public void AutoTamperRequestBefore(Session oSession) { }
        public void AutoTamperResponseAfter(Session oSession) { }
        public void AutoTamperResponseBefore(Session oSession)
        {
            log.InfoFormat("#{0}\t{1}\t{2}\t{3}\t{4}",
               oSession.id,
               oSession.fullUrl,
               oSession.responseCode,
               oSession.oResponse["JSON"],
               oSession.GetResponseBodyAsString()
               );
        }


       public void OnBeforeReturningError(Session oSession)
        {
            log.InfoFormat("#{0}\t{1}\t{2}",
               oSession.id,
               oSession.fullUrl,
               oSession.responseCode
               );
        }


        public void OnBeforeUnload()
        {
            log.Info("RTLogger Unloading");
        }


        public void OnLoad()
        {
            log.Info("RTLogger Loading");
            if (log.IsInfoEnabled) FiddlerApplication.AlertUser("RTLogger", "Logging is enabled");
        }
    }
}


It works, but as I told before, I have too many information, I need just the "JSON", in my case, I have:

2017-10-11 15:43:21,709 #65 http://tedme.cm.local/ted/direct/voice200{"action":"Connect","method":"retrieveDN","type":"rpc","tid":1,"result":{"success":true,"data":{"dnName":"0691387025","tServer":"TEST_ME","tServerHost":"megas01","tServerPort":3020,"bkpTServerHost":"megas02","bkpTServerPort":3020,"defaultQueue":"0691387099","serviceName":"119upout","tServerApplicationName":"SIPServer_TEST_ME_P","placeName":"WLACCW7ENN083","disasterRecoveryStatus":"0","switchDbID":140,"agentLogins":["8562973"],"employeeId":"X0233164","annexes":{"voice.outbound.wrap_up_time":"1000","voice.inbound.wrap_up_time":"10","voice.backoffice.wrap_up_time":"0"},"raoMode":"rao_italia","protocolCreationTimeout":0,"useProtocolCreationTimeout":false,"valid":true}}}

So in my case I need first of all delete all the HTML CODE and CSS information or keep just the response that starts with "action" or "connect" or other string.

My problem is that I don't know where I must insert this rules: in the fiddlerscript? in the CS project? In whick kind of way?

I try the replace in the fiddlerscript, but it gives me the same result with too many information.

I used:

// If content-type is HTML, then remove all DIV tags

if (oSession.oResponse.headers.ExistsAndContains("Content-Type", "html")){
// Remove any compression or chunking
oSession.utilDecodeResponse();var oBody = System.Text.Encoding.UTF8.GetString(oSession.responseBodyBytes);
// Replace all instances of the DIV tag with an empty string
var oRegEx = /<div[^>]*>(.*?)<\/div>/gi; oBody = oBody.replace(oRegEx, "");
// Set the response body to the div-less string
oSession.utilSetResponseBody(oBody);}

No luck with this code.

So, since I'm going crazy, do you have any ideas for help me?

Please let me know how to capture traffic from a remote Win 10 IoT device (e.g. Raspberry Pi 3 SBC)
using Fiddler in my PC. The approach for achieving this by for setting Win 10 IoT as a proxy, listed in 

the following link :

https://docs.microsoft.com/en-us/windows/iot-core/develop-your-app/fiddler

did not work. I was not able to find any other clues.

Thanks,

    Paul

Hi,

When i start Fiddler and go to Rules > Customize Rules in terminal following is get

The file /<location>/fiddler-mac/ScriptEditor/FSE2.exe does not exist

Currently have installed mono framework and fiddler from https://www.telerik.com/download/fiddler. Is something else needed?

Regards.

 

This is regarding an error I get every time I try to Refresh the list in the "AppContainer Loopback Exemption Utility" originally written by Eric Lawrence.

I have just installed Fiddler 4 (v4.6.20172.34691, built 2017-08-15) on Windows 10. Upon clicking the "WinConfig" button on the interface, it runs the utility asking for Elevated rights which I grant. The first time I ever ran it, it threw an "Orphaned Exemption Record Found” exception and continued to do so until I reset them by clicking "Except None" followed by "Save Changes."

However, the attached error has persisted. Text below for search indexing. :)

Warning: Unable to use NetIsoEnumAppContainers to get AppContainer list. Error Code: 0x3. Attempting manual registry crawl; some information will be unavailable.

Once i was using fiddler for online games, but today i can't use it anymore, why? Sorry for asking and bad english

I currently have the following setup:

Windows Machine (running both fiddler and a VPN server)   <------Connected through PPTP (VPN)-------> Mobile Phone

I have confirmed that the VPN connection works and is working as expected, however, on the Windows machine, is unable to pick up HTTP request initiated by the phone, only HTTP request initiated by the windows machine is captured.

 

Please advise.

 

Thanks in advance.

 

Best Regards,

Brandon

 

Hi, Everybody!...

I have a web service that constructs and emits an HTTPS request to a third party web service.  I downloaded the latest version of Fiddler.  How can I quickly configure Fiddler to capture the HTTPS request emitted by my web service?

Hello,

I have a non-dev Xbox One that I am trying to use fiddler on my laptop to intercept and decrypt the data.  Since I have the non-dev Xbox One I can't put any files on the system allowing the use of a proxy. The most used bypass for using saying a VPN on an Xbox One is to use a different DNS to pass the data through, I've tried this in settings on the Xbox One but it doesn't seem to actually pull any data from the Xbox.  Is there any guidance you could give me?

Hello this seems like a pretty simply question but I can't locate any info.

 

When you start a fiddler capture it looks like the net traffic is all captured into ram. I have a very random issue that occurs once every few days... I need to leave fiddler running but after a day or two it consumes all free ram and starts to destabilize the server.

 

Is there anyway to write capture info to file instead of ram? 

 

Thanks.