Is there any way to block partial URLs in Fiddler? I know that you can block an entire URL, but say the end of this specific URL contains the time in it, it will be a different URL every single time generate that request.

 

 

I currently am blocking URLs by going into my autoresponder and pasting A URL in the following way:

"if request matches..." (example)

"then respond with..." (*reset) 

 

My idea would be to create the same autoresponder but instead of "if request matches...", having "if request contains..." or something along that lines, is this possible?

I'm currently using  Burp Suite with fiddler to get around the PAC file issues with Burp. It was working fine yesterday. Now every time I try to use fiddler it deletes my PAC file setting. Also the 'Show Current Gateway Info' doesn't work anymore either. While Fiddler is open and I select 'Click to reenable capturing' it will just delete my PAC file setting again and I can't use it. I haven't made any changes since I was using it yesterday. Any ideas?

I have an application that I use for work all the time that makes a web request to a server and responds with a unique key that I need for certain purposes. I don't like having to launch the application whenever I want a key, so I am using proxifier to forward the traffic to fiddler. I've tried it on two machines with out success. One machine uses windows 7 without .net 4 so I'm using fiddler2. On that machine the error is

 

. System.Security.Authentication.AuthenticationException A call to SSPI failed, see inner exception. < The message received was unexpected or badly formatted

 

The other machine uses fiddler 4 and the error is

fiddler.network.https> HTTPS handshake to 104.28.15.252 (for #1) failed. System.Security.Authentication.AuthenticationException A call to SSPI failed, see inner exception. < The message received was unexpected or badly formatted

Win32 (SChannel) Native Error Code: 0x80090326

In both cases the request it fails on is the same

 

A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.

Version: 3.1 (TLS/1.0)
Random: 59 C1 92 62 E9 FA 23 04 AB 6F FE A4 10 7B 27 13 28 7B 49 59 5A 9A AB D8 F1 FA 39 71 37 86 00 37
"Time": 5/28/2022 5:42:01 PM
SessionID: empty
Extensions: 
none
Ciphers: 
[0035]TLS_RSA_AES_256_SHA
[002F]TLS_RSA_AES_128_SHA
[000A]SSL_RSA_WITH_3DES_EDE_SHA
[0005]SSL_RSA_WITH_RC4_128_SHA
[0004]SSL_RSA_WITH_RC4_128_MD5

Compression: 
[00]NO_COMPRESSION

---------------------------
Uncaught Exception in Session #3
---------------------------
Fiddler has encountered an unexpected problem. If you believe this is a bug in Fiddler, please copy this message by hitting CTRL+C, and submit a bug report at http://www.telerik.com/forums/fiddler.

Could not load type 'Fiddler.ICertificateProvider4' from assembly 'Fiddler, Version=4.6.20172.34691, Culture=neutral, PublicKeyToken=null'.

Type: System.TypeLoadException
Source: mscorlib
   at System.Reflection.RuntimeAssembly.GetExportedTypes(RuntimeAssembly assembly, ObjectHandleOnStack retTypes)

   at System.Reflection.RuntimeAssembly.GetExportedTypes()

   at Fiddler.CertMaker.Œ() in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\CertMaker.cs:line 111

   at Fiddler.CertMaker.EnsureReady() in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\CertMaker.cs:line 69

   at Fiddler.CertMaker.Ž() in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\CertMaker.cs:line 172

   at Fiddler.Session.(Session ) in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\Session.cs:line 5584

   at Fiddler.Session.‘() in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\Session.cs:line 3519

   at Fiddler.Session.(Object ) in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\Session.cs:line 3347


Fiddler v4.6.20172.34691 (x64 AMD64) [.NET 4.0.30319.42000 on Microsoft Windows NT 10.0.15063.0] 
---------------------------
OK   
---------------------------

 

I see this exception when i try to download the fiddler cert.

1. i donwloaded latest fiddler exe

2. added this plugin CertMaker for iOS and Android

now i cant download cert. in the old build it worked all fine.

Hi folks,

I've got an interesting issue I'm struggling to progress.

My setup is made up of 2 windows 2012R2 VMs:

VM#1 -- One acting as a proxy for remote clients, listening on port 8000

VM#2 - The other is the client with browser configured to use the proxy VM to get to the WWW. This VM also has an Azure AD Proxy connector agent that basically allows external users to get to internal apps via Azure > Connector > Back end apps. There's not a great deal to it and is basically provides reverse proxy access to internal application over a cloud proxy as a service. 

Clients connections hit Azure, which then routes the client request down to the on-prem connector(VM#2), and onto whatever internal application is being addressed by means of internal DNS resolution. This works fine, however, if the client request is for a site that resolves to a public address(E.g. bbc.co.uk) then the response is received no probs, but I see no traffic listed for the site. If I do this from a browser on VM#2 then no probs and I see the site listed int eh activity window.

To be clear, the connection to the published site works as expected, but just doesn't show in the window. The same test to the same site does display in the window however. And I know it's definitely going via Fiddler as if I stop Fiddler then the browser just times out after attempting to reach the page. 

My gut feel is that the TCP connection may be being reused between the client traffic heading to bbc, and the traffic of the connector agent talking to Azure, but I'm unable to prove this.

Would anyone know if there's a way to debug Fiddler to isolate behavior?

An Azure App Proxy diagram that illustrates the flow can be found here - https://docs.microsoft.com/en-us/azure/active-directory/active-directory-application-proxy-get-started

 

Thanks

 

 

 

Does anyone know if it is possible from a saz file to re-group sessions (http request-responses pairs) by their socket connections ? (if yes - hints welcome :-))

Hello

I installed and ran Fiddler. It captured the traffic. There is a lot of data. How do I interpret this data? Is there a article or video which can help me in this?

Thanks

Deepak

Hello, I'm a new fiddler user trying to configure to capture traffic from the iOS connected. I'm trying to follow this one here, http://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/ConfigureForiOS, but got stuck at the steps to decrypt HTTPS traffic from iOS devices. I've installed certmaker, but when I tried to configure windows client to trust fiddler root certificates, it all went haywire with loads of errors around.

Firstly, when i try to enable HTTPS traffic decryption by clicking the decrypt HTTPS traffic box, a box showing "Could not load type 'Fiddler.lCertificateProvider4' from assembly 'Fiddler, Version=4.6.20172.34691, Culture=neutral, PublicKeyToken=null'." appears.

If I ignore the box and proceed with trusting the root certificate, the same box appears instead of the installing certificate notice.

Next, if I tried to export the certificate from what I've read around, this shows up: "---------------------------
Certificate Export Failed
---------------------------
Fiddler has encountered an unexpected problem. If you believe this is a bug in Fiddler, please copy this message by hitting CTRL+C, and submit a bug report at http://www.telerik.com/forums/fiddler.

Could not load type 'Fiddler.ICertificateProvider4' from assembly 'Fiddler, Version=4.6.20172.34691, Culture=neutral, PublicKeyToken=null'.

Type: System.TypeLoadException
Source: mscorlib
   at System.Reflection.RuntimeAssembly.GetExportedTypes(RuntimeAssembly assembly, ObjectHandleOnStack retTypes)

   at System.Reflection.RuntimeAssembly.GetExportedTypes()

   at Fiddler.CertMaker.Œ() in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\CertMaker.cs:line 111

   at Fiddler.CertMaker.EnsureReady() in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\CertMaker.cs:line 69

   at Fiddler.CertMaker.() in C:\JenkinsHome\jobs\FiddlerReleaseBuild\workspace\Fiddler2\Common\Core\CertMaker.cs:line 184


Fiddler v4.6.20172.34691 (x64 AMD64) [.NET 4.0.30319.34209 on Microsoft Windows NT 6.3.9600.0] 
---------------------------
OK   
---------------------------
"

Am at a big loss here, could it be the certmaker that is the issue or did I configured wrongly ?

I've just started using Fiddler to try to diagnose some data packets sent to a website.
However, every time I try to start Fiddler.exe, I get an error "The requested resource is in use". I don't know which resources Fiddler.exe uses so I have no clue how to resolve this. In addition, this seems to be a unique error, as my searches have turned up no similar occurrences in the past.

I am using Visual Studio and C# to post a request to my client's https: api service (a Java/Unix platform).

They claim I am not sending the payload (request body).

My code uses a common practice method HttpWebRequest request = (HttpWebRequest)WebRequest.Create("https://client.com/api/login");

I then create the JSON from a data structure using the JavaScriptSerializer as 

     loginInfoSerialized = new JavaScriptSerializer().Serialize(loginInfo);

I add request.Headers.Add as needed by the client.  And then write the request stream using:

            StreamWriter streamPost = new StreamWriter(request.GetRequestStream());
            streamPost.Write(loginInfoSerialized);

All pretty standard.  However, I am not able to capture/see the outgoing HTTPS request in Fiddler to confirm the header and payload data is being sent from my development platform (Windows 7).  My firewall is disabled.

I do see a "Tunnel to" in the Host column, but nothing recognizable (https decipher??)  

Should I be doing something different to see the outbound packets?

Thanks.