Telerik Forums
Fiddler Forum
0 answers
75 views

Hello,

I understand that by default Fiddler 4 will accept inbound connections using any HTTPS protocol version. 

Is there a way to control which protocols Fiddler will accept for inbound connections? for example, allowing only SSL3 and TLS1.0.

Thanks

Yaron
Top achievements
Rank 1
 asked on 13 Feb 2016
2 answers
117 views
Hello to everybody on this forum. We are a Russian-based software company.

One of our products is a Windows-based security gateway that implements a web proxy as its integral part. So far, our web proxy only supports HTTPS via the HTTP CONNECT tunneling method. We have come across Fiddler while researching the possibility of decrypting HTTPS (SSL/TLS) in our program. Which brings me to my questions. 

1. Does Fiddler (HTTPS decrypting functionality) exist as a DLL for a Windows OS?
2. Is there an API that Fiddler (HTTPS decrypting functionality) provides to other software?
2. Can we obtain such a DLL and API specifications from you?
3. Are we free to incorporate that DLL in our software? 
 
Thank you in advance.
alex
Top achievements
Rank 1
 answered on 05 Feb 2016
7 answers
522 views

Fiddler is capturing all internet requests from internet explorer, but as soon as I request something internally (site hosted in iis on my pc or site hosted in iis on server in our domain), fiddler does not show anything.

When I use chrome, all traffic shows up (intranet and internet), no problem there. 

But I need fiddler for some internet explorer specific problem, so does anyone have any idea why fiddler is not capturing requests from IE for intranet sites?

EricLaw
Top achievements
Rank 1
 answered on 04 Feb 2016
3 answers
119 views

 It looks like something is using the FiddlerRoot certificate as a means to hijack google.  I posted about it on superuser at the below link.  I'd really like to not have to reinstall Windows.  

http://superuser.com/questions/1034394/google-search-hijacked-only-when-not-being-observed-attaching-a-debugger-return?noredirect=1#comment1443610_1034394

 

EricLaw
Top achievements
Rank 1
 answered on 04 Feb 2016
1 answer
2.9K+ views

Hi,

I have following task:

I have to add delay ( 50 seconds) to request to push the limits of the timeout.

ER: I should get time out error in response 

How can I do it? 

 

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
2 answers
6.8K+ views

I was able to load a HTTPS site in chrome. But as soon as i start fiddler to capture the HTTPS, I can't load that site anymore. I get this in my chrome.

Your connection is not private Attackers might be trying to steal your information from testsite.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

 

My question is how can I use fiddler to capture HTTPS traffic?

I was able to load a HTTPS site in chrome. But as soon as i start fiddler, I can't load that site anymore. I get this in my chrome.

Your connection is not private

Attackers might be trying to steal your information from onedrive.live-int.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

My question is how can I use fiddler to capture HTTPS traffic?

I was able to load a HTTPS site in chrome. But as soon as i start fiddler, I can't load that site anymore. I get this in my chrome.

Your connection is not private

Attackers might be trying to steal your information from onedrive.live-int.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

My question is how can I use fiddler to capture HTTPS traffic?

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
2 answers
415 views
Is it possible to hide Fiddler?
EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
8 answers
158 views

Firefox Nightly 42.0a1. See screenshot in the attachment.

 The "More Information" link URL is https://support.mozilla.org/en-US/kb/add-on-signing-in-firefox

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
2 answers
423 views

I am getting "System.ArgumentException: Invalid JSON primitive:" while i am testing my asp.net web api using fiddler.

 Header is as follows

Content-Type: multipart/form-data; boundary=-------------------------acebdf13572468
User-Agent: Fiddler
Host: trackonpro.in
Content-Length: 8976

Body is as follows

---------------------------acebdf13572468
Content-Disposition: form-data; name="json" 
Content-Type: application/json
{
"WR_id":"0",
"Com_Id": "5",
"Usr_Id":"22",
"WRC_id":"1",
"App_id":"1",
"Ser_LogNo":"2",
"WR_Comments":"Test",
"WR_date":"2015-12-23 01:30:50.000",
"WR_Location":"test",
"WR_lati":"10.45465",
"WR_longi":"70.23654",
"Status_id":"11"
}
---------------------------acebdf13572468
Content-Disposition: form-data; name="fieldNameHere"; filename="download (1).png"
Content-Type: image/png

<@INCLUDE *C:\Users\MANU\Desktop\cv\download (1).png*@>
---------------------------acebdf13572468
Content-Disposition: form-data; name="fieldNameHere"; filename="download.png"
Content-Type: image/png

<@INCLUDE *C:\Users\MANU\Desktop\cv\download.png*@>
---------------------------acebdf13572468--

 

 and the error i am getting is as follows

 

System.ArgumentException: Invalid JSON primitive: "0", "Com_Id": "5", "Usr_Id":"22", "WRC_id":"1", "App_id":"1", "Ser_LogNo":"2", "WR_Comments":"Test", "WR_date":"2015-12-23 01:30:50.000", "WR_Location":"test", "WR_lati":"10.45465", "WR_longi":"70.23654", "Status_id":"11" }. at System.Web.Script.Serialization.JavaScriptObjectDeserializer.BasicDeserialize(String input, Int32 depthLimit, JavaScriptSerializer serializer) at System.Web.Script.Serialization.JavaScriptSerializer.Deserialize(JavaScriptSerializer serializer, String input, Type type, Int32 depthLimit) at System.Web.Script.Serialization.JavaScriptSerializer.Deserialize[T](String input) at WebApplication.Areas.Json.Controllers.Work_ReportController.d__4.MoveNext()

 

Kindly please help me to fix it

Thankyou

 

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
1 answer
119 views

hey,

There was question in microsoft ctf that we have to upload a file of particular format to get the flag but code was not given also the format of the file was not given..... so we have to somehow upload a file a file to get flag......................hint of the question was  "By fiddler"  Can anyone resolve my query , how to solve it???????????

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
Narrow your results
Selected tags
Tags
+? more
Top users last month
Rob
Top achievements
Rank 3
Iron
Iron
Iron
Atul
Top achievements
Rank 1
Iron
Iron
Iron
Alexander
Top achievements
Rank 1
Veteran
Iron
Serkan
Top achievements
Rank 1
Iron
Shawn
Top achievements
Rank 1
Iron
Iron
Want to show your ninja superpower to fellow developers?
Top users last month
Rob
Top achievements
Rank 3
Iron
Iron
Iron
Atul
Top achievements
Rank 1
Iron
Iron
Iron
Alexander
Top achievements
Rank 1
Veteran
Iron
Serkan
Top achievements
Rank 1
Iron
Shawn
Top achievements
Rank 1
Iron
Iron
Want to show your ninja superpower to fellow developers?
Want to show your ninja superpower to fellow developers?