Telerik Forums
Fiddler Forum
2 answers
128 views
Hello to everybody on this forum. We are a Russian-based software company.

One of our products is a Windows-based security gateway that implements a web proxy as its integral part. So far, our web proxy only supports HTTPS via the HTTP CONNECT tunneling method. We have come across Fiddler while researching the possibility of decrypting HTTPS (SSL/TLS) in our program. Which brings me to my questions. 

1. Does Fiddler (HTTPS decrypting functionality) exist as a DLL for a Windows OS?
2. Is there an API that Fiddler (HTTPS decrypting functionality) provides to other software?
2. Can we obtain such a DLL and API specifications from you?
3. Are we free to incorporate that DLL in our software? 
 
Thank you in advance.
alex
Top achievements
Rank 1
 answered on 05 Feb 2016
7 answers
558 views

Fiddler is capturing all internet requests from internet explorer, but as soon as I request something internally (site hosted in iis on my pc or site hosted in iis on server in our domain), fiddler does not show anything.

When I use chrome, all traffic shows up (intranet and internet), no problem there. 

But I need fiddler for some internet explorer specific problem, so does anyone have any idea why fiddler is not capturing requests from IE for intranet sites?

EricLaw
Top achievements
Rank 1
 answered on 04 Feb 2016
3 answers
134 views

 It looks like something is using the FiddlerRoot certificate as a means to hijack google.  I posted about it on superuser at the below link.  I'd really like to not have to reinstall Windows.  

http://superuser.com/questions/1034394/google-search-hijacked-only-when-not-being-observed-attaching-a-debugger-return?noredirect=1#comment1443610_1034394

 

EricLaw
Top achievements
Rank 1
 answered on 04 Feb 2016
1 answer
3.1K+ views

Hi,

I have following task:

I have to add delay ( 50 seconds) to request to push the limits of the timeout.

ER: I should get time out error in response 

How can I do it? 

 

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
2 answers
7.0K+ views

I was able to load a HTTPS site in chrome. But as soon as i start fiddler to capture the HTTPS, I can't load that site anymore. I get this in my chrome.

Your connection is not private Attackers might be trying to steal your information from testsite.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

 

My question is how can I use fiddler to capture HTTPS traffic?

I was able to load a HTTPS site in chrome. But as soon as i start fiddler, I can't load that site anymore. I get this in my chrome.

Your connection is not private

Attackers might be trying to steal your information from onedrive.live-int.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

My question is how can I use fiddler to capture HTTPS traffic?

I was able to load a HTTPS site in chrome. But as soon as i start fiddler, I can't load that site anymore. I get this in my chrome.

Your connection is not private

Attackers might be trying to steal your information from onedrive.live-int.com (for example, passwords, messages, or credit cards). NET::ERR_CERT_AUTHORITY_INVALID

My question is how can I use fiddler to capture HTTPS traffic?

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
2 answers
456 views
Is it possible to hide Fiddler?
EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
8 answers
178 views

Firefox Nightly 42.0a1. See screenshot in the attachment.

 The "More Information" link URL is https://support.mozilla.org/en-US/kb/add-on-signing-in-firefox

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
2 answers
479 views

I am getting "System.ArgumentException: Invalid JSON primitive:" while i am testing my asp.net web api using fiddler.

 Header is as follows

Content-Type: multipart/form-data; boundary=-------------------------acebdf13572468
User-Agent: Fiddler
Host: trackonpro.in
Content-Length: 8976

Body is as follows

---------------------------acebdf13572468
Content-Disposition: form-data; name="json" 
Content-Type: application/json
{
"WR_id":"0",
"Com_Id": "5",
"Usr_Id":"22",
"WRC_id":"1",
"App_id":"1",
"Ser_LogNo":"2",
"WR_Comments":"Test",
"WR_date":"2015-12-23 01:30:50.000",
"WR_Location":"test",
"WR_lati":"10.45465",
"WR_longi":"70.23654",
"Status_id":"11"
}
---------------------------acebdf13572468
Content-Disposition: form-data; name="fieldNameHere"; filename="download (1).png"
Content-Type: image/png

<@INCLUDE *C:\Users\MANU\Desktop\cv\download (1).png*@>
---------------------------acebdf13572468
Content-Disposition: form-data; name="fieldNameHere"; filename="download.png"
Content-Type: image/png

<@INCLUDE *C:\Users\MANU\Desktop\cv\download.png*@>
---------------------------acebdf13572468--

 

 and the error i am getting is as follows

 

System.ArgumentException: Invalid JSON primitive: "0", "Com_Id": "5", "Usr_Id":"22", "WRC_id":"1", "App_id":"1", "Ser_LogNo":"2", "WR_Comments":"Test", "WR_date":"2015-12-23 01:30:50.000", "WR_Location":"test", "WR_lati":"10.45465", "WR_longi":"70.23654", "Status_id":"11" }. at System.Web.Script.Serialization.JavaScriptObjectDeserializer.BasicDeserialize(String input, Int32 depthLimit, JavaScriptSerializer serializer) at System.Web.Script.Serialization.JavaScriptSerializer.Deserialize(JavaScriptSerializer serializer, String input, Type type, Int32 depthLimit) at System.Web.Script.Serialization.JavaScriptSerializer.Deserialize[T](String input) at WebApplication.Areas.Json.Controllers.Work_ReportController.d__4.MoveNext()

 

Kindly please help me to fix it

Thankyou

 

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
1 answer
142 views

hey,

There was question in microsoft ctf that we have to upload a file of particular format to get the flag but code was not given also the format of the file was not given..... so we have to somehow upload a file a file to get flag......................hint of the question was  "By fiddler"  Can anyone resolve my query , how to solve it???????????

EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
3 answers
297 views
Hi All,
I am trying to record an application using fiddler 2, during recording its not even loading login page.
When checked in Fiddler logs and Inspector we see below message
"
fiddler.network.https> HTTPS handshake to "Application" (for #2) failed. System.IO.IOException Received an unexpected EOF or 0 bytes from the transport stream.
"
This is happening when "Decrypt HTTPS traffic" is checked, when unchecked, application is working fine.
We tried by enabling/disabling other security options(SSL 3.0, TLS 1.0, 1.1, 1.2) but failed.

Please note, we are able to record the same application using fiddler 4 but as per recommendations we have to use fiddler 2.

Please help.

Thanks in Advance,
EricLaw
Top achievements
Rank 1
 answered on 31 Jan 2016
Narrow your results
Selected tags
Tags
+? more
Top users last month
Cynthia
Top achievements
Rank 1
Iron
Toby
Top achievements
Rank 3
Iron
Iron
Iron
Danielle
Top achievements
Rank 1
Iron
Iron
Joel
Top achievements
Rank 3
Bronze
Bronze
Iron
yw
Top achievements
Rank 2
Iron
Iron
Iron
Want to show your ninja superpower to fellow developers?
Top users last month
Cynthia
Top achievements
Rank 1
Iron
Toby
Top achievements
Rank 3
Iron
Iron
Iron
Danielle
Top achievements
Rank 1
Iron
Iron
Joel
Top achievements
Rank 3
Bronze
Bronze
Iron
yw
Top achievements
Rank 2
Iron
Iron
Iron
Want to show your ninja superpower to fellow developers?
Want to show your ninja superpower to fellow developers?