Hi There,

I have a question, perhaps someone can help me.

I got a software, that uses fiddler to capture network traffic and decrypt the HTTPS. The only 2 files are there: fiddlercore4.dll and fiddlercore4.xml.

The configuration has been made in such a way to use makecert.exe, however, the fiddler itself can use certenroll. what specifically should i change in the XML file to force it use certenroll instead of makecert? the windows 7 has issues with SHA256, and the generation of certificate fails all the time. However, if i use GUI version of fiddler, i could easily change between Makecert and Certenroll. Certenroll would work perfectly in such case.

Thank you.

The keys "I" and "O" can be used to indent the session. This is useful if you want to show parent/child requests.

I want to capture and inspect API traffic. I've already set up a Fiddler reverse proxy that decrypts HTTPS. What is the best way to deal with the many client side devices? I'll commonly generate traffic from Android, iOS and PC browsers but also dedicated devices such as Amazon Echo and IoT.

Here's my current thinking for a simple automated approach. I'll set up a network with two WiFi APs named "DIRECT" (normal) and "PROXY" (Fiddler reverse proxy). For Android and iOS devices, I can create "DIRECT" and "PROXY" settings. Done.

For PC browsers, how can I configure them so when I'm on "PROXY", I use proxy settings but when on any other AP, I DIRECT without tripping over any proxy existing settings? Should I use NetSetMan to change proxy settings based on network?

What about dedicated devices that may not have a proxy setting? Should I deal with them by creating some kind of "PROXY" router settings?

Is there some universal client side solution available such as described by Lawrence in http://www.telerik.com/forums/fiddlercore-as-transparent-proxy

Hi,

 I keep getting this error message when starting Fiddler on Windows 7.

Fiddler appears to be running on this user account. Maybe in a terminal services session.

If you run two copies of fiddler at the same time, your settings may be corrupted.

Start Fiddler anyway? ( Yes/No buttons)

I was using a previous version, sorry didnt record which one but I tend to keep it faily up to date. I started Fiddler2Script Editor ( by mistake as it happens ) and nothing started. I then attempted to run Fiddler and nothing started. I assumed my windows was in a mess and rebooted. However the problem persists and no happens on every attemt to start Fiddler. I upgraded to 2.5.1.2 and still the problem persists.

Can anyone point me at a solution, or tell me what you need to know to assist in finding a solution please.

Windows Event Viewer does not show any obvious issues.

In .Net web-service hosting the IIS and used for the desktop  application while login the app the person track and see all the input calls to service and response back into app.

Then analysis the issue and go through google and got solutions. to make HTTPS or ssl in webservice url.also encrypt and decrypt also doing both client and server side.

after that i check with fiddler they also tracking the web services call and responses .even they can able to break and run the app using this.

I was tired and make the protect the webservice calls. and unable to achive the what i need.

I also attached screenshot below for your reference.

Guys plz help me...if any otherway to protect the service calls in Fiddler. 

Hi

When i press f11 to stop at a process, how do i step then to go into each process after that, step by step?

Gary

As I await the client to be updated to do a POST instead of a GET, I would like to use fiddler to change it on the fly for me.

I have code in OnBeforeRequest that makes changes in parameter names, but I still need to convert the call from a GET to a POST and I cannot find any methods that will switch it for me.

 How can I switch a GET to a POST in Fiddler Script?

Hello. I'm trying to get FidderCap running on a laptop for one of our users, and when trying to open the program it states "FidderCap is already running on this machine". I've uninstalled and reinstalled, and have done reboots, but the program never launches. Has anyone else experienced this, and if so, is there a way around it?

 Machine is running Win7 x64. I can install it on other machines with the same build and it works just fine.

Every time I start Fiddler I get the message. See in attachments.

I have a reverse proxy configured

[client machine sending rest api requests] <--https--> [[fiddler listening on port:443] <-->  [web server]]

I'm trying to capture and modify web api requests that are sent by the client machine to an https web server(sqa2.ourdomain.com).  This machine can't be configured to go through a proxy which is why I need the reverse proxy solution.  I configured fiddler on the server :

 1. as documented else where, after rebding the website to port 444, I've put the following in the onbeforerequest handler

        if (oSession.HostnameIs("sqa2.ourdomain.com") &&
                (oSession.oRequest.pipeClient.LocalPort == 443)) 
        {
            
            oSession.host = "sqa2.ourdomain.com:444";
        }

 2. I've run !listen 443 sqa2.ourdomain.com

I've been able to successfully capture the outgoing http api request and response, but the response gives

{
  "Status": {
    "code": "770",
    "message": "Authorization error - Invalid signature"
  }
}

What is causing this response?