Telerik Forums
Fiddler Forum
2 answers
194 views

English 不懂得
FiddlerCore4 证书无效 如何解决
       if (!Fiddler.CertMaker.rootCertExists())
       {
           if (!Fiddler.CertMaker.createRootCert())
           {
               throw new Exception("Unable to create cert for FiddlerCore.");
           }
       }
       if (!Fiddler.CertMaker.rootCertIsTrusted())
       {
           if (!Fiddler.CertMaker.trustRootCert())
           {
               throw new Exception("Unable to install FiddlerCore's cert.");
           }
       }

 

 Invalid certificate

 

Eric Lawrence
Telerik team
 answered on 05 Jun 2015
1 answer
2.1K+ views

Hi guys:

I am trying to capture the javascript files that used an aspx webpage. 

By default, I only get the images, css and html.

 What could I try to download the js files.

 If I save the complete rendered page using IE, the javascript files are downloaded.

 Thanks in advanced

 David

Eric Lawrence
Telerik team
 answered on 05 Jun 2015
3 answers
660 views

 Hello,

 I couldn't find a security contact at telerik so opening a new threat here. Sorry if it's already discussed or resolved.

As I bloged at http://blog.jpcert.or.jp/2015/05/fiddler-cores-insecure-default-flag-may-lead-to-open-proxy-issue.html

The the expected behaviour of FiddlerCoreStartupFlags.Default seems to be different from what it should be because AllowRemoteClients is false under the default configuration of the stand alone Fiddler application. Because setting the flag to 'Default' is recommended in the developer manual, many developer could use the flag without understanding the possibility of 'Open Proxy' issue.

It would be nice if FiddlerCoreStartupFlags.Default is changed so that AllowRemoteClients is toggled off by default.

Thanks,

Masaki

Eric Lawrence
Telerik team
 answered on 04 Jun 2015
1 answer
468 views

Hello, 

I'm looking to use Fiddler in an unattended system and need to configure AutosSve to start automatically. Looking at the default options there's no ability to do this through the GUI. I assume this is something that will need to be configured through a JS script. Unfortunately I've not been able to find any documentation that outlines the correct Methods/Calls to use for creating the script. Can anyone help me with finding the resources to accomplish the autosave on by default. 

 

Thanks

Eric Lawrence
Telerik team
 answered on 02 Jun 2015
1 answer
311 views

I can see traffic from Chrome and Firefox just fine, but I get nothing from IE.

It was previously working, a month or so ago, on IE10. I've tried re-installing Fiddler and IE10 (not at the same time).

It worked while I was on IE8 but I don't want to use IE8.

It didn't work on IE9, 10, or 11 today.

I've tried starting Fiddler as admin / elevated.

When I load the URI http://ipv4.fiddler:8888/ in firefox I see "Fiddler Echo Service..."

When I load the same URI in IE I get "this page can not be displayed..."

I can get it to work briefly by manually setting winINET proxy to 127.0.0.1:8888, (and when this setting is in place http://ipv4.fiddler:8888/ works too) but if I touch the "capture" button in Fiddler at all (as if to enable or disable, either way) it stops capturing and doesn't restart until I manually re-enter the winINET proxy setting.

This would be semi-OK but I need to chain to another upstream local proxy and as soon as I enable this Fiddler stops capturing again. I should note I use the same setup with the two proxy apps on another machine with no problem.

 I'm guessing *something* installed on this machine is preventing Fiddler from editing my winINET proxy setting, but I don't know what it could be. AFAIK I have all the same software on the other machine which is working nicely. Can you maybe suggest how I could go about tracking down the offending bit of software, if there is one?

thanks,

Jeff

Eric Lawrence
Telerik team
 answered on 29 May 2015
1 answer
629 views

Hello, wondering this post is appropriate here. if its not please feel free to delete it.

I was using fiddler to find out the HTTP packets sent by Google Chrome. Just wondering if anyone has done this and knows the information inside the cookies that chrome stores? Does anyone know if I could get the device ID that chrome has assigned to my PC?

Thanks a lot!

Eric Lawrence
Telerik team
 answered on 27 May 2015
2 answers
302 views

I am trying to use Fiddler to decrypt and analyze https traffic on my computer, following the instructions here (http://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/DecryptHTTPS).

When I choose "Decrypt HTTPS traffic," Fiddler prompts me to install the root certificate, and I do.  I also export the certificate to install in Firefox.

After installation, Firefox trusts the certificate, but Chrome & Internet Explorer do not trust it, and block all navigation.  When I open the windows certificate manager (certmgr.msc), the Fiddler certificate does not appear in the Trusted Root Authority store, even after I try to manually import it.

 Any tips?

 

Benj     

 

Benj
Top achievements
Rank 1
 answered on 20 May 2015
3 answers
247 views

Hello!

 I am sending REST Get request with Mule ESB 3.6.1 and there is a parameter to the query. However, if I use Fiddler (4.5.1.0) as proxy, the parameter is removed from the request. If I send the same request from Jmeter and use Fiddler as proxy, the parameter is present. If I dont use Fiddler as proxy in Mule, the parameter is still present.

Eric Lawrence
Telerik team
 answered on 20 May 2015
1 answer
140 views

I am writing a Fiddler extension which I would like to sign.  Unfortunately this is not possible because it seems Fiddler itself does not have a strong name, therefore my project cannot reference it.

 Has any thought been given to this?  Are there plans to sign Fiddler?

Eric Lawrence
Telerik team
 answered on 20 May 2015
2 answers
1.6K+ views

Hello,

i really like fiddler and the rich features of it , the only feature that i think is not effecient is the capture traffic option, yes, it does capture the traffic of some programs but not every single program, so for these programs i use httpdebugger which capture traffic from every single program that is using http or https but it's not rich in features as fiddler, so if you could improve the capture traffic and use the same technique the http debugger use (what ever it is) that would be appreciated

 examples  of the programs the fiddler doesn't capture their traffic

1 -   http://sentinel.securibox.net/sentry.php

 2 - http://www.eliteproxyswitcher.com/

 

MOHAMMAD
Top achievements
Rank 1
 answered on 19 May 2015
Narrow your results
Selected tags
Tags
+? more
Top users last month
Simon
Top achievements
Rank 2
Iron
Iron
Iron
Bob
Top achievements
Rank 3
Iron
Iron
Veteran
Marco
Top achievements
Rank 4
Iron
Iron
Iron
Grant
Top achievements
Rank 3
Iron
Iron
Iron
Kao Hung
Top achievements
Rank 1
Iron
Want to show your ninja superpower to fellow developers?
Top users last month
Simon
Top achievements
Rank 2
Iron
Iron
Iron
Bob
Top achievements
Rank 3
Iron
Iron
Veteran
Marco
Top achievements
Rank 4
Iron
Iron
Iron
Grant
Top achievements
Rank 3
Iron
Iron
Iron
Kao Hung
Top achievements
Rank 1
Iron
Want to show your ninja superpower to fellow developers?
Want to show your ninja superpower to fellow developers?