Hello Eric ,

Thanks for bring us Fiddler. It's pretty useful.

Here is the problem:

 if (oSession.HostnameIs("www.test.com"))  { 
            oSession.utilDecodeResponse();
             if (oSession.utilFindInResponse("cacheKey",false) > -1){ 
                    var oBody = oSession.GetResponseBodyAsString (); 
                    var regex =/value=\"(.*)\" id=\"cacheKey/i;
                    if(oBody.match(regex)){
                        MessageBox.Show("AAAA" );
                        var cachekey = RegExp.$1;            // <--------------------   Error Line
                      }

Every time i save it, fiddler report :

Object doesn't support this property or method.

I try many times but the problem is still here.

Could you help me?  thanks anyway!


        

Hi,

I have a .net web application and deployed on my localhost IIS. And my .net web application make queries to server.
 How can I use fiddler to capture the HTTP traffic made between my IIS .net and the outside server?

I find this link:

https://mgrowan.wordpress.com/2015/02/19/capture-iis-network-traffic-in-fiddler/

I don't see  web.config in my project. 

Hi,
I'm using NTLM authentication in my site .
I'm trying to find out how can I extract the User Name sent to the server by the client.
After reading MS article  (https://msdn.microsoft.com/en-us/library/windows/desktop/aa378749%28v=vs.85%29.aspx) I thought that the User Name is sent from the client after the first 401 challenge the server sends. (which means the scond request the client initiates)
However , when looking in Fiddler I have realized that the second request from the client (after the first 401) did not include the User Name
Only the third request (ending with 200 status code) included the User Name (as plain Text).
Can you please explain ?
_________________________________________________
First Request ended with 401 ;
No Proxy-Authorization Header is present.

No Authorization Header is present.
_________________________________________________



_________________________________________________
Second request ended with 401 (challenge from server)

No Proxy-Authorization Header is present.

Authorization Header is present: Negotiate
4E 54 4C 4D 53 53 50 00 01 00 00 00 97 82 08 E2  NTLMSSP.....—‚.â
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
06 02 F0 23 00 00 00 0F                          ..ð#....        


-[NTLM Type1: Negotiation]------------------------------
Provider: NTLMSSP
Type: 1
OS Version: 6.2:9200
Flags: 0xe2088297
Unicode supported in security buffer.
OEM strings supported in security buffer.
Request server's authentication realm included in Type2 reply.
Sign (integrity)
NTLM authentication.
Negotiate Always Sign.
Negotiate NTLM2 Key.
Supports 56-bit encryption.
Supports 128-bit encryption.
Client will provide master key in Type 3 Session Key field.
Domain_Offset: 0; Domain_Length: 0; Domain_Length2: 0
Host_Offset: 0; Host_Length: 0; Host_Length2: 0
Host: 
Domain: 
------------------------------------



_________________________________________________
third request ended with 200

No Proxy-Authorization Header is present.

Authorization Header is present: Negotiate
4E 54 4C 4D 53 53 50 00 03 00 00 00 18 00 18 00  NTLMSSP.........
80 00 00 00 18 00 18 00 98 00 00 00 06 00 06 00  €.......˜.......
58 00 00 00 0C 00 0C 00 5E 00 00 00 16 00 16 00  X.......^.......
6A 00 00 00 10 00 10 00 B0 00 00 00 15 82 88 E2  j.......°....‚ˆâ
06 02 F0 23 00 00 00 0F 6F 4B 84 5D 4A 6A 67 C5  ..ð#....oK„]JjgÅ
49 E7 9B E6 ED D5 B9 9F 47 00 45 00 52 00 73 00  Iç›æíÕ¹ŸG.E.R.s.
6B 00 61 00 72 00 6E 00 69 00 53 00 4B 00 41 00  k.a.r.n.i.S.K.A.
52 00 4E 00 49 00 2D 00 4D 00 4F 00 42 00 4C 00  R.N.I.-.M.O.B.L.
26 FB C4 DC FC BE 0B 6A 00 00 00 00 00 00 00 00  &ûÄÜü¾.j........
00 00 00 00 00 00 00 00 64 0B 2C 82 FA 33 05 17  ........d.,‚ú3..
CF 6D 43 44 06 C0 F0 50 5D EA E3 E5 34 69 38 B4  ÏmCD.ÀðP]êãå4i8´
E8 F1 E0 A5 46 72 6F CF D3 36 4A 25 BB 0D DF 16  èñà¥FroÏÓ6J%».ß.


-[NTLM Type3: Authentication]------------------------------
Provider: NTLMSSP
Type: 3
OS Version: 6.2:9200
Flags: 0xe2888215
Unicode supported in security buffer.
Request server's authentication realm included in Type2 reply.
Sign (integrity)
NTLM authentication.
Negotiate Always Sign.
Negotiate NTLM2 Key.
Target Information block provided for use in calculation of the NTLMv2 response.
Supports 56-bit encryption.
Supports 128-bit encryption.
Client will provide master key in Type 3 Session Key field.
lmresp_Offset: 128; lmresp_Length: 24; lmresp_Length2: 24
ntresp_Offset: 152; ntresp_Length: 24; ntresp_Length2: 24
Domain_Offset: 88; Domain_Length: 6; Domain_Length2: 6
User_Offset: 94; User_Length: 12; User_Length2: 12
Host_Offset: 106; Host_Length: 22; Host_Length2: 22
msg_len: 176
Domain: GER
User: skarni
Host: SKARNI-MOBL
lm_resp: 26 FB C4 DC FC BE 0B 6A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
nt_resp: 64 0B 2C 82 FA 33 05 17 CF 6D 43 44 06 C0 F0 50 5D EA E3 E5 34 69 38 B4
------------------------------------

_________________________________________________

Is there a Telerik product, or any a product by another company, that can hook into the GPU, intercept images, and replace them on-the-fly?

Hello,
I have a proxy with PAC file via DHCP WPAD. Fiddler (v4.4.9.9 running on Windows 8.1) works well, except for a specific URL, "http://my.company.com/Tests/123456789ABCDEF.txt".
This URL is specified in the PAC file, which is 

Any idea what could cause it?

Thanks!

PS: original URLs modified but maintained characteristics.

Hi there, 

Fiddler is capturing calls just fine but when using the WebForms Inspector the query string is not populating the window. It is just a blank screen. 
Just installed the latest Fiddler for .Net4 for windows v 4.4.9.9. 

Is there a setting I am missing? 

Thank you. 

Re breakpoints; I set one up to target all css files (i.e. bpu .css). How do I switch off this command? When I filter another site, the css is continually targeted.

Thanks.

I want to send the same 10 responses to a server, but the problem is that the link changes every time. (A string is added to the end of the first part of the link, like, www.example.com/a5d57sd0fsdf-sds9sd, www.example.com/h3487-fsdfsds-sd) I need to edit the links in fiddler every time to be able to send the responses. Is there anyway how i can make it automatically change the link and send the responses? If no, is there any other solution to this? Thank you.

When I set my Android Nexus phone's proxy settings to point to Fiddler I can see all the traffic from my web browsers except for Dolphin for some reason.  When I try to look at traffic from Dolphin all I see are requests for favicons but nothing else.

hi

It seems that Fiddler generates on-the-fly certificates (when intercepting HTTPS traffic) but only sets the 'serverAuth' value for the ExtendedKeyUse attribute.

I am having some troubles getting the cert to be accepted by a Java App that is connecting to a backend system and I am using Fiddler to debug the HTPPS traffic.  My java app complains :

2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###http-bio-8083-exec-5, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: Extended key usage does not permit use for TLS client authentication |

If I look at SSL debug generated in my app I see this:

2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###*** Certificate chain |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###chain [0] = [ |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###[ |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  Version: V3 |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  Subject: CN=<target server>, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  Signature Algorithm: SHA256withRSA, OID = 1.2.840.113549.1.1.11 |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  Key:  Sun RSA public key, 1024 bits |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  modulus: ...
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  public exponent: 65537 |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  Validity: [From: Wed Feb 26 00:00:00 UTC 2014, |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###               To: Tue Feb 25 23:59:59 UTC 2025] |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  Issuer: CN=DO_NOT_TRUST_FiddlerRoot, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  SerialNumber: [   -6c9fcd89 21ec5b61 b6673282 907882a4] |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###Certificate Extensions: 3 |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###[1]: ObjectId: 2.5.29.1 Criticality=false |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###Extension unknown: DER encoded OCTET string = |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###0000: 04 81 B8 30 81 B5 80 10   39 6D 9F 06 75 DA BB F7  ...0....9m..u... |
...
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5### |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###[2]: ObjectId: 2.5.29.19 Criticality=true |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###BasicConstraints:[ |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  CA:false |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  PathLen: undefined |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###] |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###[3]: ObjectId: 2.5.29.37 Criticality=false |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###ExtendedKeyUsages [ |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  serverAuth |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###] |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###] |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  Algorithm: [SHA256withRSA] |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###  Signature: |
...
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5### |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###] |
2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###*** |

Then the app complains:

2015 03 03 11:50:07#+00#INFO#System.out##anonymous#http-bio-8083-exec-5###http-bio-8083-exec-5, handling exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: Extended key usage does not permit use for TLS client authentication |


Is it possible to get the ClientAuth extended use attribute set also?

-chris