I want to make a c# console application for intercepting the https connection to a server and return a local xml file as responcemy code is Fiddler.FiddlerApplication.BeforeRequest += delegate(Fiddler.Session oS)
{
if (oS.url.Contains("test.com"))
{
oS.bBufferResponse = true;
oS.utilCreateResponseAndBypassServer();
}
};

Fiddler.FiddlerApplication.BeforeResponse += delegate(Fiddler.Session oS)
{
oS.utilDecodeResponse();
oS.LoadResponseFromFile("file.xml");
};
But it doesn't seem to work, I get connection error. Any ideas?

When there are plenty of requests to the fiddlercore, and i change fullurl to a slow https address, the follow-up requests will block,and BeforeRequest not call.
other HttpClient.SendAsync throw TaskCancelException too.

 I use ilasm open fiddlercore4.dll , find a Socket.Listen(50) in Proxy.Start method, Is the cause of the problem? I export to fiddlercore4.il and change 50 to 99999, but still problem, please help me , thank you .

Can I use the HtmlAgilityPack.dll by treating it as a library as mentioned in the link below ?

     http://docs.telerik.com/fiddler/Extend-Fiddler/UseDotNetInFiddlerScript

I tried following the steps in the link above, but was unable to access the library file.

Any help is appreciated.

I have been using Fiddler on my PC while sending traffic to it from my phone (Android 4.4.4). I can see all non-SSL and SSL traffic from our website within Fiddler, with no issues.
When I load our mobile app, however (which is partly-native and partly a wrapper for some parts of our mobile site), many (most) non-SSL pages are causing 400's (only through Fiddler). 

Fiddler Log show these type of errors when it happens:
15:36:11:3018 [Fiddler] No HTTPS request was received from (chrome:6192) new client socket, port 58271.

In the raw requests for these it shows a simple GET to our website http://www.foo.com/ but the pages I am trying to visit are not the homepage, so I am not sure how it's munging up the requests. The actual homepage is http://m.foo.com/m/e/digital/index.jsp and those are loading fine.

Auto-Responder is disabled and I am doing no other re-writing that I can see, with the requests.
I have been able to reproduce this on multiple networks.
I cannot recreate the issue in other proxy tools.

Let me know if there is any more information I can provide which may help me get assistance

Hi,

I have a web service which has a web method and expects one string parameter [eg. Method(string str)]  and this parameter is expecting to get a xml string value.
As long as I send request fidder to get the response from service on my local system eg. service running via VS2008 it works fine, However when i deploy the service in other server(TEST) fidder not able to send the request to webservice and every time end up with the below result.

Response I get after hitting the url with post method

1C
Invalid Http Request Header

0

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache
Transfer-Encoding: chunked

1C
Invalid Http Request Header

0

Request body

<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/">
  <soap:Body>
    <Share_Inventory xmlns="http://tempuri.org/">
      <argInputXml>
<![CDATA[<samsung> <validate> <connect> <userid>samsungCE</userid> <password>qweasdzxc</password> </connect> </validate> <inventory> <item> <MRNAME>Reliance</MRNAME> <MDATE>20141009</MDATE> <SITECODE>Y339</SITECODE> <ARTICLEDESC>Samsung Grand2 Sview Flipcover Wht</ARTICLEDESC> <STOCK>13</STOCK> <SERIALNO /> <STORENAME>RRL Digital Whitefield Bangalo</STORENAME> <EAN>8806085955721</EAN> <ARTICLECODE>NA</ARTICLECODE> <FAMILY>LIFESTYLE</FAMILY> <STATUS>NA</STATUS> <ARTICLETYPE>NA</ARTICLETYPE> <WWCODE>NA</WWCODE> </item> <item> <MRNAME>Reliance</MRNAME> <MDATE>20130102</MDATE> <SITECODE>235</SITECODE> <ARTICLEDESC>PANEL</ARTICLEDESC> <STOCK>1</STOCK> <SERIALNO>5F5F5W5W5</SERIALNO> <STORENAME>AAA</STORENAME> <EAN>AAA</EAN> <ARTICLECODE>AAA</ARTICLECODE> <FAMILY>AAA</FAMILY> <STATUS>SS</STATUS> <ARTICLETYPE>AAA</ARTICLETYPE> <WWCODE>AAAA</WWCODE> </item> </inventory></samsung>]]>
</argInputXml>
    </Share_Inventory>
  </soap:Body>
</soap:Envelope>

Any help would be really appreciable, however if i send above request with SoapUI soft works fine.


Regards
Deepak Bisht

Is there any way we can make fiddler return a specific raw response to a given request.  I am trying to recreate certain use cases by forcing it to return a given response without making the actual real request.
Thanks

I've installed Fiddler on my Windows 7 machine and I'm trying to execute the following PHP CURL routine so that I can see the POST request body in Fiddler:


Whenever I visit the page, however, all I see in Fiddler is a GET request--not a POST request.

What do I need to do / configure in Fiddler to see the POST requests? I don't have the HTTPS Decryption enabled but that's because I shouldn't need to enable it for basic HTTP debugging (I'm not working with any SSL projects at the moment).

Whenever I attempt to decrypt HTTPS traffic with Fiddler (something that once upon a time worked for me) I get an error very similar to the following:

Creation of the interception certificate failed.

makecert.exe returned -1.

Results from C:\Program Files (x86)\Fiddler2\MakeCert.exe -pe -ss my -n "CN=manage.windowsazure.com, O=DO_NOT_TRUST, OU=Created by http://www.fiddler2.com" -sky exchange -in DO_NOT_TRUST_FiddlerRoot -is my -eku 1.3.6.1.5.5.7.3.1 -cy end -a sha1 -m 132 -b 06/08/2013

Error: Fail to acquire a security provider from the issuer's certificate
Failed
--------------------------------------------------------

I have already attempted the repair steps documented here to no avail: http://stackoverflow.com/questions/5519418/fiddler2-unable-to-generate-certificate

if ( (oSession.host=="203.104.209.55") && (oSession.PathAndQuery.indexOf("/kcsapi/api_port/port")>-1) ){
        oSession["ui-bold"]="true";
        oSession["x-breakresponse"]="true";
        oSession.utilSetResponseBody("");
}

Above is what is have in OnBeforeResponse function.

However when I request this url,
1. the session won't be paused
2. although it shows in fiddler inspection that the response body is blank, I can still view the response body in my browser
3. the ui-bold works :(

If I enable the automatic breakpoint (alt+F11), and then continue the process. Both fiddler and my browser shows no response now.

Hello Eric, i've been racking my brains for the last few days figuring out why i cant sniff my twitter android app traffic anymore!



Basically what worked before was that i had simply installed fiddler proxy on my PC, exported the root certificate (and added it to my android devices CA storage), then i installed cydia's mobile substrate and Android-SSL-TrustKiller because apparently the twitter apk uses certificate pinning that needs to be bypassed in order to properly MitM the app. I set my android wifi proxy settings to the same ip:port as the machine that fiddler is listening on.



Unfortunately this does not work anymore and im left unable to properly read twitters app traffic, whereas googleplay, facebook, instagram, etc etc all work fine. It had worked fine until a few days ago. I hadn't updated my twitter app either so im just not sure how it could have broke itself.



I tried proxydroid (which uses iptables i believe), and fiddler showed attempts at connecting to one of twitters ip, but it never goes through (i believe this is an issue with the IP not resolving to the host-name correctly, which causes certificate name mismatch errors)

With standard wifi proxy tuned to fiddler, i dont see ANY requests.  With proxydroid, i see this http://gyazo.com/6792f884e1f88453a8cacb1632d0b3d5
(tones of CONNECTS and cert mismatches, despite having imported fiddlerroot into CA storage.


I'm incredibly vexed...i need someone who can help me properly diagnose and fix this issue.



If it helps, im on a SGS3 android version 4.1.2 (I even tried genymotionemulator, yielding the same results).