The "Hide if URL contains" option works if I enter a single keyword. However if I enter multiple keywords separated by comma or semicolon, it doesn't work. Do I have to use a script?

How do I use multiple keywords in the "Hide if URL contains" field? I separated them with  comma and semicolon and it didn't work. Do I have to use a script?

Case 1 involves TLS + client certificate authentication with both client and server using secp384 based EC certificates. In this case, when monitoring traffic via fiddler, the tunneling/handshaking as well as encrypted traffic is completely missing from fiddler (as if nothing is happening). We know there is real traffic by monitoring both client and server individually.

Case 2 involves the same client process, same server process, same server certificate but client certificate authentication is disabled. In this case all the traffic as well as the initial handshake is captured within Fiddler.

Is this a known limitation of Fiddler? If yes, how else can I capture the TLS handshake that happens in Case 1? If not, am I missing a setting inside Fiddler? I have a C:\Users\<username>\My Documents\Fiddler2\ClientCertificate.cer certificate setup too (which basically matches the same PFX in the client cert store).

Also, all three (client, server and fiddler) are running on the same machine within the same user (admin) account. The user account's certificate store has the private key of the certificate too.

PS: Originally posted at http://security.stackexchange.com/questions/72916/can-fiddler-decrypt-https-traffic-when-using-elliptic-curves-client-cert-authe/72923#72923 but it's clear it actually belongs here.

Good day,
is it possible to achieve the following using Fiddler: intercept a request via http proxy, and forward the request to the same address, just changing proxy type from http to socks5? This way I want to add socks5 support to some software, which only supports http(s) proxies. Thanks.

Hi Guys, please a have a guest about get https trafic from my tablet.

Well, I'm trying to get traffic to my instagram from my tablet.
but when I login to my account on instagram from my tablet the only thing I see in fiddler is as follows:

Encrypted HTTPS traffic flows through this CONNECT tunnel. HTTPS Decryption is enabled in Fiddler, so decrypted sessions running in this tunnel will be shown in the Web Sessions list.

Secure Protocol: Tls
Cipher: Aes128 128bits
Hash Algorithm: Sha1 160bits
Key Exchange: ECDHE_RSA (0xae06) 256bits

== Server Certificate ==========
[Subject]
  CN=*.instagram.com, O=Instagram LLC, L=Menlo Park, S=CA, C=US

[Issuer]
  CN=DigiCert High Assurance CA-3, OU=www.digicert.com, O=DigiCert Inc, C=US

[Serial Number]
  083A41637D0A7B6BCDDCD978CB5495D0

[Not Before]
  28/02/2014 21:00:00

[Not After]
  30/04/2015 09:00:00

[Thumbprint]
  50920CCB549CE4D2EE4F5FBCDEBADC68887319E0

Why can not I see traffic ?

Thanks
Alexandre
Brazil

Hi,

Fiddler is not able to launch some JSP pages if we Query String (GET parameters or URL Parameters) length is more, same JSP opens fine if we cut some parameters, is there a restriction in Fiddler which is blocking URL's if URL parameters length is more? How to rectify this error?

Thanks in advance.
Mahesh

When I set fiddler up to "Decrypt HTTPS" in the tools options, it seems that the browser (IE, Firefox, Chrome) no longer does any CSS formatting on the page.  If I choose not to decrypt, page returns to normal.  It seems that the browser won't render "insecure" content while this is running.  How can I get both HTTP and HTTPS traffic at the same time and have the page look like it normally does?

I am visiting a website with a friendly url (http://www.gidedental.com/Symposium)
However I would like to know what page the browser calls under this url.
E.g: www.gidedental.com/Symposium/filex.aspx

Is there a way to know that through Fiddler ?

Neto

Hello,

I need to run a java script captured by fiddler again!  How to do this?
the site only offer one time the offer by java script! so i need to test it again!

How to replay a java script again with fiddler?

thanks

Hi
i have followed the guide to run Fiddler as a service and it works OK. However my customrules.js is not being used.
I have added in proxy authentication rules which auto login to my external gateway and this works fine if running in the console. But running as a service Fiddler still works but external gateway authentication happens.

Has anyone used Fiddler as a service alongside a customrules.js file?

thanks

Gus