Hi: I have a Fiddler capture file.

The client sends requests to the server  twice with exactly the same URL.

The first time, the server responds  X, while  the 2nd time the server responds Y.

Since the URLs  are exactly the same, so how could I setup a AutoResponder rule to mimic this behaviour?

Is there something like hit count to indicate whether this is the 1st visit or 2nd visit?

Many thanks for the help

I've be trying to capture traffic from an website but Fiddler doesn't show any requests/responses. On the same website it shows only the part before login, but as soon as I try to capture inside the webapp it won't work.

Btw, I tried to do the same task with Firebug and it worked, but I still want to get Fiddler working

The "Hide if URL contains" option works if I enter a single keyword. However if I enter multiple keywords separated by comma or semicolon, it doesn't work. Do I have to use a script?

How do I use multiple keywords in the "Hide if URL contains" field? I separated them with  comma and semicolon and it didn't work. Do I have to use a script?

Case 1 involves TLS + client certificate authentication with both client and server using secp384 based EC certificates. In this case, when monitoring traffic via fiddler, the tunneling/handshaking as well as encrypted traffic is completely missing from fiddler (as if nothing is happening). We know there is real traffic by monitoring both client and server individually.

Case 2 involves the same client process, same server process, same server certificate but client certificate authentication is disabled. In this case all the traffic as well as the initial handshake is captured within Fiddler.

Is this a known limitation of Fiddler? If yes, how else can I capture the TLS handshake that happens in Case 1? If not, am I missing a setting inside Fiddler? I have a C:\Users\<username>\My Documents\Fiddler2\ClientCertificate.cer certificate setup too (which basically matches the same PFX in the client cert store).

Also, all three (client, server and fiddler) are running on the same machine within the same user (admin) account. The user account's certificate store has the private key of the certificate too.

PS: Originally posted at http://security.stackexchange.com/questions/72916/can-fiddler-decrypt-https-traffic-when-using-elliptic-curves-client-cert-authe/72923#72923 but it's clear it actually belongs here.

Good day,
is it possible to achieve the following using Fiddler: intercept a request via http proxy, and forward the request to the same address, just changing proxy type from http to socks5? This way I want to add socks5 support to some software, which only supports http(s) proxies. Thanks.

Hi Guys, please a have a guest about get https trafic from my tablet.

Well, I'm trying to get traffic to my instagram from my tablet.
but when I login to my account on instagram from my tablet the only thing I see in fiddler is as follows:

Encrypted HTTPS traffic flows through this CONNECT tunnel. HTTPS Decryption is enabled in Fiddler, so decrypted sessions running in this tunnel will be shown in the Web Sessions list.

Secure Protocol: Tls
Cipher: Aes128 128bits
Hash Algorithm: Sha1 160bits
Key Exchange: ECDHE_RSA (0xae06) 256bits

== Server Certificate ==========
[Subject]
  CN=*.instagram.com, O=Instagram LLC, L=Menlo Park, S=CA, C=US

[Issuer]
  CN=DigiCert High Assurance CA-3, OU=www.digicert.com, O=DigiCert Inc, C=US

[Serial Number]
  083A41637D0A7B6BCDDCD978CB5495D0

[Not Before]
  28/02/2014 21:00:00

[Not After]
  30/04/2015 09:00:00

[Thumbprint]
  50920CCB549CE4D2EE4F5FBCDEBADC68887319E0

Why can not I see traffic ?

Thanks
Alexandre
Brazil

Hi,

Fiddler is not able to launch some JSP pages if we Query String (GET parameters or URL Parameters) length is more, same JSP opens fine if we cut some parameters, is there a restriction in Fiddler which is blocking URL's if URL parameters length is more? How to rectify this error?

Thanks in advance.
Mahesh

When I set fiddler up to "Decrypt HTTPS" in the tools options, it seems that the browser (IE, Firefox, Chrome) no longer does any CSS formatting on the page.  If I choose not to decrypt, page returns to normal.  It seems that the browser won't render "insecure" content while this is running.  How can I get both HTTP and HTTPS traffic at the same time and have the page look like it normally does?

I am visiting a website with a friendly url (http://www.gidedental.com/Symposium)
However I would like to know what page the browser calls under this url.
E.g: www.gidedental.com/Symposium/filex.aspx

Is there a way to know that through Fiddler ?

Neto