Hello,

In FiddlerScript I am setting x-no-decrypt, and I want to kill the connection after a single request has been sent and its response received.  The app that I'm proxying traffic for will then reconnect to re-establish its connection, and, this time round, I don't want to set x-no-decrypt.

How do I do this?

The background is that I'm security auditing an app where the code looks like this:

// connect to HTTPS server
// GET /hello
// check the HTTPS certificate of the server and if it isn't this hard-coded one then throw an exception
// POST /login?username=foo&password=bar

I suspect, and want to demonstrably prove, that the networking library that the app is using will try to be helpful and reconnect the HTTPS connection if it is dropped after the response from the GET is successfully received and before the POST is made.  This essentially means that the server certificate check against a hard-coded one is useless, and I want to prove this using Fiddler.

Thanks!

David

I have been using Fiddler to tract redirects/404 and other HTTP
status codes by inputting URL to the composer.

It is very manual and repetitive task when checking multiple
URLs, so I wonder does anybody know how to perform bulk URL check? Is there a
way to import/export URL lists?

Thanks!
Regards,
Galina

I can use the following info in the 'Parsed' tab with success, however it fails using the 'Raw' tab.
[Error:]
    sRequest did not represent a valid HTTP request
    Parameter name: sRequest

[Info used in 'Raw' tab:]
GET http://localhost:49589/api/values HTTP/1.1
User-Agent: Fiddler
Host: localhost:49589
Authorization: Bearer zurCykiDBNfxe_0lARMLJ1Pv1-nA7uig-wQ7rKr3EM5Pj6Wlw9HGS4r23PaKBrhWj5tDcIjt-T44rfGUJbzN_isKdjvdVHDCnpa4vuLf-E_WaMMKXObBGG6wz6CoQuph7cwzeKARIczua1dEdUpbBchmX33vKDoINCYJj2125DG0F9KdVp8Iv0XQkbXYLFBT4IU7YJT9grXfMBu9KWQc_utSlSd8hPbq7yxlu6JAI6y8DVL0b6m7k1QhUK7WB5aWaHJGUp6xy-hAmPydiUrsb1bQROaC4ZWJXpB8IDjF2WxOcPaMHDjBwezHVrE2VbLkNaV37MndwhgweCMFEzo6fmNhCHrWfS6bqtEB_ApLwvTm7ygovvDJVHvqC8tHeNFjbgLnqStZRQ8WSSLmfBbPjNOAOCNqp9RqrXkEQ6y1WwsqdqNG4thme1ZNuzhCDZuuew3tq2eAgba25iqZB4fptGXmZANKtC4yUEybqrpNT9A

After successfully having written some script-code for custom columns and a custom tab, I have two questions:
1. Is there a way to format colums right-aligned, or, even better: comma-aligned?
Example code:

2. How can I get the monospaced font in my custom tab (and get it back in the "Statistics" tab)?
After opening Fiddler the font in my custom tab is a proportional font. When I save my CustomRules.js the font changes to a monospaced font. As long as I don't know better I need the monospaced font for formatting the text I want to show in the tab. Maybe it has to do with my "Statistics" tab, where I have no monospaced font anymore (and therefore no properly aligned colums in the text). It would be nice to have the monospaced font immediately after the program start.

Feedback/wishlist:
- Timestamp columns and "Overall_Elapsed" don't use my local decimal separator (comma in Germany). The same in the "Statistics" tab. (In the "Statistics" tab under "Estimated Worldwide Performance" the values are shown with commas.) Copying columns and inserting in Excel requires properly formatted text.
- "Body" column ist formatted right-aligned (nice) and with (my local) group separator (nice), but the "Request" column ist left-aligned with no group separator
- During writing a function I usually write something, press ctrl-s and have a look at the result, change the function, press ctrl-s and so on. It would be nice, if the tab in front (my custom tab I write the function for) could stay in front to see the result immediately without the need for another mouse click.

Hello,

I created an extension and my last problem is that I cannot differentiate between a new session and a Session which the user clicks on.
When I click on a Session, my extension receives an AutoTamper event, and there I would like to differentiate if it was a new session, or just the user clicked on this. I only want my extension to react to new sessions.

Is it possible to check if its a new session easier than creating arrays containing all the sessions and checking them if they were already sent once? 

Thanks,
Zsombor Fuszenecker

I'm working on a web application that makes calls to a web service on another server. When I'm debugging my application in Visual Studio, I'd like to be able to see the sessions to the remote service initiated by the application as it runs in IIS Express.

Is this possible?

In this case, Let's take Google Search as example:

if (oSession.uriContains("&q="))  {
var str = oSession.fullUrl;
var sAppend = "test1+test2+test3";
if (!oSession.uriContains(sAppend))
{
oSession.fullUrl = str.replace( "&q=","&q="+sAppend);
}
}

For those who are confused, It says, If &q= is present in the URI, replace/append &q= with &q=test1+test2+test3

Problem: It appends test1+test2+test3 instantly, when it sees &q= in the URL.

Basically, how do I make it wait until I click the submit/search button

Thank you.

Hello!

What is the reason behind prohibition of the running secondary (tertiary, and so on) instance of Fiddler?
I need to monitor 3 copies of application -- PC app, WP8 app, and OSX app (FiddlerMono is really sucks and hangs, unfortunately).
It is quite handy to use several copies of Fiddler to avoid the hell of sessions mixing.
The solution I'm using now -- "run as another user". But it's not quite handy if I run more than 2 copies at once.

Could you please add an option like "-secondary:port" that will skip a running application check and start Fiddler with different port (which could be indicated at window caption) ?

Will be glad to any reply!

Hi,

I am new to Fiddler and web development in general.  I am trying to get Fiddler to work with Firefox but I can not find this Fiddlerhook extension that is talked about

Good day Fiddler Team.

We have a unique environment and make use of your tool to determine where bottlenecks occur on the fly.
We use PSTools to connect to the machines, install and start the program silently.

Is there a way to start fiddler specifying a ".saz" file location to save when the stop command have been given?

Can you perhaps build this functionality into fiddler or does it exist already?

Kind regards