I wanted to obtain the HTTPS POST URL generated from a "highly obfuscated" Phish in HTML format.  But I had problems.

I exported the Certificate generated by Fiddler Classic, v5.0.20204.45441, and I was surprised to see the Certificate expired on 6/12/'21.  I see that that is is the last released version.

Is there an update to Fiddler Classic that will generate a Trusted Cert that is current and not expired ?

I am working on fiddler core with C#. But FiddlerApplication.Shutdown(); I don't think your command works. FiddlerApplication.Shutdown(); After the application, the internet access of the current computer is turned off. When the fiddler core application is closed, as in the picture I shared, internet access is cut off when the fiddlerapplication.shutdown command is applied.

How can I solve this problem?

For example, we cannot access any websites or internet when the internet is disconnect ;

Note: This problem happens when I close and open the program 3 or 5 times.

Hello,

I have attached the source code of my work. When the program opens, it installs a certificate and asks such questions. I want it to install and pass the fiddler certificate without asking this question. Is it possible?

A "yes, no" screen appears like this while installing the certificate. I want it to install without asking. (Hidden Install Certificate) Is that possible?

Hello,

I have added request by timer custom code.

FiddlerApplication.UI.actCaptureScreenshot(false);

What should be added in this part to Stop Timer using hotkey?

Thanks.

Regards,

Adam

Hello everybody

i have this code in fiddlerScript :

        if(oSession.HostnameIs("example.com")) { 
            oSession.utilDecodeResponse();
            oSession.utilReplaceRegexInResponse('text-align: left; width: 120px;">[^<]*</span>','text-align: left; width: 120px;">xxxxxxxxx</span>');
            oSession.utilReplaceRegexInResponse('text-align: left; width: 145px;">[^<]*</span>','text-align: left; width: 145px;">yyyyyyyy</span>');

---------------------------------------

In the webpage there is more element that will begin like that :    text-align: left; width: 145px;

my question is : how can i replace only the first string that will seen on the webpage , not all  ?!?!

thanks !

Hello, I have some old OAUTH/XAUTH code I am debugging and it uses the old DevDefined library.  The underlying HTTP requests/responses are simply not being picked up by Fiddler.  All other requests and responses on my machine are being picked up and displayed.

Here is an example of some C# code invoking the DevDefined method GetAccessTokenUsingXAuth(), and I know it is running and working, but I can't see the underlying request/response and wonder if some proxy is involved:

        /// <summary>
        /// Create Session
        /// </summary>
        /// <returns>Session, authorized for OAUTH using XAUTH protocol</returns>
        private static IOAuthSession CreateSession()
        {
            var consumerContext = new OAuthConsumerContext
            {
                ConsumerKey = ConsumerKey,
                ConsumerSecret = ConsumerSecret,
                SignatureMethod = SignatureMethod.HmacSha1,
            };

            var session = new OAuthSession(consumerContext, new Uri(BdBaseUrl + XAuthRelativeUrl));

            try
            {
                session.GetAccessTokenUsingXAuth(null, ServiceUser, ServicePassword);
            }
            catch (Exception e)
            {
                if (DumpOAuthInfoOnException)
                {
                    string serializedSession = JsonConvert.SerializeObject(session);
                    string msg =
                        $"Inner Exception on GetAccessTokenUsingXAuth.  Username {ServiceUser}, Password {ServicePassword}, Session: {serializedSession}";
                    throw new Exception(msg, e);
                }
                throw;
            }

            return session;
        }

i need to replace 2 dynamic values from a website ! everytime when i visit website i will see randomize numbers like a clock ! and i need to catch the values to replace with anothers. i attached a PART of the website to see it !

i have tryed this and not work :

  static function OnBeforeResponse(oSession: Session) {
        if (m_Hide304s && oSession.responseCode == 304) {
            oSession["ui-hide"] = "true";
        }
        if(oSession.HostnameIs("example.com"))
        {
            oSession.bBufferResponse = true;
            oSession.utilDecodeResponse();
        
            var pattern = '<SPAN
        id=ValueA class=CSItemLabel
        style="FONT-SIZE: 11px; HEIGHT: 17px; WIDTH: 120px; FONT-WEIGHT: bold; COLOR: green; PADDING-BOTTOM: 2px; TEXT-ALIGN: left; PADDING-TOP: 0px; PADDING-LEFT: 2px; DISPLAY: inline-block; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #efefef\">(?<VAL>.*)</SPAN>';        
                    
            var sNewBody: Match = Regex.Match(oSession.GetResponseBodyAsString(),pattern);
            var valueA = sNewBody.Groups["VAL"].Value;

        
            pattern = '<SPAN id=ValueB
        class=CSItemLabel
        style="FONT-SIZE: 11px; HEIGHT: 17px; WIDTH: 145px; FONT-WEIGHT: bold; PADDING-BOTTOM: 2px; TEXT-ALIGN: left; PADDING-TOP: 0px; PADDING-LEFT: 2px; DISPLAY: inline-block; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #efefef\">(?<VAL>.*)</SPAN>';
            var sNewBody2 : Match = Regex.Match(oSession.GetResponseBodyAsString(),pattern);
            var valueB = sNewBody2.Groups["VAL"].Value;
        
            var strContent = oSession.GetResponseBodyAsString().Replace(valueA,"99.614,99").Replace(valueB,"88.123,88");
        
            oSession.utilSetResponseBody(strContent);
        }
    }

also i tryed this :

if (oSession.HostnameIs("https://example.com) && oSession.url.EndsWith("etc.aspx"))
{   
   oSession.utilDecodeResponse();
   var sBody = oSession.GetResponseBodyAsString();
   sBody = Regex.Replace(sBody, "(<SPAN id=ValueA class=CSItemLabel[^>]+>)[^<]+", "$1 99.614,99");
   sBody = Regex.Replace(sBody, "(<SPAN id=ValueB class=CSItemLabel[^>]+>)[^<]+", "$1 88.123,88");
   oSession.utilSetResponseBody(sBody);
}
 

no success ! please help me somebody !

i attached the files to see it ! thanks in advice !

I tried to create a certificate by this way.

1. Install  "fiddlercertmaker.exe" (get it from http://fiddler2.com/r/?fiddlercertmaker/.)
2. ”prefs set fiddler.certmaker.bc.ee.yearsvalid 1”
3. Options -> HTTPS tab -> "Actions" -> ”Reset All Certificates”
4. Options -> HTTPS tab -> "Actions" -> ”Trust Root Certificates" 

see config.jpg and Option.jpg

However, the term of the certificate is 10 years.”Certificates.jpg”

If my understanding is mistaken, please tell me.

Sometimes when I use fiddler for a while, connection will closed by client when response is large (random for small/medium size).

With browser (Firefox and Chrome), I'll get
SSL_ERROR_BAD_MAC_READ or
SSL_ERROR_RX_RECORD_TOO_LONG

Even in emulator (android), it's the same. Response time is not different from when it's normal.

More info:
- Problem persist even without Fiddler script
- But if I use oSession.Ignore() in Fiddler script, it'll run fine.
- If I close Fiddler, it'll run fine.
- Restart Fiddler not eliminate the problem but restart the computer works.
- If I replay (r) in Fiddler, it has no abort icon in new request
- I try to export .saz the only different is: Process name and PipeInfo CltReuse="true" (ClientPipeReused?) so I try uncheck "Reuse client&server connections" in Options. But it's still ClientPipeReused and aborted > This is only my testing. But I think it's unrelated, replay is issue by Fiddler so it just not abort it own request.

It's not a big deal as I can restart my pc and it's not too often but it would be good if there's a way to fix a problem without restarting the pc.