I see an option to automatically allow bad certs, which opens people up to CVE-2020-0601 (CurveBall) Vulnerability.  Is there an option to automatically deny bad certs, instead of clicking on them one, by one?

Hi,

I have Fiddler Everywhere installed on a MBP running Mojave 10.14.6. I'm trying to use it to debug traffic from an iPhone. Decrypt HTTPS is enabled and the Fiddler root cert is installed in the keychain and test device. Fiddler is also configured to accept remote connections.  However when I attempt to connect to any sites the connection fails. However I do see the inbound connection attempts from the test device within the logging. Any ideas?

 

thanks

Where is the time spent?  If waiting for server to respond, I would not expect the ClientDoneResponse to be close to overall time?  Can you help interpret this and determine where that time is spect?

 

== TIMING INFO ============
ClientConnected:18:39:20.550
ClientBeginRequest:18:45:58.582
GotRequestHeaders:18:45:58.582
ClientDoneRequest:18:45:58.582
Determine Gateway:0ms
DNS Lookup: 0ms
TCP/IP Connect:0ms
HTTPS Handshake:0ms
ServerConnected:18:45:56.064
FiddlerBeginRequest:18:45:58.582
ServerGotRequest:18:45:58.582
ServerBeginResponse:18:46:32.664
GotResponseHeaders:18:46:32.664
ServerDoneResponse:18:46:32.664
ClientBeginResponse:18:46:32.664
ClientDoneResponse:18:46:32.664

Overall Elapsed:0:00:34.082

hi all,

 

hoping to understand why i cant seem to install Fiddlercap on the directory i want, it seems that using /D= its possible but i cant seem to get it working.

 

i tried without the /S option with /D=E:\apps\Fiddlercap and i always get the installer showing my desktop path.

Appreciate any help, thanks in advance!

Daniel

 

Hi,

I want to automate the uninstall of Fiddler by using the "uninst.exe /S".

When we uninstall Fiddler double-clicking uninst.exe in UI mode we have the question asking if we would like to keep Fiddler's configuration.

How can I keep such configuration by the command line, without UI, with the /S switch?

 

Thank you,

Kind Regards,

Gustavo

Hi

Is it possible to create FiddlerCoreStartupSettings to intercept requests for a specific host only? Or alternatively a specific program.exe?

I recognise there is a bypassHost options, but its not clear how to add multiple hostnames to that string?

Thanks

Methe

Hi,

In the HTTPS tab in Fiddler, I have Fiddler set up to 'ignore server certificate errors' and have the following protocols listed: <client>;ssl2;ssl3;tls1.0;tls1.1;tls1.2

 

When looking at the inspector tab in Fiddler for www.skybet.com, any url related to login (launched when LogIn in the top bar is selected) fails with a 403 i.e. https://www.skybet.com/secure/identity/m/login/mskybet?urlconsumer=https://m.skybet.com&dl=1. 

The only setting in .Net that will return a response for such urls is ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls11. Is there some other setting in Fiddler (or in CustomRules.cs) I should change to return a response from such urls?

Thanks!

 

 

 

Hi,

I try to capture my traffic from my App running on an android device (VPN necessary) using Fiddler on Windows 10. The App is using netstandard2.0. So I follow the instruction of this:

   https://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/DecryptHTTPS

   https://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/ConfigureForAndroid

   https://docs.telerik.com/fiddler/Configure-Fiddler/Tasks/ConfigureDotNETApp

 

It works all fine without using VPN. But when I activate VPN Fiddler doesn't capture anything of my android device. Any idea?

 

 

Hello

Is it possible to save the captured data to one file named "output.txt" and keep overwriting that file for every subsequent write.

So I will always have just one file which will be over-written each time.

Below is my code which generates different files with different filenames.

 

    if (oSession.PathAndQuery.ToLower().Contains("iva/subscriptions"))
        {
            if(oSession.responseCode == 200)
            {
                var directory2 = "C:\\aos";
                var filename2 = oSession.oRequest.headers['SOAPAction'].ToString().Replace('"','') + "_" + Guid.NewGuid();
                var path2: String = System.IO.Path.Combine(directory2, filename2);

                //oSession.SaveRequestBody(path2 + "_request.txt");
                oSession.SaveResponseBody(path2 + "_response.txt");
               
            }
        }

 

Thank you

Hello,

 

I'm trying to capture HTTPS traffic made by a command line application I run on the cmd terminal.

I'm using Windows 10, proxy is defined and I capture all communication done from browsers or other applications, but don't see anything when I run this app (which I know for a fact does HTTPS communication).

Am I missing something? Should I define the proxy differently? Please assist.

 

Best,

Segev.