In "OnBeforeRequest()" event, I want to download a URL and then return it as "oSession.LoadResponseFromStream()".

 

I want to redirect to or something like that. What is the Fiddlerscript function to download URL in code and return it as body"?

You can test it here yourself: https://www.ssllabs.com/ssltest/viewMyClient.html

Just enable fiddler and allow the certificates...

You can test it here yourself: https://www.ssllabs.com/ssltest/viewMyClient.html
Just enable fiddler and allow the certificates... see the image below for details.

This makes automatically ignoring cert errors highly dangerous.

https://www.forbes.com/sites/daveywinder/2020/01/17/windows-10-security-alert-as-alarming-curveball-threat-just-got-very-real-indeed/#64b3292230d8

Please add an automatically revoke bad certs when errors pop up, its really annoying having to knock them out one by one, should be an automated process with such a streamlined program designed for maximum efficiency and productivity.

I see an option to automatically allow bad certs, which opens people up to CVE-2020-0601 (CurveBall) Vulnerability.  Is there an option to automatically deny bad certs, instead of clicking on them one, by one?

Hi,

I have Fiddler Everywhere installed on a MBP running Mojave 10.14.6. I'm trying to use it to debug traffic from an iPhone. Decrypt HTTPS is enabled and the Fiddler root cert is installed in the keychain and test device. Fiddler is also configured to accept remote connections.  However when I attempt to connect to any sites the connection fails. However I do see the inbound connection attempts from the test device within the logging. Any ideas?

 

thanks

Where is the time spent?  If waiting for server to respond, I would not expect the ClientDoneResponse to be close to overall time?  Can you help interpret this and determine where that time is spect?

 

== TIMING INFO ============
ClientConnected:18:39:20.550
ClientBeginRequest:18:45:58.582
GotRequestHeaders:18:45:58.582
ClientDoneRequest:18:45:58.582
Determine Gateway:0ms
DNS Lookup: 0ms
TCP/IP Connect:0ms
HTTPS Handshake:0ms
ServerConnected:18:45:56.064
FiddlerBeginRequest:18:45:58.582
ServerGotRequest:18:45:58.582
ServerBeginResponse:18:46:32.664
GotResponseHeaders:18:46:32.664
ServerDoneResponse:18:46:32.664
ClientBeginResponse:18:46:32.664
ClientDoneResponse:18:46:32.664

Overall Elapsed:0:00:34.082

hi all,

 

hoping to understand why i cant seem to install Fiddlercap on the directory i want, it seems that using /D= its possible but i cant seem to get it working.

 

i tried without the /S option with /D=E:\apps\Fiddlercap and i always get the installer showing my desktop path.

Appreciate any help, thanks in advance!

Daniel

 

Hi,

I want to automate the uninstall of Fiddler by using the "uninst.exe /S".

When we uninstall Fiddler double-clicking uninst.exe in UI mode we have the question asking if we would like to keep Fiddler's configuration.

How can I keep such configuration by the command line, without UI, with the /S switch?

 

Thank you,

Kind Regards,

Gustavo

Hi

Is it possible to create FiddlerCoreStartupSettings to intercept requests for a specific host only? Or alternatively a specific program.exe?

I recognise there is a bypassHost options, but its not clear how to add multiple hostnames to that string?

Thanks

Methe

Hi,

In the HTTPS tab in Fiddler, I have Fiddler set up to 'ignore server certificate errors' and have the following protocols listed: <client>;ssl2;ssl3;tls1.0;tls1.1;tls1.2

 

When looking at the inspector tab in Fiddler for www.skybet.com, any url related to login (launched when LogIn in the top bar is selected) fails with a 403 i.e. https://www.skybet.com/secure/identity/m/login/mskybet?urlconsumer=https://m.skybet.com&dl=1. 

The only setting in .Net that will return a response for such urls is ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls11. Is there some other setting in Fiddler (or in CustomRules.cs) I should change to return a response from such urls?

Thanks!