Hi,

Im trying to decrypt SSL traffic and I keep getting an alternating SSL error.  It's either Subject Alternative Name missing or Common Name Invalid.

I've changed the engine to CertEnroll and cleared old certs, retsarted browser and Fid but no good.

The site I'm trying decrypt is part of an IIS WebFarm which uses Centralised Certificates so the SAN is needed to lookup the correct cert to perform the handshake so I think this is the issue.

Fiddler: 4.5.1.2

Chrome: 74.0.3729.131 32bit

 

Any ideas?

 

Many Thanks,

Brad

I have captured a few hundred requests that I would like to replay several hundred times (or just repeat ad infinitum).

My problem is that Fiddler always "captures" the new requests it makes so after a few minutes the list of requests is many tens of thousand long and Fiddler is using many GB of memory.In my case I am not that interested in inspecting the replayed request / response - I would like Fiddler to "fire and forget" them.

I have experimented with the "Keep: XXX Sessions" option as well as filtering to a random process option - but it seems that Fiddler always wants to record requests that it replays.

 

Is there a simple solution.

 

Thanks in advance 

 

Chris

 

 

I have read and tried every flavor I can find on how to make this work, but nothing does. I don't care about traffic leaving my server, on the requests coming into IIS for all sites listening on that server. AND all traffic inbound is SSL so its over port 443. We have nothing bound to port 80 at all. Every example I found only mentions port 80 and I suspect that is why its not working. What are the steps to get this to work on a Windows Datacenter Server 2016 server for request that come from external sources? 

The amount of times I am restarting fiddler and adding the same URLs or processes to filter out is getting a bit mundane. I have Outlook, Skype running which all clutter up the list.  Also IE is running.  I just want to focus on a single URL within a session.

Is there a filter list where I can save the filters to and easily switch on switch off this?

 

 

 

 

Hey Guys

Long time Telelrik user .. first time fiddler.. lol

I have a strange request from a customer.. I need to replace an existing end point that is receiving xml. But that's as much as the customer knows.

They are offering to redirect traffic they send to the end point, to another ( my) machine.. but since I don't know what they are sending , I don't know how to listen.
What I thought of , can I use fiddler to act as a proxy , and forward the traffic to the proper end point IP and return the responses back to the sender.

I think that is possible to forward the request on using the rules.. what I don't get is how I would handle / capture the response. 

I have requested if I can have the ability to install software on either the client or server to watch, but that does not seem possible. Also asked if they can replicate the network data towards  another machine so I can watch. ( or even plug an old fashioned hub in)

Any ideas / thoughts based on experience would be greatly appreciated.

Rob

Fiddler Script now support C#. I'm try to use HtmlAgilityPack in Fiddler Script by " using HtmlAgilityPack; " . See 1.png;

It shows an error .  See 2.png;

I'm try to change version of HtmlAgilityPack but it still same error.

Could some one help me how to fix this error? Thanks so much.

I successfully saved the request and created a session which I want to reply later using fiddler core and C# code. 

This worked great for some time and than it just stopped probably when nginx was added and turned on the geo IP location.

I did testing with Fiddler 4 UI app and got very strange results when run reply from various PC machines. On most machine it fails with below raw response with error message is:

HTTP/1.1 502 Fiddler - Connection Failed
Date: Thu, 16 Jan 2020 14:20:29 GMT
Content-Type: text/html; charset=UTF-8
Connection: close
Cache-Control: no-cache, must-revalidate
Timestamp: 15:20:29.441

[Fiddler] The connection to 'www.mozzartbet.com' failed.  <br />System.Security.SecurityException Failed to negotiate HTTPS connection with server.fiddler.network.https&gt; HTTPS handshake to www.mozzartbet.com (for #25) failed. System.Security.Authentication.AuthenticationException A call to SSPI failed, see inner exception. &lt; The function requested is not supported

Win32 (SChannel) Native Error Code: 0x80090302 

I have tried Fiddler 4 on AWS machine in cloud and from that one it is still working using system proxy but on test machine when we run testing it is still failing and tried couple more machines same.

I tried than to use Gateway Override and use Manual Proxy Configuration to avoid if there is some IP blocking. I used squied 

Please find attached .saz archive of the saved request which I want to reply (remove .jpg extension by renaming the file and file type should be .saz).

 

 

 

 

I was working with a user who has no Admin rights.  When she was enabling HTTPS decrypt, it went through the warning-accept-cert process.  It failed with

ShellExecute Failed

Fiddler Exception thrown... This program is blocked by group policy....

 

Can I get a hint as to what program Fiddler runs as part of the HTTPS decrypt-enable process?  Then I can set about defeating the GPO.

Fiddler is failing set up the system proxy.

 

This is what the log says:

11:37:30:6321 Fiddler Running...
11:37:30:6321 Fiddler was unable to get information about the proxy for 'DefaultLAN' [0x2f92].

11:37:30:6321 !WARNING: Failed to get proxy information for Connection 'DefaultLAN'.
11:37:30:6321 Setting upstream gateway to none
11:37:30:6351 Windows 8+ AppContainer isolation feature detected.

 

I also tried to manually change the proxy settings from inetcpl.cpl. but when I try to click "OK" in the "LAN Settings" dialog, nothing happens. The "Cancel" button does work though.

I need to see what I'm sending to a SalesForce endpoint, but so far, nothing I've done works.

 

How to?

 

Thanks

Phil