Hello,
Is there any way to decrypt TLS 1.3 yet? Some app's have started using TLS 1.3 only, so proxying my phone through Fiddler leaves me with undecryptable tunnels only.
An example of such a capture is attached.
Best regards,
Jack
Hi guys
We use ninitepro which runs in the background and updates applications like Chrome/Adobe etc on our computers. Since it doesn't have an active window I can't see what it is connecting to via Fiddler and I'm trying to figure out how to enable scanning of background processes so Fiddler will pick it up.
Thanks
Gerry
My aim is to log all requests coming to IIS10 server on the Windows Server 2016 from any customer.
A request is called with the port 80. Fiddler should redirect all requests to IIS on the port 8888.
I made all steps described by Eric Lawrence:
If you want Fiddler to capture traffic coming *in* to your IIS server and going *out* from your IIS server, then you need to run Fiddler in both reverse proxy mode and normal proxy mode. First, get Fiddler capturing the traffic coming out from your IIS server (by editing machine.config & setting the proxy settings for WinHTTP to 127.0.0.1:8888, etc). Then, move your IIS instance to a different port (8080) and configure Fiddler to listen on port 80 as well (e.g. type !listen 80 in QuickExec to set up a second listening endpoint). In FiddlerScript, you then need to forward requests received on port 80 to your IIS instance (8080).
source https://www.telerik.com/forums/capture-all-iis-traffic-on-the-web-server
I see endless loop of requests sent from Fiddler to IIS. Only one request is sent from a client machine( tested also with Fiddler). Also after I disable "Capture Traffic" the outgoing requests to IIS are logged in Fiddler.
Configuration
IIS domain binding set to the port 8888
Machine.config
<system.net>
<defaultProxy>
<proxy autoDetect="false" bypassonlocal="false" proxyaddress="http://127.0.0.1:8888" usesystemdefault="false" />
</defaultProxy>
</system.net>
Custom rules in Fiddler:
if (oSession.host == "xxx.com:80")
{
oSession.host = "xxx.com:8888";
}
Allow remote computers to connect set to true in Fiddler.
What can be wrong in the configuration?
Hi there!
How to configure fiddler in non-proxy mode?? So it listens to ALL http(s) connections from EVERY application that uses that protocol? Like wireshark...
Is that possible, i think not, right?
Thx for feedback.
Regards,
Jan
Hello. I am changing the post request body through a script:
static function OnBeforeRequest(oSession: Session) {
if (oSession.fullUrl=="https://www.example.com/api/v1/device") {
var rep = System.IO.File.ReadAllBytes("replace.txt");
oSession.requestBodyBytes = rep;
}
If I do not change the request body, the server accepts it (301). If I use a script, the server throws an error (401). The data in replace.txt is completely identical to the data from the original request that the server accepts. What could be the problem?
I just installed the latest Fiddler4 on Windows 10 and enabled HTTPS decrypt, but no HTTPS traffic is captured.
Anything to do with firewall or cert? Thanks.