using CONNECT as gereric tunnel

1 posts, 0 answers
  1. Vitaliy
    Vitaliy avatar
    1 posts
    Member since:
    Jan 2018

    Posted 19 Jan Link to this post

    hi

    I'm trying to use CONNECT command of http proxy as generic tcp tunnel in our project. It's not SSL
    Firstly I had used it for one of our services where client sends requests to a server and the servers responds (in other words the client is initiator of activity) - it seems all worked fine with fiddler.

    Now i have tried to use same technique for tunneling ftp connection (control and data in passive mode). And this doesn't work, because in ftp control connection server firstly send greeting message to a client and the client waits for them, it doesn't send anything until get this greeting.
    It looks like fiddler doesn't pass first data packet from the server to the client when server is initiator of conversation.
    As result when fiddler sniffs for a SSL handshake it doesn't see traffic from the client and drops the connection.
    Even disabling option "Decrypt HTTPS traffic" doesn't help.

    IMHO, it's bug in fiddler. it must not assume that CONNECT used only for SSL
Back to Top