What use does fiddler have, can it be used to change or give urself something in games? League Of Legends

[Filip]

Hello so as you have seen my subject question is there a way that i could for example in league of legends add myself blue essensce and things like that?

[Nick Iliev]

Hi Filip,

 

Fiddler acts as a MITM web proxy meaning that it will serve as a man-in-the-middle proxy that captures incoming and outgoing traffic through HTTP and HTTPS protocols. You could use it to mock server responses and see the result locally without having modified the server. You could also make custom requests to capture and inspect the generated traffic from browsers and any other applications that are using HTTP and HTTPS.

I am not aware of the technology stack used for the creation of League of Legends, but if it uses HTTPS, you could probably mock some of the responses for local testing. It won't change the operations made by the game server (unless you modify the requests and the server is OK with the modified content).

 

Regards,
Nick Iliev
Progress Telerik

[Filip]

Thank you Nick for answering my question. From Filip

[Nick Iliev]

Something else I've wanted to add. It appears that League of Legends is most likely using a certificate pinning which means that the server expects a specific certificate to trust the client - a security setting made primarily to prevent MITM manipulations. If that is the case, then there is not much you could do with 

[ivory]

fiddler is actually useful as a mitm-proxy for debugging http/https, but you won’t be able to “farm” yourself blue essence in league, because important operations are checked server-side and requests with spoofing just won’t be accepted. plus, a lot of games use certificate pinning, so fiddler won’t even decrypt the traffic properly without a bunch of extra steps, and any attempts to mess with it can easily get you banned. whenever I read threads like this, I keep seeing random links like www.plinkogamesonline.org and www.bestaviatorapp.com in the discussions, and it just clutters up the topic about network debugging. it’s better to treat fiddler as a tool for testing and analysis, not as a cheat, and just ignore trash posts like www.indianaviatrix.com.