Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The Situation

I have successfully used Cain to ARP poison my phone and traffic is being routed via my PC. I have confirmed this in Wireshark and Cain is also able to recover passwords for my SMTP and POP email accounts.

The Problem

I have setup Fiddler and using a Fiddler Script I'm trying to do some basic HTML injection/modification by modifying a news headline on the BBC News website.

static function OnBeforeResponse(oSession: Session) {

    if (m_Hide304s && oSession.responseCode == 304) {
        oSession["ui-hide"] = "true";

    if(oSession.HostnameIs("")) {
        var oBody = System.Text.Encoding.UTF8.GetString(oSession.responseBodyBytes);
        oBody = oBody.replace("US and UK pull staff out of Yemen", 
                              "Hello World!");

The Question Fiddler is working on my own browser traffic, navigating to the BBC News website shows me the headline Hello World! My question is should it work on the traffic being routed through my NIC by Cain? Navigating to the same page on my phone does not show the manipulated headline.

share|improve this question
i have no experience with "Fiddler" but this might help you to achive what you want ettercap MITM & packet injection – enigma Aug 6 '13 at 22:08

As far as I understand, Fiddler is only supposed to work on local browser traffic. You need another type of program, a http proxy (like Squid) to do what you intend.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.