Questions tagged [fiddler]

Fiddler is a debugging proxy.

Filter by
Sorted by
Tagged with
-2
votes
4answers
140 views

How do i know some software send data behind the scene to internet

Is there any way to use tools such as Fiddler to easily figure out if any software from my system sends data to the internet behind the scene? I have downloaded some open source free software's to ...
0
votes
0answers
48 views

Watch Encrypted IMAP Responses

I'm trying to see if I can decipher the messages coming back from Exchange when I try and login via secure IMAP. My office 365 accounts are under attack and I've disabled IMAP (and legacy login) but ...
0
votes
0answers
26 views

capturing web-sockets packets from IOS using fiddler

I am using latest Fiddler version trying to capture web-sockets requests from an IOS application. I am able to see only HTTP and HTTPS requests. Laptop(Running fiddler on port 8888) and mobile both ...
0
votes
0answers
188 views

Decryption of TLS/SSL Traffic With the debug file of fiddler on wireshark

I wanna decrypt some packets on Wireshark, when I search the Internet, some people were said to use SSLKEYLOGFILE environment, I do the stuff, but it looks like that chorme doesn`t update that file ...
2
votes
1answer
275 views

Decrypting SSL traffic using Fiddler to see requests being sent by malware written in .NET

I tried to find the GET data of some malware but it appears that this malware is encrypting traffic using SSL. When I tried to decrypt the SSL data via Fiddler, I always get nothing — only ...
0
votes
1answer
3k views

how to capture and decrypt packets sent over TLS [duplicate]

I have been using MITM for decrypting https traffic , using tools like fiddler and burpsuite . Is there a way to decrypt packet sent over TLS, any guidance would be a real help.
4
votes
1answer
3k views

How come I can see a full HTTPS requests via Fiddler?

I am testing a C# web API hosted on a remote server, and I am monitoring HTTPS traffic using Fiddler. What confuses me is that via Fiddler I can see all of the POST payload, headers and host URL ...
1
vote
0answers
83 views

How do I intercept packages in a Facebook application?

I can not listen to HTTPS traffic in the Facebook application through Fiddler and Burp. SSL-Pinning is disabled through SLL Kill Switch 2 (other applications such as Twitter, Snapchat with SSL-Pinning ...
-5
votes
1answer
146 views

Is getting intercept request of HTTPS in clear text is a bug [closed]

I am new in pentesting so I don't know what to expect. I am intercepting HTTPS requests of Android apps in my phone through Fiddler for pentesting purposes. I have installed the Fiddler certificate on ...
5
votes
4answers
322 views

Fiddler show external requests but not initiated by any legitimate process

While debugging my web application in Fiddler, I found out that there are some suspicious requests to some hotel sites, search requests to google.pl. etc. See below images. Strangely there no process ...