Archive for the ‘Fiddler’ Category
Posted by jpluimers on 2021/02/03
Sometimes I forget the choco install mnemonics for various tools, so here is a small list below.
Of course you have to start with an administrative command prompt, and have a basic Chocolatey Installation in place.
If you want to clean cruft:
choco install --yes choco-cleaner
Basic install:
choco install --yes 7zip
choco install --yes everything
choco install --yes notepadplusplus
choco install --yes beyondcompare
choco install --yes git.install --params "/GitAndUnixToolsOnPath /NoGitLfs /SChannel /NoAutoCrlf /WindowsTerminal"
choco install --yes hg
choco install --yes sourcetree
choco install --yes sysinternals
For VMs (pic one):
choco install --yes vmware-tools
choco install --yes virtio-drivers
For browsing (not sure yet about Chrome as that one has a non-admin installer as well):
choco install --yes firefox
For file transfer (though be aware that some versions of Filezilla contained adware):
choco install --yes filezilla
choco install --yes winscp
For coding:
choco install --yes vscode
choco install --yes atom
For SQL server:
choco install --yes sql-server-management-studio
For web development / power user:
choco install --yes fiddler
For SOAP and REST:
choco install --yes soapui
If you don’t like manually downloading SequoiaView at gist.github.com/jpluimers/b0df9c2dba49010454ca6df406bc5f3d (e8efd031d667de8a1808d6ea73548d77949e7864.zip ):
choco install --yes windirstat
For drawing, image manipulation (paint.net last, as it needs a UI action):
choco install --yes gimp
choco install --yes imagemagick
choco install --yes paint.net
For ISO image mounting in pre Windows 10:
choco install --yes wincdemu
For hard disk management:
choco install --yes hdtune
choco install --yes seatools
choco install --yes speedfan
For Fujitsu ScanSnap scanners (not sure yet this includes PDF support):
choco install --yes scansnapmanager
–jeroen
Posted in 7zip , atom editor , Beyond Compare , Chocolatey , Compression , Database Development , Development , DVCS - Distributed Version Control , Everything by VoidTools , Fiddler , Firefox , Fujitsu ScanSnap , git , Hardware , Mercurial/Hg , Power User , Scanners , SOAP/WebServices , Software Development , Source Code Management , SQL Server , SSMS SQL Server Management Studio , SysInternals , Text Editors , Versioning , Virtualization , VMware , VMware ESXi , vscode Visual Studio Code , Web Browsers , Web Development , Windows | Leave a Comment »
Posted by jpluimers on 2018/03/14
This is a great complimentary tool to Http Fiddler on Windows and Mac OS X, and the only tool on Linux (that is not covered by Http Fiddler): kdzwinel/betwixt: Web Debugging Proxy based on Chrome DevTools Network panel.
–jeroen
Posted in Development , Fiddler , Software Development , Web Development | Leave a Comment »
Posted by jpluimers on 2018/01/11
Reminder to self: [WayBack ] Fiddler for OS X Beta as it’s been on my list since about a year ago: Fiddler for OS X Beta « The Wiert Corner – irregular stream of stuff .
Note that reading the cerficicates can be done in a more simple way for the Current version of Mono:
/Library/Frameworks/Mono.framework/Versions/Current/bin/mozroots --import --sync
I forgot in which version the Mono installer has Current linked to the most recently installed Mono version but it works well.
Executing should then be somethig like this:
/Library/Frameworks/Mono.framework/Versions/Current/bin/mono ~/bin/fiddler-mac/Fiddler.exe
I expect quite some bit of trouble decrypting HTTPS [Arvhive.is ] as that was troublesome on Windows in the early Fiddler days as well.
In case of trouble, there is always Fiddler Ideas : Customer Feedback for Fiddler by Telerik . Add a new product idea or vote on an existing idea using the Fiddler by Telerik customer feedback form via [WayBack ] Tsviatko Yovtchev: “@jpluimers @ericlaw https://t.co/lRNXC88M1b is our feature suggestion/issue tracker portal. Fiddler itself notifies on new versions.”
Back to the reminder: [WayBack ] Fiddler for OS X Beta .
Direct download https://telerik-fiddler.s3.amazonaws.com/fiddler/fiddler-mac.zip .
Downloading Fiddler for OS X Beta…
If your download does not start, please [WayBack ] click here to retry
Getting started
If you don’t have the Mono framework installed on your Mac
Please download it from [WayBack ] http://www.mono-project.com/download/#download-mac and install it. If you already have it installed, ensure you’re running the latest version.
If you just installed Mono
Please open Terminal and type in:
/Library/Frameworks/Mono.framework/Versions/<Mono Version>/bin/mozroots --import --sync
(The Mono framework has its own trusted root certificates store. Currently (at mono version 4.2.4) this store remains empty after installing Mono on OS X. Fiddler uses the certificates in this store to validate the certificates of the websites visited. So you need to populate this store with a set of commonly trusted root authorities to avoid getting constant certificate warnings from Fiddler. The mozroots tool imports trusted authorities from the Mozilla LXR. )
Extract fiddler-mac.zip to a folder you have write access to.
It is recommended that the full path to Fiddler install folder does not contain any Windows path illegal characters. (At present it is possible that some Fiddler functionality, e.g. various file exports or Fiddler Script won’t handle such paths. )
Open Terminal and navigate to the folder you extracted to in step 3.
Type mono Fiddler.exe in Terminal.
To further understand the benefits and limitations of Fiddler for OS X please visit [WayBack ] this blog post .
–jeroen
Posted in Development , Fiddler , Software Development , Web Development | Leave a Comment »
Posted by jpluimers on 2017/06/06
For automated installs that cannot have UI interaction:
The install is “per user” as it is a user-local application; it installs in %LocalAppData%\Programs\Fiddler\Fiddler.exe.
Docs
Note that Fiddler acts as a HTTP proxy. When Fiddler starts, it hooks itself into the default WinINET proxy (which is used by any tool using the WinINET API, including Edge, Internet Explorer, Chrome, but not FireFox).
If you kill your Windows machine before stopping Fiddler, it cannot restore the WinINET proxy, so you have to do that by hand (otherwise you cannot browse web pages any more).
Manual restore:
Run "C:\Windows\System32\rundll32.exe" shell32.dll,Control_RunDLL inetcpl.cpl,,4
Press “LAN settings” (Dutch: “LAN-Instellingen”)
Uncheck the proxy server checkbox “Use a proxy server for your LAN” (Dutch “Een proxy-server voor uw LAN gebruiken”)
Confirm
Close the control panel wizard
–jeroen
Read the rest of this entry »
Posted in Development , Fiddler , Software Development , Web Development | Leave a Comment »
Posted by jpluimers on 2016/02/16
This was very useful to get a WebClient with a WebProxy configured to use a proxy server that is based on NTLM authentication.
The note in the MSDN NTLM and Kerberos Authentication . documentation however was totally wrong.
String MyURI = "http://www.contoso.com/";
WebRequest WReq = WebRequest.Create MyURI;
WReq.Credentials = CredentialCache.DefaultCredentials;
Note NTLM authentication does not work through a proxy server.
This code works perfectly fine as the CredentialsCache.DefaultCredentials contains your NTLM or Kerberos credentials .
It even works when you have a local Fiddler http proxy as a facade in front of your NTLM proxy.
Read the rest of this entry »
Posted in .NET , .NET 2.0 , .NET 3.0 , .NET 3.5 , .NET 4.0 , .NET 4.5 , C# , C# 2.0 , C# 3.0 , C# 4.0 , C# 5.0 , C# 6 (Roslyn) , Development , Fiddler , Software Development , Web Development | Leave a Comment »
Posted by jpluimers on 2015/04/13
As a follow up on the Cntlm configuration post last week , here is a small batch file that will find Cntlm.exe (on x86 and x64 systems) then start it in verbose mode.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
call :start %ProgramFiles%
call :start %ProgramFiles(x86)%
goto :end
:start
startlocal
set cntlm = " %* \Cntlm\Cntlm.exe"
echo %cntlm%
if exist %cntlm% start " Cntlm verbose" %cntlm% -v
endlocal
goto :end
:end
–jeroen
Posted in Cntlm , Development , Fiddler , NTLM , Power User , Web Development , Windows , Windows 7 , Windows 8 , Windows 8.1 , Windows Server 2003 , Windows Server 2003 R2 , Windows Server 2008 , Windows Server 2008 R2 , Windows Vista , Windows XP , Windows-Http-Proxy | Leave a Comment »
Posted by jpluimers on 2015/04/10
This is an elaboration of How to fill proxy information in cntlm config file – Stack Overflow .
When digging around how to get authentication stuff going, I want as much information, so this was the command-line I used:
cntlm.exe -v -c cntlm.ini -I -M http://www.bbc.co.uk
The -v is important: it shows you why things fail, and where: It also shows you the NTLM headers sent back/forth over the wire.
These are the switches used:
-v verbose
-c configuration file
-I interactive (prompt for password)
-M magically detect the NTLM level used by the proxy
Since it is unsafe to store plain text passwords in configuration files, cntlm allows you to store the hashes .
Storing hashes not passwords locally is safer, but not much safer. See for instance Still Passing the Hash 15 Years Later: Guest Post: Let’s talk about Pass-the-Hash by Scriptjunkie the video How to own a Windows Domain or search for Mark Russinovich video windows hash ntlm hack .
Anyway: you can generate the password hashes using either Read the rest of this entry »
Posted in Development , DVCS - Distributed Version Control , Fiddler , git , HTTP , Internet protocol suite , Mercurial/Hg , NTLM , Power User , Software Development , Source Code Management , TCP , Web Development , Windows , Windows 7 , Windows 8 , Windows 8.1 , Windows Server 2008 , Windows Server 2008 R2 , Windows Vista | 1 Comment »
Posted by jpluimers on 2014/07/15
Any web developer should know how to capture and trace HTTP traffic.
I’ve written about Fiddler before , but that’s a Windows specific tool.
Time to have a small list of posts and links to tools that work on various platforms.
I’ve left out Java based tools as there have been too many security issues with Java over the last couple of years.
Tools: Read the rest of this entry »
Posted in *nix , Apple , Development , Fiddler , Linux , Mac , Mac OS X / OS X / MacOS , Mac OS X 10.4 Tiger , Mac OS X 10.5 Leopard , Mac OS X 10.6 Snow Leopard , Mac OS X 10.7 Lion , MacBook , MacBook Retina , MacBook-Air , MacBook-Pro , OS X 10.8 Mountain Lion , Power User , SOAP/WebServices , Software Development , SuSE Linux , Web Development , Windows , Windows 7 , Windows 8 , Windows Server 2000 , Windows Server 2003 , Windows Server 2003 R2 , Windows Server 2008 , Windows Server 2008 R2 , Windows Vista , Windows XP | 2 Comments »
Posted by jpluimers on 2014/04/16
A while ago, I was working with a not so cooperative corporate firewall. All web browsers would work fine, but most other applications would not go through the proxy in a nice way.
For instance, DropBox would show the dreadfull “Connection Error” dialog shown on the right.
That dialog basically means “Dropbox has no clue what happens, try fiddling with your proxy or account settings, then press Reconnect Now” to retry.
Many other applications had issues (for instance Visual Studio connecting to Team Foundation System was very unreliable and the workarounds clumsy ).
CNTLM: not the solution
I got inspired by the [WayBack ] I code and code: Tutorial: How to use Dropbox behind a corporate proxy server using CNTLM , even though I was pretty sure the corporate firewall was not NTLM based.
And indeed, CNTLM -v -M http://google.com -c CNTLM.INI would give errors like this:
cntlm: Proxy returning invalid challenge!
headers_send: fd 4 warning -999 (connection closed)
Connection closed
HTTP Fiddler: looks promising
So I fired up my old buddy [WayBack ] Fiddler 2 HTTP debugging proxy.
Further on, you will learn that Fiddler2 is much more, but right now it is enough to know that it basically sits as a local proxy between your applications and the outside world. Read the rest of this entry »
Posted in .NET , .NET 2.0 , .NET 3.0 , .NET 3.5 , .NET 4.0 , .NET 4.5 , base64 , Cntlm , Development , DropBox , Encoding , Fiddler , JavaScript/ECMAScript , NTLM , Power User , Scripting , SocialMedia , Software Development , Web Development , Windows , Windows 7 , Windows 8 , Windows Server 2000 , Windows Server 2003 , Windows Server 2003 R2 , Windows Server 2008 , Windows Server 2008 R2 , Windows Vista , Windows XP , Windows-Http-Proxy | Leave a Comment »