Fiddler is not capturing libgit2 traces - fiddler

I am using libgit2 to push my repository to server. But Fiddler not capturing HTTP/HTTPS traces during push operation.
Which protocol(git, http or winhttp) libgit2 uses to push reporsitory when we provide basic auth credentials ?
Why Fiddler not capturing libgit2 traces ?

Fiddler sets up your browser's default proxy, but does not necessarily set the proxy for other applications. libgit2 uses WinHTTP (on Windows) and thus uses its proxy settings which do "not inherit browser proxy settings. WinHTTP does not share any proxy settings with Internet Explorer."
You will need to either set the WinHTTP proxy when using fiddler, via netsh, or simply set the core.httpproxy and core.httpsproxy settings in your repository.

Related

Fiddler doesn't show traffic from Cypress

Background: I'm trying to send a request through cy.request and I get a different response from what I receive when I send a presumably similar request through PostMan. According to the debug information that Cypress writes to the console, I couldn't spot the difference. Therefore I wanted to look at Fiddler and see if I can spot the difference when looking at the raw requests side by side.
However, when I opened Fiddler I realized that I don't see any traffic from it, including the navigation to the home page using cy.visit().
Any ideas why I can't see the traffic in Fiddler, and if there's some way to capture it?
Fiddler is a proxy, it has to be explicitly used by an application, otherwise it will not be recogized by Fiddler.
There are three reasons that often cause that traffic is not visible in Fiddler:
The Windows application explicitly ignores the Windows/IE proxy settings. Usually such apps have an own proxy configuration. Configure it manually to use Fiddler. A common example of such an application is Firefox.
If you have activated the "Act as system proxy at startup" Fiddler changes the proxy settings while running. Any application that is already running when Fiddler starts may have already cached the old proxy configuration and therefore does not use Fiddler. Therefore start Fiddle before any program you want to capture.
The setting "Act as system proxy at startup" is AFAIK user specific, therefore any apps running on a different user or service account are not affected. You have to manually configure them to use Fiddler.
Cypress does not actually make an XHR request from the browser. Cypresd making the HTTP request from the Cypress Test Runner (in Node). So, you won’t see the request inside of your Developer Tools or filddler

Fiddler not capturing traffic from certain host

I want to capture traffic from a host using HTTP, but I do not see a response coming back. If I close fiddler, my application runs as normal.
I see '-' in the Result section, where it should have been an HTTP response code. If I manually execute the request using Composer, I get a 200 response. Fiddler is able to capture traffic from all other web applications without issue.
I have installed Fiddler certificate. Troubleshooting Mode returns 200. The host does not use HTTPS, but I have enabled Capture HTTPS Connects anyways.
I am using Fiddler v5.0.20182
Some applications performs certificate pinning. Also web applications can perform certificate pinning e.g. via HTTP Public Key Pinning (HPKP). If you have ever used the web application in your browser without Fiddler, the web app public key has been downloaded and cached in the web-browser.
Afterwards the Fiddler root certificate is no longer accepted for that site/app even it it has been installed correctly. You should be able to identify such problematic connections in Fiddler if you only see a CONNECT request but no subsequent requests to the same domain.
To delete the HPKP in your web browser you should use a fresh profile or clear the complete browser cache. Afterwards only use it with activated Fiddler proxy and SSL decryption. As far as I know Fiddler will remove HPKP data from responses so that the web application should also work with Fiddler in between.
I think you should be able to uncheck the options for https, uncheck the boxes which appear checked here? Or you might be able to skip decryption by adding the host in the box below where it says Skip decryption for the following hosts

How to use Fiddler in C# with a proxy?

I've been using Fiddler in C#.
So far I'm able to intercept requests. However, I need to set a proxy. I did so, the proxy is set.
In Proxy Settings Windows' form, I have for HTTP and Secure: 127.0.0.1 for Proxy address to use and for the Port, 8888.
This is the same that is done when I use Fiddler application directly.
However, when I set it through my C# code, instead of using Fiddler, I can't navigate. My pages give me the message:
Your connection is not secure
What more do I need to do? What Fiddler do that I'm missing to correctly set a proxy?
Usually if it cant make a secure connection, you need to trust Fiddler's root certificate on your development PC. If you are using Firefox you will have to do an additional step to trust the certificate inside FF.

Requests sent from Advanced Rest Client for Chrome are not visible in Fiddler

I have a Web API application running locally. When I access it through a browser, the requests are visible in Fiddler. When I do it through the Advanced Rest Client for Chrome - nothing appears in Fiddler.
I am using IIS Express with localhost.
How do I make requests issued by ARC visible in Fiddler?
I tried with https://graph.facebook.com/test and it worked fine for me after making some setup changes. Here is what I have setup:
IE > Internet options > Connection > Lan Settings >
a. Automatically detect - Check
b. Use proxy server for your lan - check with fiddler host and port for http/s
Advanced Rest Client with ARC ( Without ARC it wont even be able to connect)
Fiddler > File > Capture Traffic
It worked even for the extension Postman (without even needing ARC).
Can you try these?

How to make certain hosts bypass Fiddler?

I have the Fiddler filters setup to "hide" the host "roaming.officeapps.live.com" and it does not show while I am debugging.
But the Fiddler proxy is still causing security issues (incorrect ssl certificate) to office, message relates to that host.
How can get a specific host to bypass Fiddler?
Or is the nature of a proxy based system that all requests go through it regardless?
Tools > Fiddler Options > Connections > Bypass Fiddler for hosts that start with or use the HTTPS tab to Skip decryption for.