getting fiddler to work

[hahn-th]

getting fiddler to work

[sander76]

@coreGreenberet Do you need to keep this your secret or is this something you can share? ;-)
More in general: Is it possible to share how you got any sniffing tool to work ?
(I tried fiddler and pcap)

[coreGreenberet]

You have to make a so called "Men in the middle Attack".

1. Run fiddler/charles/....
2. export the root ca of the applicaiton and install it on your mobile phone. ( each application will generate it's own CA)
3. Press the "Decode" button in fiddler
4. configure your computer as a proxy in the network settings from your mobile device
5. as soon as the traffic goes in you should see the decrypted messages. If it isn't working try to select the stream and do a right click -> decode this stream