Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Monitoring HTTP(S) Traffic undetected

Hello,

I want to reverse the traffic of some programs, but if I use a Proxy like Fiddler, the program I want to reverse has a security for that and detects that fiddler is running.
Is there any way to work around this? I am not certain if they detect it by the connection or just by the process of fiddler.
I thought of maybe running Fiddler on another machine and capturing the traffic remotely if they detect it by the proccess or using another method to capture the traffic if they detect it by the connections.
Would there be such an "external" method to capture the traffic?

Thanks in advance :)
(Dec 4, 2020 10:37 AM)1111moritz Wrote:  Hello,

I want to reverse the traffic of some programs, but if I use a Proxy like Fiddler, the program I want to reverse has a security for that and detects that fiddler is running.
Is there any way to work around this? I am not certain if they detect it by the connection or just by the process of fiddler.
I thought of maybe running Fiddler on another machine and capturing the traffic remotely if they detect it by the proccess or using another method to capture the traffic if they detect it by the connections.
Would there be such an "external" method to capture the traffic?

Thanks in advance :)

You cannot monitor HTTPs it uses cryptography unless your able to crack the RSA good luck.
You need to understand the security protocols in place. Your proxy created by the program(fiddler) is your first issue. Even then you need to understand that many modern apps have multiple sorts of detection in place to detect fuzzing and similar operations preformed by pentesters. To many to explain without writing a book but I suggest you look into understanding the security employed by the web app in question or Web apps in general to get a better understanding of how these may be overcome.
Have a look at the difference between shallow and deep packet inspection.  This is often used to scan enterprise traffic for malware and shares a lot of traits with MITM attacks. 


[Image: 700px-SSL_Deep_Inspection_Explanation.svg.png]


Possibly Related Threads...
Thread / Author Replies Views Last Post
by n0mad20May 2, 2017 05:49 PM 0 60 May 2, 2017 05:49 PM
Last Post: n0mad20
by muroseuJun 21, 2016 01:11 AM 0 221 Jun 21, 2016 01:11 AM
Last Post: muroseu
by BriceagOct 22, 2015 11:23 AM 2 75 Oct 22, 2015 11:23 AM
Last Post: Raymond Reddington