Easiest way of Viewing my own HTTPS requests

1. 2018-10-21 at 5:23 AM UTC

   #1
   

   SBTlauien African Astronaut
   I'm trying to use Burp Suite and ZAP to view my own HTTP/HTTPS requests but I keep getting an error message from the specific server saying that their service is unavailable. Without the proxy, the site runs fine. I've had this problem in the past but was able to circumvent it. But this time around it's a bit more difficult. There is one part of the site that I want to record my requests from and it always shows an error page that says their service is down.
   
   Are there any alternatives to using a proxy? I was thinking of maybe using Wireshark. I searched for browser extensions but didn't find any except for 'HTTP Header Live' but it didn't seem to work.
2. 2018-10-21 at 5:43 AM UTC

   #2
   

   aldra JIDF Controlled Opposition
   https://addons.mozilla.org/en-US/firefox/addon/tamper-data/
   
   wireshark won't work because it can't decrypt the https connection on the fly
3. 2018-10-21 at 6:39 AM UTC

   #3
   

   Lanny Bird of Courage
   -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Fiddler is a great tool if you're on windows. Like it's the singular place where Windows has better dev tooling than OSX, the UI is polished and it's specifically built around HTTP so I find it's a lot simpler to use than scratching my head at the wireshark enhancement docs. It can crack SSL by installing a cert which is pretty easy to set up too. -----BEGIN PGP SIGNATURE----- iQJOBAEBCAA4FiEEaplk9V8kovCcp8BrznljHEc+lFoFAlvMHx0aHGxhbi5yb2dl cnMuYm9va0BnbWFpbC5jb20ACgkQznljHEc+lFrP0xAAkHcKUmumRuv6tJMLKMWN un/BELM9EL/nQAdWK5HVH4RGjwwBwZVUDaXKSk7hf6u0UTUExjDMDrxzBpqLUclB bwDRKZqdt1/I+HKKTcqAcXL7mQ2C9u27+WWGEIihcTl2niwKlxivNihIdCXhNj8W Vm2Jbslld0Ua4r1Z3MlmkIippYy/LJdkwKIYnpQnEy5ZrgnbZnrNilDLXMxpkhqQ jhZDa3O8KM7NOEldfp3mwRZ9M2PBJxKEgdMeEtE5nNN+dB/pS/BWlYhCHF/Bxuaq EmzXy0KUB/Z/6F1DbjWEZd0U+2t4Nci+XxLxrHUx1/4/FvJqp7Gkwdf9GvyQdgOE 7upWf42GVI/WwYBsGsZSwQiZ9/A/0SIo7ymZBUfpjyhoIyXTVev8+s8fTETObjkW SOnFNfAKOD2oLvq8R4HS0cxs5JEAUiuqDA96AjmeRi+ch5kqQYPWGEaWcUj23PBA y6FoMHQD4OmuFmz6x/W3GmcKk6pHITLq7BfOZ4IfcXaKY/ejNYWDyhZAse2c93gs q1DwalDc1l6iSvNggZuDMmKmnXgoZr1z9sX20Nf1cMgHC80iYcmI03V3eARgo7pr ym7QW1JwbYugth2SMIMafPlGnIrv0nlR0/uGC0M+9oOn2a1CQ02A0vsAxn4fUkHk Ztsl4IqxhSRbvlLwrnlsiwo= =HWOt -----END PGP SIGNATURE-----

   Fiddler is a great tool if you're on windows. Like it's the singular place where Windows has better dev tooling than OSX, the UI is polished and it's specifically built around HTTP so I find it's a lot simpler to use than scratching my head at the wireshark enhancement docs. It can crack SSL by installing a cert which is pretty easy to set up too.
   
   The following users say it would be alright if the author of this post didn't die in a fire!

   • Grimace
4. 2018-10-21 at 7:06 AM UTC

   #4
   

   Grimace motherfucker [my enumerable hindi guideword]
   I came here to say Fiddler, if on Windows.
5. 2018-10-21 at 3:45 PM UTC

   #5
   

   SBTlauien African Astronaut
   I use Linux.
   
   

   Originally posted by aldra https://addons.mozilla.org/en-US/firefox/addon/tamper-data/
   
   wireshark won't work because it can't decrypt the https connection on the fly

   
   This isn't compatible with my version of FireFox.
6. 2018-10-21 at 5:41 PM UTC

   #6
   

   SBTlauien African Astronaut
   I am able to view the request after I import Burp Suites cert into FireFox. It seems like there should be a browser extension for such a simple thing. I'll have to search more and see if I can find anything...
7. 2018-10-22 at 5:19 AM UTC

   #7
   

   aldra JIDF Controlled Opposition

   Originally posted by SBTlauien I use Linux.
   
   
   
   This isn't compatible with my version of FireFox.

   
   install a compatible version in parallel
   
   the same extension is available in chrom/e/ium
8. 2018-10-22 at 10:28 AM UTC

   #8
   

   Sophie Pedophile Tech Support
   If your extensions aren't working on FF Quantum, install FF-ESR, that should fix your compatibility issues.
9. 2018-10-22 at 10:33 AM UTC

   #9
   

   Soyboy 2.0 - The GMO Reckoning African Astronaut
   I got Fiddler installed now, it seems to work great - but I'm clueless - why might I want to see my own HTTP/HTTPS requests?
10. 2018-10-22 at 7:44 PM UTC

    #10
    

    SBTlauien African Astronaut

    Originally posted by MORALLY SUPERIOR BEING 2.0 - The GMO Reckoning I got Fiddler installed now, it seems to work great - but I'm clueless - why might I want to see my own HTTP/HTTPS requests?

    
    For fiddling with.