4.2. Web analyst fiddler
•
0 likes•432 views
This document discusses using Fiddler, a web debugging proxy, to debug HTTP traffic and tune proxy settings. It highlights how Fiddler scripts allow setting breakpoints to inspect JavaScript files from multiple hosts to find the source of unwanted content, and how Fiddler can be used to download malware signatures and lists of dynamic DNS domains for analysis.
Report
Share
4.2. Web analyst fiddler
- 1. Debugging proxy tuning for fun and profit By Peter Volkov
- 2. Still using wireshark for HTTP debugging/analysis?
- 4. JScript based scripting engine
- 6. My favorite use case: Where did this @$%^ came from? Easy case:
- 7. But what if plaintext search doesn’t help? Inspect all these 60+ js from 10+ hosts manually?
- 8. Breakpoints!
- 9. Breakpoints!
- 14. Go get some exploit kits regexps on http://www.malwaresigs.com/
- 15. Dyndns, .in, .cn, etc http://mirror1.malwaredomains.com/files/dynamic_dns.txt
- 18. Setting referrer Disabling HTTP cookies
- 20. The end.