LCF-AT Posted September 12, 2019 Share Posted September 12, 2019 Hi guys, just have another small question about monitoring tools.I am still looking for any tool what can monitor whole traffic from computer to internet (not only browser) similar like Wireshark just more simple.On internet I found diffrent tools I have test some of them and see that they only capture http protocol and not https like tools from this site.. http://www.nirsoft.net/network_tools.html ...many helpfully and simple usable tools but no https support.Does anyone know some similar simple tools who support https I can check request & response headers?Anyway if WinInet / Windows Socket etc functions are used. greetz Link to comment Share on other sites More sharing options...
whoknows Posted September 12, 2019 Share Posted September 12, 2019 (edited) https://www.charlesproxy.com/ https://www.telerik.com/fiddler Edited September 12, 2019 by whoknows Link to comment Share on other sites More sharing options...
NeWOT Posted September 13, 2019 Share Posted September 13, 2019 damn so you can unpack themida but you can't search? 1 Link to comment Share on other sites More sharing options...
Teddy Rogers Posted September 13, 2019 Share Posted September 13, 2019 There is nothing wrong with posting asking for recommendations for suitable tools. Some people here may have useful advice and tips to share about a particular tool. We can't all be proficient in everything... Ted. Link to comment Share on other sites More sharing options...
Progman Posted September 13, 2019 Share Posted September 13, 2019 Windows API monitoring tools might also be suitable for this purpose. Since you are dealing with HTTPS, F12 in the web browser is the simplest for me usually Link to comment Share on other sites More sharing options...
Kurapica Posted September 13, 2019 Share Posted September 13, 2019 @LCF-AT : I recommend this https://www.httpdebugger.com/ 2 Link to comment Share on other sites More sharing options...
Loki Posted September 13, 2019 Share Posted September 13, 2019 Do these tools act as a network level sniffer like wireshark, or more like a proxy? Fairly sure it's the latter which is a different ask (capturing everything vs capturing stuff from an app you have set to go through a proxy) Link to comment Share on other sites More sharing options...
Xyl2k Posted September 13, 2019 Share Posted September 13, 2019 telerik fiddler or zap proxy is what you need. for https you need to forge a certificate to get traffic in 'clear' both fiddler and zap proxy can do that, otherwise you can also install pfsense on a vm and add a squid proxy packet, then redirect all on it. that what i do on some of my machines, all my network card is deactivated on windows and all my internet traffic is send into my pfsense vm, i've also a debian in a secondary vm who run and save all syslog it act as 'log vault', and every apps on windows who want to 'internet' have their own user/pass for squid proxy, it took a bit of time to install all of this and maintain it but it make logs reading easier and i also have a whitelist with filterdns and pfBlockerNg. it's a very paranoid setup but it work good. and in case of attack i guess i'm gonna have enought datas too see what have gone wrong and how. Link to comment Share on other sites More sharing options...
Kurapica Posted September 13, 2019 Share Posted September 13, 2019 @Loki HTTP debugger is able to intercept and modify traffic too, I think it's decent for seeing what happens in the background with an easy to use GUI I'm not promoting it but it saved me much time when I was testing some activation process via HTTP in the background 1 Link to comment Share on other sites More sharing options...
Xyl2k Posted September 13, 2019 Share Posted September 13, 2019 I wouldn't recommand HTTP debugger, HTTP Analyzer, and all thoses similar paid software when you have freewares soft like fiddler, etc who have the same features. you can also put 'breakpoint' like http debugger with fiddler, to modify http requests on the fly or 'repeat them. Link to comment Share on other sites More sharing options...
Loki Posted September 13, 2019 Share Posted September 13, 2019 7 hours ago, Kurapica said: @Loki HTTP debugger is able to intercept and modify traffic too, I think it's decent for seeing what happens in the background with an easy to use GUI I'm not promoting it but it saved me much time when I was testing some activation process via HTTP in the background Nice one. I generally use Fiddler but have seen stuff bypass it too and could only capture via wireshark, hence the question. Not tried http debugger though Link to comment Share on other sites More sharing options...
LCF-AT Posted September 13, 2019 Author Share Posted September 13, 2019 Hi guys, thanks for your answers so far. 1.) As I said I am looking for a tool what can capture whole incomming / outgoing traffic from my PC (Windows Socket / WinInet / etc all) not just my browser. 2.) It should support https capturing = logging send / received request / response header datas.Must be use / setup a certificate for this to decrypt. That are the basic features I am looking for.So the fiddler tool cant do that also it dosent support Windows Socket functions to log running apps on my PC,only WinInet works. greetz Link to comment Share on other sites More sharing options...
Xyl2k Posted September 14, 2019 Share Posted September 14, 2019 instlal pfsense then Link to comment Share on other sites More sharing options...
Leila.Morar48 Posted October 8, 2019 Share Posted October 8, 2019 HTTP Analzyer PRO Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now