Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Connect HTTP Proxy with Authorization with Fiddler

Tags:

proxy

fiddler

I would like to connect to a HTTP Proxy with Fiddler Core.

I'm using the oSession['X-OverrideGateway'] = "HOSTNAME:PORT" code to do it.

Now authentication is needed for the proxy. I see in other question a solution. It says:

oSession.oRequest["Proxy-Authorization"] = "Basic sOMeBASE64eNCODEdSTRING=";

Where the hash at the end is the Base64 coding of the 'username:password'

My question about this workaround:

It results a HTTP_PROXY_AUTHORIZATION HTTP header to my requests. Not just from fiddler to the proxy, but also from the proxy to the web.

Shouldn't it be removed by the proxy?

Is there a workaround with Fiddler so I can connect a HTTP Proxy with credentials without HTTP headers?

I would like to use Fiddler Core.

UPDATE:

As I can see the image

Http Proxy Authentication process

I only have to provide the Proxy-Authorization header if a Proxy Authentication header was in a response with a status code. It seams ok. But in fiddler core how can I reach the previous response? If I just simply save into a field variable it won't work, since the order of the traffic is not

Request, Response, Request, Response, etc.

But mor like

Request, Response (407), Request, Request, etc.

In the 2nd example on the 3rd Request we shouldn't send the Proxy Authorization header but we will, since the last Response was a 407.

Any ideas?

like image 470
Tomi Avatar asked Nov 29 '18 07:11

Tomi


People also ask

Does Fiddler act as a proxy?

Fiddler Classic and fiddler Everywhere are special-purpose proxy server tools for debugging web traffic from applications like browsers. They're used to capture and record this web traffic and then forward it onto a web server.

How does Telerik Fiddler work?

Progress® Telerik® Fiddler Everywhere is a web-debugging tool that monitors, inspects, edits, and logs all HTTP(S) traffic, and issue requests between your computer and the Internet, and fiddles with incoming and outgoing data. It is a high-performance, cross-platform proxy for any browser, system, or platform.

How do I get rid of Fiddler proxy?

Go to the Start menu and type Proxy settings. Go to Manual proxy setup and verify that the Fiddler proxy IP and Port are removed. By default, when your system is not using other proxies, the Use a proxy server is turned off with both the Address and Port fields empty.


1 Answers

HTTP_PROXY_AUTHORIZATION header is required for proxy to work.

Please refer to the HTTP RFC section 4.4 https://www.rfc-editor.org/rfc/rfc7235#section-4.4

As it mentions, if there are multiple proxies in a chain, your proxy server may forward the headers ahead.

The difference you see with Fiddler Core and Proxifier could be due difference in their configuration.

like image 186
Amol Avatar answered Oct 16 '22 08:10

Amol