If you turn on “CONNECTS” in Fiddler, you can see the TLS/SSL version in Inspectors -> TextView To turn on Connects, go to Rules in the menu bar and remove the check from “Hide CONNECTs” Note: Decrypt HTTPs traffic must be disabled Reference: Viewing HTTPS Handshakes in Fiddler
Apple publishes an application called PacketLogger. You can download it by going to https://developer.apple.com/download/more/?=for%20Xcode (or if you have Xcode installed, go to Xcode > Open Developer Tool > More developer tools), then loging in with your Apple developer account, search for Additional Tools and download the latest version (or if you have Xcode installed, download … Read more
I was faced with this issue and got nowhere after a lot of research. Basically all available sniffers rely on the network driver stack, and Windows don’t expose localhost calls through it. What I ended up using was a tool called SocketSniffer, that peeks at Winsock’s calls and monitor TCP, UDP socket connections. It helped … Read more
Update (2021-04-01): Paros no longer can be easily installed and run on many OS’s due to using an extremely old version of Java. However there is now OWASP ZAP which is a fork of Paros and can be used to achieve the same ends. Basic steps are: Install ZAP’s root CA certificate on your iOS … Read more
you can do this with help of WireShark. I am listing steps here Install WireShark on your computer now we have to create Android virtual device(AVD) so we will download Android SDK from official site. Android SDK come with emulator for testing after setting up Android SDK, create a Android virtual Device(AVD) on which we … Read more
If you’re using Windows it’s not possible – read below. You can use the local address of your machine instead and then you’ll be able to capture stuff. See CaptureSetup/Loopback. Summary: you can capture on the loopback interface on Linux, on various BSDs including Mac OS X, and on Digital/Tru64 UNIX, and you might be … Read more