Fiddler - Extensions
This page contains useful extensions for Fiddler. For best results,
please ensure that you're running the latest version
of Fiddler2.
You can develop your own extensions
using the IFiddlerExtension
interface.
neXpert Performance Report Generator
neXpert is an add-on to Fiddler which aids in performance
testing web applications. Learn more...
Syntax-Highlighting Addons
Three
popular addons for formatting FiddlerScript, HTML, Javascript XML, etc, in one installer (437 kb).
- The RulesTab2 extension is a powerful way to edit your Rules script directly within
Fiddler2.
- The FiddlerScript Editor is a standalone text editor that helps you edit script rules for
Fiddler. It offers syntax highlighting and a Class Explorer to help you
author scripts.
- The SyntaxView Inspector offers syntax-highlighting for HTML, JScript, XML,
and other web formats.
JavaScript Formatter
A simple JavaScript Formatter
(46kb) based on code by Einar Lielmanis from
http://jsbeautifier.org/.
Right-click on any Javascript session and choose Make JavaScript
Pretty, or use the Tools menu option to do this automatically.
Note: Beautification of large JavaScript files may take
several seconds.
Traffic Differ
The Differ tab allows you to compare two traffic profiles.
Download Now.
SAZ Clipboard
The SAZClipboard is a simple extension that allows you to open
a .SAZ file outside of the main Fiddler UI. You can then drag sessions
between this clipboard from the Fiddler UI. Learn more...
Gallery
The Gallery extension displays
thumbnails of all images found among the selected sessions.
RulesTab (sample)
The RulesTab extension is a
lightweight way to tweak your Rules script directly within Fiddler2. This
extension is not as powerful as the RulesTab2 extension above (no syntax
highlighting or Intellisense), but it requires less memory.
Content-Blocking (sample)
The Content Blocker
sample is a simple example of using IAutoTamper to block traffic
based on URI.
Image-Flipper (sample)
The Image
Flipper sample is a simple example of using IAutoTamper to automatically
flip all downloaded images 180 degrees.
3rd-Party Extensions
This list is provided for informational purposes only, and
we make no representations or warranties, either expressed, implied or
statutory, regarding the items, manufacturers, or compatibility of the items
available within. Some of the links below send you to sites that are not under
our control. We are not responsible for the contents of any
linked site or any link contained in a linked site or any changes or updates to
such sites. These links are provided to you only as a convenience, and
the inclusion of any link does not imply endorsement by Eric Lawrence or Microsoft.
Report a problem.
Watcher - Passive Security Auditor
Watcher is a runtime passive-analysis tool for Web applications. It
detects Web-application security issues as well as operational
configuration issues. Watcher provides pen-testers hotspot detection for
vulnerabilities, developers quick sanity checks, and auditors PCI and
OWASP compliance auditing. It looks for issues related to mashups,
user-controlled payloads (potential XSS), cookies, comments, HTTP headers,
SSL, Flash, Silverlight, referrer leaks, information disclosure, Unicode,
and more.
Learn more...
x5s - Automated XSS Security Testing Assistant
x5s aims to assist penetration testers in finding cross-site
scripting vulnerabilities. It's main goal is to help you identify the
hotspots where XSS might occur by:
- Detecting where safe encodings were not applied to emitted
user-inputs
- Detecting where Unicode character transformations might bypass
security filters
- Detecting where non-shortest UTF-8 encodings might bypass security
filters
Learn more...
WCF Binary-Encoded Message Inspector
This inspector allows you to view WCF binary-encoded messages in a plaintext
XML format. Learn
more...
Chad Sowald's Request-To-Code
This extension converts a captured request into the C# or VB.NET code
necessary to issue that request:
http://www.chadsowald.com/software/fiddler-extension-request-to-code
Eyal's Extensions
- Eyal has written two extensions:
Thomas Deml's Export WCAT Script extension
Microsoft Web Capacity Analysis Tool (WCAT) is the tool of choice of
the IIS team as well as the Windows Performance Team. This extension
allows you to export scripts from Fiddler and run them in WCAT.
Learn more...
Per-Response Latency Extension
Oscar Brito's extension enables you to specify latency based on regular
expressions or exact URLs.
Source code is available.
WPAD Server
Dave Risney wrote the
WPAD Server Fiddler extension, which is interesting for a number of
reasons, although most folks will never need it.
XML Request Inspector
- Fedor Vlasov has written an XML
Request viewer that handles x-www-form-urlencoded XML post bodies.
©2010 Eric Lawrence
| 
