Login Register






HiddenRequest -- Invisible WebRequests filter_list
Author
Message
HiddenRequest -- Invisible WebRequests #1
Not much introduction needed on this one, fairly straightforward. Just add this
as a reference, and import "HiddenRequest". Create a new HiddenRequest variable, and use
it just like a WebClient. Requests made will not show up in HTTP monitors such as Fiddler or Charles.

Download | Virus Scan
[Image: CDUAq9d.png]

Reply

RE: HiddenRequest -- Invisible WebRequests #2
Oo, sounds good. I'll try it out at some point when I get some spare time! Biggrin

Reply

RE: HiddenRequest -- Invisible WebRequests #3
Code:
internal sealed class CookieClient : WebClient { private HttpWebRequest Request; public CookieContainer Cookies = new CookieContainer(); protected override WebRequest GetWebRequest(Uri address) { Request = (HttpWebRequest)base.GetWebRequest(address); Request.Timeout = 8000; Request.ReadWriteTimeout = 30000; Request.KeepAlive = false; Request.CookieContainer = Cookies; Request.Proxy = null; return Request; } public void ClearCookies() { Cookies = new CookieContainer(); } }

well it is straight from the Net Seal License files from Aeonhack....?
[Image: hObYm.gif]

Reply

RE: HiddenRequest -- Invisible WebRequests #4
(08-18-2013, 09:27 PM)loyalty Wrote:
Code:
internal sealed class CookieClient : WebClient { private HttpWebRequest Request; public CookieContainer Cookies = new CookieContainer(); protected override WebRequest GetWebRequest(Uri address) { Request = (HttpWebRequest)base.GetWebRequest(address); Request.Timeout = 8000; Request.ReadWriteTimeout = 30000; Request.KeepAlive = false; Request.CookieContainer = Cookies; Request.Proxy = null; return Request; } public void ClearCookies() { Cookies = new CookieContainer(); } }

well it is straight from the Net Seal License files from Aeonhack....?

No, I was playing around with WebClients.. Still pretty much the same thing. Damn.
[Image: CDUAq9d.png]

Reply

RE: HiddenRequest -- Invisible WebRequests #5
Unfortunately this doesn't protect against HttpAnalyzer

Reply

RE: HiddenRequest -- Invisible WebRequests #6
(08-21-2013, 06:22 AM)idb Wrote: Unfortunately this doesn't protect against HttpAnalyzer

Are you referring to IE Inspector's product? If so, yes, but I haven't figured out (or found any forum program) that avoids it.
[Image: CDUAq9d.png]

Reply

RE: HiddenRequest -- Invisible WebRequests #7
(08-21-2013, 01:46 PM)shebang Wrote:
(08-21-2013, 06:22 AM)idb Wrote: Unfortunately this doesn't protect against HttpAnalyzer

Are you referring to IE Inspector's product? If so, yes, but I haven't figured out (or found any forum program) that avoids it.

I am, and the reason why you haven't found any program that avoids it is because it doesn't need to be set as a system proxy in order to retrieve the requests/responses like Fiddler/Charles. It inserts itself in the HTTP/S stack. If you can find a way around this logging your shit while still using the HTTP protocol, you will be my hero, sir.

Reply

RE: HiddenRequest -- Invisible WebRequests #8
(08-21-2013, 09:13 PM)idb Wrote:
(08-21-2013, 01:46 PM)shebang Wrote:
(08-21-2013, 06:22 AM)idb Wrote: Unfortunately this doesn't protect against HttpAnalyzer

Are you referring to IE Inspector's product? If so, yes, but I haven't figured out (or found any forum program) that avoids it.

I am, and the reason why you haven't found any program that avoids it is because it doesn't need to be set as a system proxy in order to retrieve the requests/responses like Fiddler/Charles. It inserts itself in the HTTP/S stack. If you can find a way around this logging your shit while still using the HTTP protocol, you will be my hero, sir.

So essentially there's no way to actually secure requests through HTTP? Good to know.
[Image: CDUAq9d.png]

Reply

RE: HiddenRequest -- Invisible WebRequests #9
Just encrypted your network traffic and you will be all good... You don't really need to be hidden from the server. But thanks for the share.

Reply

RE: HiddenRequest -- Invisible WebRequests #10
(08-21-2013, 09:26 PM)shebang Wrote:
(08-21-2013, 09:13 PM)idb Wrote:
(08-21-2013, 01:46 PM)shebang Wrote:
(08-21-2013, 06:22 AM)idb Wrote: Unfortunately this doesn't protect against HttpAnalyzer

Are you referring to IE Inspector's product? If so, yes, but I haven't figured out (or found any forum program) that avoids it.

I am, and the reason why you haven't found any program that avoids it is because it doesn't need to be set as a system proxy in order to retrieve the requests/responses like Fiddler/Charles. It inserts itself in the HTTP/S stack. If you can find a way around this logging your shit while still using the HTTP protocol, you will be my hero, sir.

So essentially there's no way to actually secure requests through HTTP? Good to know.

You could sign your requests somehow. Think OAuth or perhaps something similar to what Instagram does. Basically the same thing the user above mentioned. You just need a way to secure your traffic regardless of whether or not the requests are being logged. The main goal is making it so your traffic isn't in plain text for the world to see.

Reply