+- Sinisterly (https://sinister.li)
+-- Forum: Coding (https://sinister.li/Forum-Coding)
+--- Forum: Coding (https://sinister.li/Forum-Coding--71)
+--- Thread: HiddenRequest -- Invisible WebRequests (/Thread-HiddenRequest-Invisible-WebRequests)
HiddenRequest -- Invisible WebRequests - Shebang - 08-12-2013
Not much introduction needed on this one, fairly straightforward. Just add this
as a reference, and import "HiddenRequest". Create a new HiddenRequest variable, and use
it just like a WebClient. Requests made will not show up in HTTP monitors such as Fiddler or Charles.
Download | Virus Scan
as a reference, and import "HiddenRequest". Create a new HiddenRequest variable, and use
it just like a WebClient. Requests made will not show up in HTTP monitors such as Fiddler or Charles.
Download | Virus Scan
RE: HiddenRequest -- Invisible WebRequests - ViolentReality - 08-12-2013
Oo, sounds good. I'll try it out at some point when I get some spare time!
RE: HiddenRequest -- Invisible WebRequests - loyalty - 08-18-2013
Code:
internal sealed class CookieClient : WebClient
{
private HttpWebRequest Request;
public CookieContainer Cookies = new CookieContainer();
protected override WebRequest GetWebRequest(Uri address)
{
Request = (HttpWebRequest)base.GetWebRequest(address);
Request.Timeout = 8000;
Request.ReadWriteTimeout = 30000;
Request.KeepAlive = false;
Request.CookieContainer = Cookies;
Request.Proxy = null;
return Request;
}
public void ClearCookies()
{
Cookies = new CookieContainer();
}
}well it is straight from the Net Seal License files from Aeonhack....?
RE: HiddenRequest -- Invisible WebRequests - Shebang - 08-18-2013
(08-18-2013, 09:27 PM)loyalty Wrote:Code:internal sealed class CookieClient : WebClient { private HttpWebRequest Request; public CookieContainer Cookies = new CookieContainer(); protected override WebRequest GetWebRequest(Uri address) { Request = (HttpWebRequest)base.GetWebRequest(address); Request.Timeout = 8000; Request.ReadWriteTimeout = 30000; Request.KeepAlive = false; Request.CookieContainer = Cookies; Request.Proxy = null; return Request; } public void ClearCookies() { Cookies = new CookieContainer(); } }
well it is straight from the Net Seal License files from Aeonhack....?
No, I was playing around with WebClients.. Still pretty much the same thing. Damn.
RE: HiddenRequest -- Invisible WebRequests - idb - 08-21-2013
Unfortunately this doesn't protect against HttpAnalyzer
RE: HiddenRequest -- Invisible WebRequests - Shebang - 08-21-2013
(08-21-2013, 06:22 AM)idb Wrote: Unfortunately this doesn't protect against HttpAnalyzer
Are you referring to IE Inspector's product? If so, yes, but I haven't figured out (or found any forum program) that avoids it.
RE: HiddenRequest -- Invisible WebRequests - idb - 08-21-2013
(08-21-2013, 01:46 PM)shebang Wrote:(08-21-2013, 06:22 AM)idb Wrote: Unfortunately this doesn't protect against HttpAnalyzer
Are you referring to IE Inspector's product? If so, yes, but I haven't figured out (or found any forum program) that avoids it.
I am, and the reason why you haven't found any program that avoids it is because it doesn't need to be set as a system proxy in order to retrieve the requests/responses like Fiddler/Charles. It inserts itself in the HTTP/S stack. If you can find a way around this logging your shit while still using the HTTP protocol, you will be my hero, sir.
RE: HiddenRequest -- Invisible WebRequests - Shebang - 08-21-2013
(08-21-2013, 09:13 PM)idb Wrote:(08-21-2013, 01:46 PM)shebang Wrote:(08-21-2013, 06:22 AM)idb Wrote: Unfortunately this doesn't protect against HttpAnalyzer
Are you referring to IE Inspector's product? If so, yes, but I haven't figured out (or found any forum program) that avoids it.
I am, and the reason why you haven't found any program that avoids it is because it doesn't need to be set as a system proxy in order to retrieve the requests/responses like Fiddler/Charles. It inserts itself in the HTTP/S stack. If you can find a way around this logging your shit while still using the HTTP protocol, you will be my hero, sir.
So essentially there's no way to actually secure requests through HTTP? Good to know.
RE: HiddenRequest -- Invisible WebRequests - Xanii - 08-21-2013
Just encrypted your network traffic and you will be all good... You don't really need to be hidden from the server. But thanks for the share.
RE: HiddenRequest -- Invisible WebRequests - idb - 08-22-2013
(08-21-2013, 09:26 PM)shebang Wrote:(08-21-2013, 09:13 PM)idb Wrote:(08-21-2013, 01:46 PM)shebang Wrote:(08-21-2013, 06:22 AM)idb Wrote: Unfortunately this doesn't protect against HttpAnalyzer
Are you referring to IE Inspector's product? If so, yes, but I haven't figured out (or found any forum program) that avoids it.
I am, and the reason why you haven't found any program that avoids it is because it doesn't need to be set as a system proxy in order to retrieve the requests/responses like Fiddler/Charles. It inserts itself in the HTTP/S stack. If you can find a way around this logging your shit while still using the HTTP protocol, you will be my hero, sir.
So essentially there's no way to actually secure requests through HTTP? Good to know.
You could sign your requests somehow. Think OAuth or perhaps something similar to what Instagram does. Basically the same thing the user above mentioned. You just need a way to secure your traffic regardless of whether or not the requests are being logged. The main goal is making it so your traffic isn't in plain text for the world to see.