Tampering with HTTP responses

in The Banana Bar
Subscribe to Tampering with HTTP responses 7 posts, 3 voices



Marti Scriptwright
FirefoxX11

Hopefully we all know about Tamper Data, Modify Headers and similar add-ons...

but my question is does anyone know how to tamper with the response instead of the actual request with an addon?

 
Yansky Scriptwright
FirefoxWindows

You might be able to do it with Fiddler: http://www.fiddler2.com/fiddler2/
http://www.fiddlertool.com/Fiddler/Help/hookup....

 
Marti Scriptwright
FirefoxX11

Yansky wrote:
with Fiddler
Hmmm well that doesn't help cross-platform... I was hoping it could be an addon for Firefox... I know I can modify it via a proxy but instructing people to install a proxy and a rule set isn't exactly the easiest thing. Thanks for the shot.

 
Yansky Scriptwright
FirefoxWindows

Maybe this?
https://addons.mozilla.org/en-US/firefox/addon/...

 
Marti Scriptwright
FirefoxX11

Yansky wrote:
Maybe this?
Getting closer but still overkill for general users... it does look like XPCOM offers a HTTP traffic intercept but the article is a bit dated... I'll have to see if it's still available... Might even have to venture back to Firefox 2 where you could change the actions of certain MIME types (Content-Types). Interesting that I can turn FF into a web server though ;) :)

 
Avindra V.G. Scriptwright
FirefoxWindows

Marti wrote:
tamper with the response instead of the actual request

Yes, this is definitely possible. I'm working it into an addon which I'll finish when I get time. You have to use the observer service and monitor the http-on-modify-request or http-on-examine-response events.

 
Marti Scriptwright
FirefoxX11

Avindra V.G. wrote:
I'm working it into an addon
I'll be eager to see this.