- Microsoft windows 7 or higher, possibly a virtual machine.
- Telerik's Fiddler (or burpsuite) (https://www.telerik.com/fiddler)
- 3utools desktop application (3utools.com)
- Dirbuster
- Install 3utools.
- Install Telerik's Fiddler (or burpsuite)
- Close 3utools if open, in the tray as well.
- Launch Fiddler and enable the proxy, default it is running on port 8888.
- Launch 3utools and press the settings icon on the top right.
- Now click proxy settings and enter localhost with the port from fiddler.
- In fiddler you can now click the hitmark icon, drag it onto 3utools and turn decode on.
- You will now be able to see the SSL traffic of 3utools through fiddler.
- Any operation that is done by communicating through their api like for example a search query will appear in fiddler.
- One can click the requrest and choose raw to see what the 3utools api responded to the application.