Exploit kits are one of the top vectors to distribute malware on a large scale. In order to better fight this threat, it is important to be able to understand how they work. EK traffic captures are publicly available from various sources these days but there lacks a proper framework for analysts to parse them in a friendly manner. Typically, PCAPs can be loaded in Wireshark or Security Onion but some may prefer to view and study EKs in a more user-friendly way that lets them create rules quickly and extract interesting artifacts. This talk shows how to use the Fiddler web debugger for that very purpose via an integrated configuration file (to be released) specifically for EKs. Malware analysts will be able to write and test powerful regular expressions that will help them in their daily job for EK classification.