Skip to main content

Questions tagged [api]

`Application Programming Interface` defines an interface that controls the interactions between a module and its users.

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

How does Rohitab ApiMonitor capture API calls?

When I use EasyHook to hook API calls, the first bytes of the hooked API function are replaced with a so called "trampoline" which is a jump into EasyHook code. For example this is TextOutW ...
Elmue's user avatar
  • 441
0 votes
0 answers
30 views

How to use reverse engineering to replicate websocket request

how I can use reverse engineering technique to get known how websocket is working on website. What data my browser is sending to websocket so it reply with data. How I can replicate that process as ...
innocent98's user avatar
0 votes
0 answers
51 views

How to use reverse engineering to get paginated threads id on facebook messenger

I'm trying to replicate websocket request in python. I want to get paginated results of threads id that appears after scrolling down the friends chats section. Seems messenger uses websocket for it. ...
Wippar's user avatar
  • 1
1 vote
1 answer
56 views

Ghidra API: Getting the parameter storage locations given a FunctionSignature

I want to create a tool that help analyzing certain code. One feature is analyzing calls that are made through a global function pointer. The first parameter is usually a constant pointer, which I ...
Michael Karcher's user avatar
0 votes
0 answers
75 views

Recognize API calls of an APK

I have an Apk file for an app that functions as an AI image generator. I want to identify the specific API call responsible for the AI image generation. How can I do it?
Saad's user avatar
  • 101
0 votes
1 answer
345 views

How could I extract a certificate and private key out of a exe?

I’m trying to get API responses from a backend service to make a server emulator for a game called NBA 2k17, but I can't get to them cause they are encrypted so I need to impersonate the client to get ...
Botytec's user avatar
1 vote
0 answers
302 views

Snapchat Internal API

I have been trying to find a way to access Snapchats internal API and I have found stuff like: https://github.com/transitive-bullshit/snapchat https://github.com/NSExceptional/SnapchatKit https://...
Titanium's user avatar
1 vote
0 answers
101 views

How do I reverse engineer a file uploading api?

The API is pretty old and is written in C#, I tried debugging the API calls with mitmproxy. This is the successful API call (manually uploading file) but when I tried curling it, it gave me this error ...
cantcode023's user avatar
1 vote
1 answer
707 views

Decoding API response of unknown encoding?

I'm using Proxyman to inspect the api requests of an app I use. Most of the data is returned in plain JSON blobs but there is one response which is returning data encoded/encrypted. How can I go ...
Nerdsie's user avatar
  • 11
2 votes
0 answers
818 views

Backtrace HTTP request over few modules when using FRIDA

I am in the process of reverse engineering an IOS IPA using HOPPER and FRIDA. First, I started with POSTMAN, which records the app's HTTP requests. What I find interesting is that the app uses a so-...
Kai Schiffer's user avatar
2 votes
1 answer
372 views

IDA API: Writing a plugin - How can I ensure that analysis has completed?

I have been reading through the API documentation here and As far as I can tell there are three ways to wait for the analysis to finish. get_auto_state auto_wait auto_is_ok Looking at the API if ...
LUser's user avatar
  • 793
1 vote
0 answers
73 views

Understanding the leap of logic in "Secrets of Reverse Engineering"

In Chapter 5 of the book "Secrets of Reverse Engineering" (by Eldad Eilam), the author goes about reversing an undocumented "table" API functions in the NTDLL library. The logic ...
nanoman's user avatar
  • 111
2 votes
1 answer
3k views

finding rest api urls after decompiling apk

i have two apk files , when i decompile them using apktool i can take a look at decompile code , so here is what really confuse me , in the first apk if i searched the hole files for strings witch ...
Hothifa Farh's user avatar
2 votes
1 answer
526 views

Reverse Engineering API's of Browser games

I like the idea of Reverse Engineering API's and creating bots/scripts for Browser games. However, I am a beginner in the Computer Science field. I recently started my Computer Science Degree and ...
john doe's user avatar
1 vote
1 answer
354 views

Accessing Call String of CALLOTHER Pcode Instruction via Java API?

Is there a way to access the call string of a CALLOTHER Pcode instruction when iterating over the Pcode in Java? The listing below shows an example of what I mean: 048 ...
Melvin's user avatar
  • 113
1 vote
0 answers
294 views

Determining the encoding of an unknown image format [closed]

I'm trying to reverse engineer a REST API and there is an endpoint that delivers images. Some of them are jpegs but other ones look like they're base64 encoded, except they don't appear to be, as they ...
ground_head's user avatar
1 vote
2 answers
286 views

advapi32.dll changes name of function during forwarding of exports

I'm trying myself at writing a manual mapper, for injection of DLLs into other processes. I've come to the point, where I've written a simple "Hello World" .dll, that I'm trying to inject ...
Burgesstorm's user avatar
1 vote
0 answers
122 views

Duo MFA Enrollment API Parameters

Not sure if this is the right forum. I want to enroll my device for Duo MFA without using the Duo app. Duo uses simple HOTP codes, so I used this script to find the HOTP secret and enter it manually ...
Anonymous's user avatar
1 vote
1 answer
604 views

How to extract static API sequences of a PE file?

How does one extract the static API sequences of a PE file? I don't mean the imports listed in the imports segment. I am currently using different RE tools like Ghidra, IDA Pro, and Binary Ninja. ...
nidorinas's user avatar
0 votes
0 answers
194 views

How to use API Monitor to filter function parameters?

I am monitoring a process using API monitor. I'm getting a lot of API calls unrelated to what I am interested in monitoring. I know about the Display Filter and have been using to filter API Names to ...
DohnJoe's user avatar
  • 65
1 vote
2 answers
470 views

learning detour and code injection

i am looking to expand my knowledge so i can someday(hopefully within few months) be able to join the reverse engineering community, probably in the anti-virus/defense field. i was wondering, since ...
newB's user avatar
  • 19
7 votes
1 answer
11k views

Ghidra Control Flow Graph

Lately I'm using Ghidra and I don't find the API to get the control flow graph of a given function. Can someone help me? Thank you in advance. EDIT: it is different from the other question (link) ...
Benny's user avatar
  • 73
0 votes
1 answer
204 views

decomplied apk with bad parameters

I'm trying to reverse engineering an android app API so this is what I tried: First the app was using Okhttp certificate pinning and I couldn't track the URLs with Charles then I tried this method ...
Amin's user avatar
  • 71
1 vote
1 answer
508 views

WebSocket debugging in Javascript app gives "401 Unauthorized" [closed]

I'm attempting to reverse engineer a private API used by an Android app that makes use of WebSockets. These requests are made from JavaScript inside a WebView. I use Charles to intercept both HTTP ...
FailedShack's user avatar
0 votes
1 answer
138 views

Reverse Engineering Grocery Software API

Introduction So I have a peer to peer app that allows customers to request jobs at their own price and have the job fulfilled by a freelancer in the community. The common jobs requested as of recent ...
Solomon Antoine's user avatar
1 vote
1 answer
255 views

Reverse engineering Nextbike API and random 16 character pre-shared key

I am trying to get to know how Nextbike's API works. It's not a public API but capturing the outgoing traffic with my phone I can see all the traffic and endpoints that are being contacted. I've ...
javierdemartin's user avatar
7 votes
1 answer
2k views

How does API call work on Android (NDK)?

In windows platform, an application usually references its IAT(Import Access Table) to get the address of the APIs it wants, then call it. Then some mechanisms are done as demonstrated here nicely. ...
Hyeonseo Yang's user avatar
3 votes
2 answers
6k views

How to use API monitor on specific process

I want to monitor specific process with API Monitor but I didn't understand how do I do it please. I will happy to understand that. By the way, can I monitor process while I debugging it with ida?
Keystone's user avatar
  • 523
3 votes
1 answer
2k views

How to debug slow Windows API calls?

My machine at work has recently been updated to Windows 10, from Windows 7, and it has become incredibly slow. The IT has installed a bunch of new tools for security and protection after the upgrade ...
Ali's user avatar
  • 149
2 votes
1 answer
798 views

How to see ReadFile results with ProcMon

I running procmon to monitor my process, and see that my process uses ReadFile API. How can I see which data the process received when it uses ReadFile?
pointers's user avatar
1 vote
0 answers
574 views

How to hook Windows syscall ntcreatefile an get path to saved file from notepad? Python 3 [closed]

I need to automate some text editing and encryption. I've been doing some research and it seems uhooker can detect when a file is saved or when a program is closed, but I didn't see any examples to ...
Jasong's user avatar
  • 71
0 votes
2 answers
592 views

Smali vs Decompilation for malware detection in apk files

When it comes to reversing apk files, I understand that are mainly 2 approaches. The first involves using a decompilation engine which will try to produce java files which are more readable but can be ...
Lew Wei Hao's user avatar
3 votes
1 answer
5k views

How to print all functions of a binary using radare2 c/c++ API

I need to write a program (in c++), that among other things needs to know all functions of a given PE file. Basically, It's an equivalent of opening a binary with "r2 -A binary_name" and then entering ...
E. Fedorov's user avatar
1 vote
1 answer
439 views

What are ways to find Windows constant macro definitions?

This happens a lot where when I am reversing a program in a disassembler or debugger, I run into something like this: push eax ; lParam push 1 ; wParam push 80h ...
the_endian's user avatar
  • 1,870
0 votes
2 answers
205 views

Parseable Windows API documentation

For a project I'm in need of a parseable version of the Windows API (i.e. the functions described in msdn). I tried to crawl it myself, but there seem to be more than 5 formats for signatures and ...
Nordwald's user avatar
  • 2,906
-1 votes
2 answers
230 views

which windows API called when execute wmic qfe get hotfixid command?

which windows API called when execute this command wmic qfe get hotfixid command?
forbiddenhi's user avatar
0 votes
1 answer
322 views

What is the relationship between the Windows API and the C run time library? [closed]

I have two reports of static and dynamic malware analysis. There are some APIs of MSVCRT's dll in my static report, which are missing in the dynamic report. (such as _p_commode, _setusermatherr, etc.) ...
Shirin's user avatar
  • 1
1 vote
1 answer
716 views

Reverse-engineer digest http authentication

I have an iOS app which uses digest HTTP authentication with nonce which expires every 5 minutes. The client calculates response as following: HA1=MD5(username:realm:password) HA2=MD5(method:...
Nikolay Derkach's user avatar
1 vote
1 answer
982 views

NetEase Cloud Music: Getting search results in API

I'm trying to make a search request with NetEase Cloud Music's API. I have found the URL used for sending a search request over POST which is: http://music.163.com/api/search/get/web with x-www-form-...
James Heald's user avatar
11 votes
1 answer
4k views

Generating Snapchat Snaptags ("QR" Codes)

For those that haven't seen, Snapchat now has a special type of image based code that allows you to quickly add friends by pointing the camera at the screen, similar to a QR code, called "Snaptags". ...
Tyrone's user avatar
  • 111
1 vote
1 answer
301 views

cost, time and tools had Google reverse-engineered Java packages? [closed]

In the context of Oracle vs. Google: This is not a case where Google reverse-engineered Oracle’s Java packages to gain access to unprotected functional elements contained therein. page 48 ...
Thufir's user avatar
  • 119
5 votes
1 answer
969 views

Finding how IMDB creates its image codes

When you look at any IMDB image page, the movie poster image has a url of this form: http://ia.media-imdb.com/images/M/MV5BMTIxOTY1NjUyN15BMl5BanBnXkFtZTcwMjMxMDk1MQ@@._V1_SX214_AL_.jpg or more ...
Alex Beals's user avatar
9 votes
1 answer
4k views

IDA pro and default windows (lib) functions

Why can't IDA Pro successfully determine which exact functions are called after successful disassembly of inline functions? For example, statically linked functions like printf(), memcpy(), memset() ...
n00b's user avatar
  • 581
2 votes
2 answers
431 views

API for LockState Wireless Internet Thermostat

I want to develop a web-based API in Rails for some LockState wifi programmable thermostats, so that other different application can control these thermostats. But I'm cannot find any resource about ...
rony36's user avatar
  • 121