Questions tagged [api-hacking]
The api-hacking tag has no usage guidance.
8
questions
0
votes
1
answer
150
views
How could I extract a certificate and private key out of a exe?
I’m trying to get API responses from a backend service to make a server emulator for a game called NBA 2k17, but I can't get to them cause they are encrypted so I need to impersonate the client to get ...
1
vote
0
answers
20
views
How to deal with this frustrating case of JWT auth bearer + async token?
Here's the case:
I'm analyzing an API and the way JWT was implemented seems to be anti-tampering. There's two components that must be there or there's an authentication error:
Auth Bearer -> Stays ...
0
votes
1
answer
106
views
Reversing Games like Manfred dis
I've looked at as many resources on Manfred and Manfred's work
I've watched the DEFCON 25 Live talk about what he hacked.
Here
I've also looked, listened and read the dark net diaries Part One -
...
0
votes
1
answer
631
views
Windows User Identification / HWID Limiting
I've been playing a game that has an HWID limit and a bunch of other limitations, such as:
a) Cannot be ran in a VM
b) Cannot be ran using Sandboxie and other Sandbox environments
c) Limits 3 ...
0
votes
0
answers
42
views
There is a course in which they teach you to use WinAFL?
I would like to know if there is a course that begins in a basic way, such as how to use winAFL to find bugs in app desktop.
2
votes
1
answer
449
views
Reverse Engineering API's of Browser games
I like the idea of Reverse Engineering API's and creating bots/scripts for Browser games. However, I am a beginner in the Computer Science field. I recently started my Computer Science Degree and ...
2
votes
0
answers
125
views
Accessing Windows 10 Feedback Hub Data
I'm trying to make a website that displays the feedback from the Windows 10 Feedback Hub but i have met a roadblock. I'm using Fiddler 4 (Fiddler Everywhere doesn't have support for UWP yet and ...
0
votes
0
answers
108
views
APi mocking and redirecting target to localhost api
Suppose I have got an application which sends request (GET,POST) to google.com:1010/api/req
Is it possible to simulate the api on localhost and redirect requests sent to google.com:1010/api/req to ...