Questions tagged [api-reversing]
The api-reversing tag has no usage guidance.
23
questions
0
votes
0
answers
81
views
i would like to know how to reverse engineer a steam pc game thats limited to a 30min demo ill explain
I Have a steam game its a demo not very big company or anything you are limited to only 30 min of game play then at the end of the 30 min your session ends and you are brought to a screen encouraging ...
0
votes
1
answer
115
views
How could I extract a certificate and private key out of a exe?
I’m trying to get API responses from a backend service to make a server emulator for a game called NBA 2k17, but I can't get to them cause they are encrypted so I need to impersonate the client to get ...
- 1
1
vote
0
answers
119
views
Snapchat Internal API
I have been trying to find a way to access Snapchats internal API and I have found stuff like:
https://github.com/transitive-bullshit/snapchat
https://github.com/NSExceptional/SnapchatKit
https://...
- 11
3
votes
0
answers
46
views
How do I make a text field editable when the app is designed to autofill OTP SMS?
Hello fellow rev engineers,
I'm running an app in an emulator and the problem is that for registration it must autofill the OTP sent by SMS, the text field isn't editable/clickable and I can't advance ...
- 31
1
vote
0
answers
331
views
Bypass SSL pinning for android application
I am trying to analyze the network traffic from an android application for research purpose. I tried few approaches but unable to achieve the results. I am using rooted android emulator.
I tried to ...
- 11
2
votes
0
answers
76
views
Decoding set of byte arrays representing light spectrum
I have a small spectrometer that measures in the spectral range of 740-1070nm. The device is commercial, and used to send the raw data to the manufacturer's server for decoding, but that does not seem ...
- 21
2
votes
0
answers
405
views
How do I hook these js methods/functions with Frida?
I want to hook these methods for the purpose to log the string variables (str) just before they are encrypted by a function (encr). I'm showing only the relevant parts for simplicity.
1-
protected ...
- 21
1
vote
0
answers
18
views
How to deal with this frustrating case of JWT auth bearer + async token?
Here's the case:
I'm analyzing an API and the way JWT was implemented seems to be anti-tampering. There's two components that must be there or there's an authentication error:
Auth Bearer -> Stays ...
3
votes
0
answers
143
views
How do I log a string in smali without its obfuscated function?
I'm reversing engineering an app and after analyzing with man-in-the-middle, I find that it obfuscates its messages to the server so it looks like a gibberish.
String stc = ("msg=" + ...
1
vote
0
answers
244
views
Warframe Network Communication
Warframe is a MMO that has both servers and peer to peer networking, I am looking into the server side of things. What I am wanting to achieve is client communication to a emulated server.
So far I am ...
- 11
0
votes
0
answers
137
views
Heavens gate code
Recommend me please how and what better to reverse the code containing "heavens gate"? What tool to bypass protection? Thank you.
I use Intel Pin
push cs
push 0xa02829
jmp far ...
- 21
0
votes
1
answer
245
views
How to declare a constructor in reversed class?
I wonder how to declare the reference to a constructor to a reversed class, i.e. I have a class say Game and it has a constructor at a certain address.
It is declared like this:
game.h
namespace ...
- 326
1
vote
0
answers
197
views
Bypassing unsupported android TV box!
I have an android TV box called Proximus decoder v4, anyway the android TV box is not supported anymore by the company. When I turn it on I get an update checking, you can't even cancel it, and then I ...
1
vote
1
answer
246
views
Using struct objects and constructors in hooked function
Will try to reword the actual question so it is hopefully more descriptive and clear of what I am after:
So, there is a function main, which I have successfully hooked. The hooked version looks like ...
- 326
1
vote
1
answer
893
views
DetourAttach breaks with Illegal Instruction 0xC000001D
I am trying to detour a function using DetourAttach() in the following fashion:
hooks::logDebug("swresample-3Proxy.log", fmt::format("Try to attach hook. Function {:p}, hook {:p}.",...
- 326
0
votes
0
answers
40
views
There is a course in which they teach you to use WinAFL?
I would like to know if there is a course that begins in a basic way, such as how to use winAFL to find bugs in app desktop.
- 9
1
vote
0
answers
100
views
Reverse Engineering SNES adapter
A good "Hello world" for everybody here
I've bought a Mayflash PC052 adapter to convert an original SNES-mini controller (CLV-202) to a USB port on PC or PS4...
The thing is, this CLV-202 ...
- 11
3
votes
0
answers
256
views
How to disassemble win32 function RegSetValueExW?
I have opened up advapi32.dll in IDA and found out that RegSetValueExW is just a jump to RegSetValueExW_0. And RegSetValueExW_0 seems to be an extern.
How do I actually disassemble RegSetValueExW_0?
- 131
1
vote
1
answer
154
views
analyze how data is read in android usb device
I've a huawei envizion 360, which doesn't provide any API for other application. But I want to read raw data from this device, to an android or to a raspberry-pi for debugging and development purpose. ...
- 111
0
votes
0
answers
138
views
x64dbg & Ghidra change combobox properties app in Visual C++ MFC
Hello in the program code the property combobox is changed from enable to disable I would like to change that the program does not change this property. I have found commands that assign new items to ...
- 1
1
vote
0
answers
44
views
API-Monitor not logging buffer
I have a problem with API-Monitor.
When I try to capture data (here: network traffic), API-Monitor doesn't log the buffer from the recieved data. For send() it works well, but for recv() it doesn't ...
- 31
2
votes
1
answer
424
views
Reverse Engineering API's of Browser games
I like the idea of Reverse Engineering API's and creating bots/scripts for Browser games. However, I am a beginner in the Computer Science field. I recently started my Computer Science Degree and ...
- 21
0
votes
0
answers
100
views
APi mocking and redirecting target to localhost api
Suppose I have got an application which sends request (GET,POST) to google.com:1010/api/req
Is it possible to simulate the api on localhost and redirect requests sent to google.com:1010/api/req to ...
- 619