Questions tagged [websites]
Interoperating with or deobfuscating web applications, often written in JavaScript client-side and various languages server-side
38 questions
0
votes
0
answers
52
views
WebAssembly Unity base64 decipher
When in game (taming.io) going to leaderboard and searching a player id lets say: 1. It renders player data retrieved from here just fine:
https://account.taming.io/player?id=1
If I type this url (get ...
2
votes
1
answer
243
views
Tools to hook browser's Javascript function implementations
I'm wondering if there is a way to hook or inject code into Javascript's implementation of a native function. For example, print the calling parameters whenever an encrypt() function is called. I not ...
- 121
3
votes
0
answers
93
views
How does google.com detect I'm in Firefox when already using Chrome's user agent
It's well known that google.com doesn't show the microphone search icon in Firefox, probably to incentivize people to use their web browser. (They give it on youtube.com, which is weird for being ...
- 131
3
votes
0
answers
110
views
Yelp: getting documentId for certain operationName
Going through devtools activity for this page (reproducible for any Yelp business page), there's a reference to a GetReviewSummary GraphQL operation in a javascript file. This data shows up in the ...
- 131
0
votes
1
answer
280
views
Can’t download embedded audio
This audio sample that I’m trying to download: https://www.audiotool.com/sample/hard_spinz_-_808 doesn’t appear to be listed when viewing the source code. I’ve looked over the whole page multiple ...
1
vote
0
answers
28
views
Does anyone recognize this jQuery website plugin?
I am working on a site that was made years ago (not be me) and I need to identify a jQuery file manager plugin. This plugin shows a file manager view in a browser and allows the user to visually ...
- 11
2
votes
0
answers
142
views
Twitter scraping using Python
I've been working on a project to reverse-enginner twitter's app to scrape public posts from Twitter using an unofficial API, with Python. (I want to create an "alternative" app, which is ...
- 21
0
votes
1
answer
642
views
Reverse engineer decryption of cookie
TL; DR
Is there any way you might suggest decrypting this cookie? It was saved under the name mail, so I suspect it encrypts an email address:
...
- 101
1
vote
1
answer
160
views
Inbound network queries not appearing in developer tools of browser
When trying to understand the behavior of web apps, I find myself stumbling against the fact that some network messages do not appear on the network tab of the web developer tool of the browser. For ...
- 111
3
votes
2
answers
105
views
Reverse Engineering an ERP interface written in Flash
My college has its ERP platform in a Flash interface, accessible only via Internet Explorer. I am looking into ways I can interface with it via things like ruffle. So I can write my own frontend using ...
- 131
1
vote
0
answers
1k
views
How to reverse engineer Electron V8 Snapshot Data Blobs?
Electron apps nowadays seem to have a snapshot_blob.bin and a v8_context_snapshot.bin. I am having a hard time trying to find specification of this file type. It doesn't match with .wasm. Files may be ...
- 111
2
votes
0
answers
506
views
How to get video file URL from Twitter
I am looking how to find the video URL of a Twitter video so I can code a converter later (using nodejs or something), but I can't figure out how to do this. I saw this but it doesn't really clear ...
- 121
1
vote
0
answers
387
views
How to modify JS with mitmproxy?
I am trying to reverse engineer a heavily obfuscated web application, and I would like to modify the JS to add logging. So far, I've set up mitmproxy, but I can't figure out what the best way to edit ...
- 2,012
1
vote
0
answers
124
views
Duo MFA Enrollment API Parameters
Not sure if this is the right forum. I want to enroll my device for Duo MFA without using the Duo app. Duo uses simple HOTP codes, so I used this script to find the HOTP secret and enter it manually ...
- 11
0
votes
1
answer
2k
views
Decrypt config.bin file from Huawei B5328 router. I have source files
I need some help in decrypting the file config.bin generated by the page backup_setting.html from Huawei B5328 router.
I have access to all files in the router, even the www files hosted on the www ...
- 111
2
votes
1
answer
1k
views
Radare2 webui - need help setting it up
How can you set up Radare2 webui in Kali or Ubuntu or any other OS? I've tried so many different methods but none of them have worked so far. I think both of them are debian based so that might be ...
- 135
0
votes
1
answer
83
views
Find out where the string comes from (in Browser)
i.e. on a page, I see that after i.e. 5 seconds of page load, there appears a message:
Hello Akubatula, you are wonderful.
Lets say, i want to find out, from where does the word wonderful comes from....
- 683
1
vote
0
answers
130
views
What is the link between g-recaptcha-response one time token and deciphered audio text?
They are multiple reports of recaptcha v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ɪʙᴍ.
But there is something I am failing to understand : for most ...
- 143
1
vote
0
answers
324
views
Ruby on Rails Code Analysis [closed]
I have 'inherited' a fairly large Ruby on Rails repository that was developed for a web application and am trying to make heads or tails of it. I am specifically looking at this from the perspective ...
- 11
1
vote
1
answer
2k
views
reverse engineering a website for the Html, css and javascript [closed]
Is this possible to do? I intend to extract those files and change all coding to make it my own. Its meant for a static website.
1
vote
1
answer
2k
views
Understanding hashing in cookies
I am using a website whose cookies are as following (when I'm as a guest at 3 different instances in increasing order of time) :
eyJ0YWxrX3N0YXRlIjowfQ\075\075|1497742098|...
- 13
3
votes
1
answer
474
views
Reverse engineering POST request body
I have a POST request that had spawned a PHP webshell. It has exploited the REST API vulnerability in WordPress versions 4.7.0 and 4.7.1. The body of the request is in binary (possibly gzip-compressed)...
- 131
5
votes
3
answers
68k
views
How to get Video URL from embedded Link in Twitter
I'm trying to get the Video URL of ( https://twitter.com/i/videos/823649890379120640?embed_source=facebook )
I tried going over the source code but it give the same URL link
<meta property="og:...
- 51
3
votes
1
answer
3k
views
Possible to get the full url behind javascript button?
I am programming a little tool for patching. I found the microsoft update catalog, where all updates are stored, and I managed to look for some of them.
But my problem is now that the actual download ...
- 31
0
votes
2
answers
21k
views
Reverse engineering a whole website [closed]
How do i reverse engineer every single aspect and functionality of a website so that i get an exact fully working copy of it?. All interactions including JavaScript, cascade style sheets, PHP to make ...
- 13
-1
votes
1
answer
319
views
how can one cause heap memory buffer overflow in a worker process by using a specially crafted request? [closed]
i am to web applications so i have recently published my website and ran a penetration test using Acunetix Vulnerability scanner
so i have found the following result and for me to experience a lot ...
1
vote
0
answers
83
views
Reverse engineering a hash generated from IP and unixtime - How to approach?
There is a website that gives you a token and the unixtime to access a resource on another domain.
I can use those 2 values to access it like that:
Example: example.com/test.txt?st=[HASH]&e=[...
- 11
1
vote
0
answers
827
views
SysTracer by SysReveal.com clean?
SysTracer from SysReveal.com (not from www.blueproject.ro) seems to be a very nice tool for live monitoring your system and check what executable files do at your system. I saw some videos on YouTube ...
- 111
1
vote
0
answers
70
views
Reverse engineer StackExchange winter bash
I'm curious if it's possible to reverse engineer the hat positioning and control of the StackExchange winter bash.
They offer the "show controls" checkbox, but it's still all mouse-based; when you ...
- 299
1
vote
0
answers
52
views
Where can I get a dataset of URLs of websites that diffuse malware? [duplicate]
In order to study some malware detection algorithms I am developping in my PhD, I would like to know where I could download a list of malware websites.
Thank you
- 11
0
votes
1
answer
197
views
Reverse Engineer Joomla fabrik calculator
I am wondering if it is possible to reverse engineer the calculator on this url:
http://www.contrelec.co.uk/index.php/en/motor-full-load-current-estimator-kw
It appears to be a Joomla site with the ...
- 133
1
vote
1
answer
993
views
NetEase Cloud Music: Getting search results in API
I'm trying to make a search request with NetEase Cloud Music's API. I have found the URL used for sending a search request over POST which is: http://music.163.com/api/search/get/web with x-www-form-...
- 131
1
vote
0
answers
85
views
Where to identify and access the main object/closure in a JavaScript web app?
I want to add missing functionality to a web app's front end code JavaScript code.
I can find the code in the browser's developer tools by setting breakpoints and stepping through.
But in a large ...
- 581
3
votes
1
answer
301
views
How do you determine if a website was created using the Ruby language?
Without being able to look at the backend of a web app and only viewing the source code: Are there any certain directory structures that are common to Ruby? I'm looking to learn the language, but I ...
- 131
10
votes
4
answers
1k
views
How to create an API for a web application without its source code?
There's a post here (http://narenonit.blogspot.in/2011/07/my-youmint-api-to-send-free-sms.html) in which the author has tried to inform pretty well, as far as I can guess. The exact problem I'm facing ...
- 101
8
votes
1
answer
1k
views
Reverse engineering XKCD 1190
The latest (as of now) comic is titled "Time". It's a standard-looking comic though without much action, but the picture's alt title says "Wait for it.". I waited but nothing happened (tried in Opera ...
- 36.9k
3
votes
1
answer
215
views
How do I identify the content management system used by a website?
If I go to a random blog or informational website say, having pages with information, a sidebar with an overview of the archives. I know that this website is built with a CMS. How can I get to know ...
user187
7
votes
3
answers
2k
views
Get used jQuery plugins from website
I want to know what jQuery plugins Facebook uses for their special scrollbar, like the two on the left, not the normal one on the right:
(source)
Generally, how should I go when I want to know what ...
user187