Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [websites]

Interoperating with or deobfuscating web applications, often written in JavaScript client-side and various languages server-side

2
votes
1answer
79 views

Radare2 webui - need help setting it up

How can you set up Radare2 webui in Kali or Ubuntu or any other OS? I've tried so many different methods but none of them have worked so far. I think both of them are debian based so that might be ...
0
votes
1answer
39 views

Find out where the string comes from (in Browser)

i.e. on a page, I see that after i.e. 5 seconds of page load, there appears a message: Hello Akubatula, you are wonderful. Lets say, i want to find out, from where does the word wonderful comes from....
1
vote
0answers
46 views

What is the link between g-recaptcha-response one time token and deciphered audio text?

They are multiple reports of recaptcha v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ɪʙᴍ. But there is something I am failing to understand : for most ...
1
vote
0answers
44 views

Ruby on Rails Code Analysis [closed]

I have 'inherited' a fairly large Ruby on Rails repository that was developed for a web application and am trying to make heads or tails of it. I am specifically looking at this from the perspective ...
1
vote
1answer
440 views

reverse engineering a website for the Html, css and javascript [closed]

Is this possible to do? I intend to extract those files and change all coding to make it my own. Its meant for a static website.
0
votes
1answer
391 views

Understanding hashing in cookies

I am using a website whose cookies are as following (when I'm as a guest at 3 different instances in increasing order of time) : eyJ0YWxrX3N0YXRlIjowfQ\075\075|1497742098|...
0
votes
0answers
133 views

What is the format of the cookieless auth= token used with urls like https://appengine.google.com/_ah/conflogin?auth=

When you login to a Google site that use Google app engine through your Google account, you are first redirected to https://appengine.google.com/_ah/conflogin in a cookieless manner : this mean that ...
3
votes
1answer
233 views

Reverse engineering POST request body

I have a POST request that had spawned a PHP webshell. It has exploited the REST API vulnerability in WordPress versions 4.7.0 and 4.7.1. The body of the request is in binary (possibly gzip-compressed)...
3
votes
3answers
18k views

How to get Video URL from embedded Link in Twitter

I'm trying to get the Video URL of ( https://twitter.com/i/videos/823649890379120640?embed_source=facebook ) I tried going over the source code but it give the same URL link <meta property="og:...
2
votes
1answer
401 views

Possible to get the full url behind javascript button?

I am programming a little tool for patching. I found the microsoft update catalog, where all updates are stored, and I managed to look for some of them. But my problem is now that the actual download ...
0
votes
2answers
9k views

Reverse engineering a whole website [closed]

How do i reverse engineer every single aspect and functionality of a website so that i get an exact fully working copy of it?. All interactions including JavaScript, cascade style sheets, PHP to make ...
-1
votes
1answer
277 views

how can one cause heap memory buffer overflow in a worker process by using a specially crafted request? [closed]

i am to web applications so i have recently published my website and ran a penetration test using Acunetix Vulnerability scanner so i have found the following result and for me to experience a lot ...
1
vote
0answers
68 views

Reverse engineering a hash generated from IP and unixtime - How to approach?

There is a website that gives you a token and the unixtime to access a resource on another domain. I can use those 2 values to access it like that: Example: example.com/test.txt?st=[HASH]&e=[...
1
vote
0answers
410 views

SysTracer by SysReveal.com clean?

SysTracer from SysReveal.com (not from www.blueproject.ro) seems to be a very nice tool for live monitoring your system and check what executable files do at your system. I saw some videos on YouTube ...
1
vote
0answers
63 views

Reverse engineer StackExchange winter bash

I'm curious if it's possible to reverse engineer the hat positioning and control of the StackExchange winter bash. They offer the "show controls" checkbox, but it's still all mouse-based; when you ...
1
vote
0answers
47 views

Where can I get a dataset of URLs of websites that diffuse malware? [duplicate]

In order to study some malware detection algorithms I am developping in my PhD, I would like to know where I could download a list of malware websites. Thank you
1
vote
0answers
1k views

Chat-avenue.com transcripts

Until recently, I could get a transcript of my chat-avenue.com chats by running tcpflow filtered to their IP addresses, and the results were in a mangled-but-readable XML-like format. Now, the ...
0
votes
1answer
127 views

Reverse Engineer Joomla fabrik calculator

I am wondering if it is possible to reverse engineer the calculator on this url: http://www.contrelec.co.uk/index.php/en/motor-full-load-current-estimator-kw It appears to be a Joomla site with the ...
1
vote
1answer
784 views

NetEase Cloud Music: Getting search results in API

I'm trying to make a search request with NetEase Cloud Music's API. I have found the URL used for sending a search request over POST which is: http://music.163.com/api/search/get/web with x-www-form-...
1
vote
0answers
72 views

Where to identify and access the main object/closure in a JavaScript web app?

I want to add missing functionality to a web app's front end code JavaScript code. I can find the code in the browser's developer tools by setting breakpoints and stepping through. But in a large ...
2
votes
1answer
109 views

How do you determine if a website was created using the Ruby language?

Without being able to look at the backend of a web app and only viewing the source code: Are there any certain directory structures that are common to Ruby? I'm looking to learn the language, but I ...
9
votes
4answers
1k views

How to create an API for a web application without its source code?

There's a post here (http://narenonit.blogspot.in/2011/07/my-youmint-api-to-send-free-sms.html) in which the author has tried to inform pretty well, as far as I can guess. The exact problem I'm facing ...
8
votes
1answer
768 views

Reverse engineering XKCD 1190

The latest (as of now) comic is titled "Time". It's a standard-looking comic though without much action, but the picture's alt title says "Wait for it.". I waited but nothing happened (tried in Opera ...
2
votes
1answer
192 views

How do I identify the content management system used by a website?

If I go to a random blog or informational website say, having pages with information, a sidebar with an overview of the archives. I know that this website is built with a CMS. How can I get to know ...
7
votes
3answers
2k views

Get used jQuery plugins from website

I want to know what jQuery plugins Facebook uses for their special scrollbar, like the two on the left, not the normal one on the right: (source) Generally, how should I go when I want to know what ...