Questions tagged [websites]
Interoperating with or deobfuscating web applications, often written in JavaScript client-side and various languages server-side
34
questions
0
votes
0
answers
16
views
Tool to Analyse Browser memory in Javascript console
By using the Inspector tool, we can access every object in the browser using the console.
For example, if you go to Youtube.com and you open the console, and you type ytInitialData , you can see the ...
- 101
0
votes
0
answers
77
views
How to reverse engineer a web application's authentication method(s)?
For doing security scanning with a tool like Owasp Zap, a common desire is to do an authenticated scan, where one or more test users is logged in, often in an automated fashion. I think different ...
- 436
2
votes
0
answers
95
views
Twitter scraping using Python
I've been working on a project to reverse-enginner twitter's app to scrape public posts from Twitter using an unofficial API, with Python. (I want to create an "alternative" app, which is ...
- 21
0
votes
1
answer
148
views
Reverse engineer decryption of cookie
TL; DR
Is there any way you might suggest decrypting this cookie? It was saved under the name mail, so I suspect it encrypts an email address:
...
- 101
1
vote
1
answer
51
views
Inbound network queries not appearing in developer tools of browser
When trying to understand the behavior of web apps, I find myself stumbling against the fact that some network messages do not appear on the network tab of the web developer tool of the browser. For ...
- 111
3
votes
2
answers
77
views
Reverse Engineering an ERP interface written in Flash
My college has its ERP platform in a Flash interface, accessible only via Internet Explorer. I am looking into ways I can interface with it via things like ruffle. So I can write my own frontend using ...
- 131
1
vote
0
answers
471
views
How to reverse engineer Electron V8 Snapshot Data Blobs?
Electron apps nowadays seem to have a snapshot_blob.bin and a v8_context_snapshot.bin. I am having a hard time trying to find specification of this file type. It doesn't match with .wasm. Files may be ...
- 111
2
votes
0
answers
300
views
How to get video file URL from Twitter
I am looking how to find the video URL of a Twitter video so I can code a converter later (using nodejs or something), but I can't figure out how to do this. I saw this but it doesn't really clear ...
- 121
1
vote
0
answers
237
views
How to modify JS with mitmproxy?
I am trying to reverse engineer a heavily obfuscated web application, and I would like to modify the JS to add logging. So far, I've set up mitmproxy, but I can't figure out what the best way to edit ...
- 1,972
1
vote
0
answers
76
views
Duo MFA Enrollment API Parameters
Not sure if this is the right forum. I want to enroll my device for Duo MFA without using the Duo app. Duo uses simple HOTP codes, so I used this script to find the HOTP secret and enter it manually ...
- 11
0
votes
1
answer
1k
views
Decrypt config.bin file from Huawei B5328 router. I have source files
I need some help in decrypting the file config.bin generated by the page backup_setting.html from Huawei B5328 router.
I have access to all files in the router, even the www files hosted on the www ...
- 101
2
votes
1
answer
1k
views
Radare2 webui - need help setting it up
How can you set up Radare2 webui in Kali or Ubuntu or any other OS? I've tried so many different methods but none of them have worked so far. I think both of them are debian based so that might be ...
- 135
0
votes
1
answer
69
views
Find out where the string comes from (in Browser)
i.e. on a page, I see that after i.e. 5 seconds of page load, there appears a message:
Hello Akubatula, you are wonderful.
Lets say, i want to find out, from where does the word wonderful comes from....
- 603
1
vote
0
answers
120
views
What is the link between g-recaptcha-response one time token and deciphered audio text?
They are multiple reports of recaptcha v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ɪʙᴍ.
But there is something I am failing to understand : for most ...
- 133
1
vote
0
answers
291
views
Ruby on Rails Code Analysis [closed]
I have 'inherited' a fairly large Ruby on Rails repository that was developed for a web application and am trying to make heads or tails of it. I am specifically looking at this from the perspective ...
- 11
1
vote
1
answer
1k
views
reverse engineering a website for the Html, css and javascript [closed]
Is this possible to do? I intend to extract those files and change all coding to make it my own. Its meant for a static website.
1
vote
1
answer
2k
views
Understanding hashing in cookies
I am using a website whose cookies are as following (when I'm as a guest at 3 different instances in increasing order of time) :
eyJ0YWxrX3N0YXRlIjowfQ\075\075|1497742098|...
- 13
3
votes
1
answer
370
views
Reverse engineering POST request body
I have a POST request that had spawned a PHP webshell. It has exploited the REST API vulnerability in WordPress versions 4.7.0 and 4.7.1. The body of the request is in binary (possibly gzip-compressed)...
- 131
5
votes
3
answers
61k
views
How to get Video URL from embedded Link in Twitter
I'm trying to get the Video URL of ( https://twitter.com/i/videos/823649890379120640?embed_source=facebook )
I tried going over the source code but it give the same URL link
<meta property="og:...
- 51
3
votes
1
answer
2k
views
Possible to get the full url behind javascript button?
I am programming a little tool for patching. I found the microsoft update catalog, where all updates are stored, and I managed to look for some of them.
But my problem is now that the actual download ...
- 31
0
votes
2
answers
19k
views
Reverse engineering a whole website [closed]
How do i reverse engineer every single aspect and functionality of a website so that i get an exact fully working copy of it?. All interactions including JavaScript, cascade style sheets, PHP to make ...
- 13
-1
votes
1
answer
307
views
how can one cause heap memory buffer overflow in a worker process by using a specially crafted request? [closed]
i am to web applications so i have recently published my website and ran a penetration test using Acunetix Vulnerability scanner
so i have found the following result and for me to experience a lot ...
1
vote
0
answers
78
views
Reverse engineering a hash generated from IP and unixtime - How to approach?
There is a website that gives you a token and the unixtime to access a resource on another domain.
I can use those 2 values to access it like that:
Example: example.com/test.txt?st=[HASH]&e=[...
- 11
1
vote
0
answers
734
views
SysTracer by SysReveal.com clean?
SysTracer from SysReveal.com (not from www.blueproject.ro) seems to be a very nice tool for live monitoring your system and check what executable files do at your system. I saw some videos on YouTube ...
- 111
1
vote
0
answers
70
views
Reverse engineer StackExchange winter bash
I'm curious if it's possible to reverse engineer the hat positioning and control of the StackExchange winter bash.
They offer the "show controls" checkbox, but it's still all mouse-based; when you ...
- 299
1
vote
0
answers
52
views
Where can I get a dataset of URLs of websites that diffuse malware? [duplicate]
In order to study some malware detection algorithms I am developping in my PhD, I would like to know where I could download a list of malware websites.
Thank you
- 11
0
votes
1
answer
142
views
Reverse Engineer Joomla fabrik calculator
I am wondering if it is possible to reverse engineer the calculator on this url:
http://www.contrelec.co.uk/index.php/en/motor-full-load-current-estimator-kw
It appears to be a Joomla site with the ...
- 133
1
vote
1
answer
884
views
NetEase Cloud Music: Getting search results in API
I'm trying to make a search request with NetEase Cloud Music's API. I have found the URL used for sending a search request over POST which is: http://music.163.com/api/search/get/web with x-www-form-...
- 131
1
vote
0
answers
83
views
Where to identify and access the main object/closure in a JavaScript web app?
I want to add missing functionality to a web app's front end code JavaScript code.
I can find the code in the browser's developer tools by setting breakpoints and stepping through.
But in a large ...
- 355
2
votes
1
answer
193
views
How do you determine if a website was created using the Ruby language?
Without being able to look at the backend of a web app and only viewing the source code: Are there any certain directory structures that are common to Ruby? I'm looking to learn the language, but I ...
- 121
9
votes
4
answers
1k
views
How to create an API for a web application without its source code?
There's a post here (http://narenonit.blogspot.in/2011/07/my-youmint-api-to-send-free-sms.html) in which the author has tried to inform pretty well, as far as I can guess. The exact problem I'm facing ...
7
votes
1
answer
949
views
Reverse engineering XKCD 1190
The latest (as of now) comic is titled "Time". It's a standard-looking comic though without much action, but the picture's alt title says "Wait for it.". I waited but nothing happened (tried in Opera ...
- 34.8k
2
votes
1
answer
204
views
How do I identify the content management system used by a website?
If I go to a random blog or informational website say, having pages with information, a sidebar with an overview of the archives. I know that this website is built with a CMS. How can I get to know ...
user187
7
votes
3
answers
2k
views
Get used jQuery plugins from website
I want to know what jQuery plugins Facebook uses for their special scrollbar, like the two on the left, not the normal one on the right:
(source)
Generally, how should I go when I want to know what ...
user187