Questions tagged [websites]

Interoperating with or deobfuscating web applications, often written in JavaScript client-side and various languages server-side

Filter by
Sorted by
Tagged with
0 votes
0 answers
16 views

Tool to Analyse Browser memory in Javascript console

By using the Inspector tool, we can access every object in the browser using the console. For example, if you go to Youtube.com and you open the console, and you type ytInitialData , you can see the ...
user avatar
  • 101
0 votes
0 answers
77 views

How to reverse engineer a web application's authentication method(s)?

For doing security scanning with a tool like Owasp Zap, a common desire is to do an authenticated scan, where one or more test users is logged in, often in an automated fashion. I think different ...
user avatar
2 votes
0 answers
95 views

Twitter scraping using Python

I've been working on a project to reverse-enginner twitter's app to scrape public posts from Twitter using an unofficial API, with Python. (I want to create an "alternative" app, which is ...
user avatar
  • 21
0 votes
1 answer
148 views

Reverse engineer decryption of cookie

TL; DR Is there any way you might suggest decrypting this cookie? It was saved under the name mail, so I suspect it encrypts an email address: ...
user avatar
  • 101
1 vote
1 answer
51 views

Inbound network queries not appearing in developer tools of browser

When trying to understand the behavior of web apps, I find myself stumbling against the fact that some network messages do not appear on the network tab of the web developer tool of the browser. For ...
user avatar
  • 111
3 votes
2 answers
77 views

Reverse Engineering an ERP interface written in Flash

My college has its ERP platform in a Flash interface, accessible only via Internet Explorer. I am looking into ways I can interface with it via things like ruffle. So I can write my own frontend using ...
user avatar
  • 131
1 vote
0 answers
471 views

How to reverse engineer Electron V8 Snapshot Data Blobs?

Electron apps nowadays seem to have a snapshot_blob.bin and a v8_context_snapshot.bin. I am having a hard time trying to find specification of this file type. It doesn't match with .wasm. Files may be ...
user avatar
  • 111
2 votes
0 answers
300 views

How to get video file URL from Twitter

I am looking how to find the video URL of a Twitter video so I can code a converter later (using nodejs or something), but I can't figure out how to do this. I saw this but it doesn't really clear ...
user avatar
  • 121
1 vote
0 answers
237 views

How to modify JS with mitmproxy?

I am trying to reverse engineer a heavily obfuscated web application, and I would like to modify the JS to add logging. So far, I've set up mitmproxy, but I can't figure out what the best way to edit ...
user avatar
  • 1,972
1 vote
0 answers
76 views

Duo MFA Enrollment API Parameters

Not sure if this is the right forum. I want to enroll my device for Duo MFA without using the Duo app. Duo uses simple HOTP codes, so I used this script to find the HOTP secret and enter it manually ...
user avatar
0 votes
1 answer
1k views

Decrypt config.bin file from Huawei B5328 router. I have source files

I need some help in decrypting the file config.bin generated by the page backup_setting.html from Huawei B5328 router. I have access to all files in the router, even the www files hosted on the www ...
user avatar
  • 101
2 votes
1 answer
1k views

Radare2 webui - need help setting it up

How can you set up Radare2 webui in Kali or Ubuntu or any other OS? I've tried so many different methods but none of them have worked so far. I think both of them are debian based so that might be ...
user avatar
  • 135
0 votes
1 answer
69 views

Find out where the string comes from (in Browser)

i.e. on a page, I see that after i.e. 5 seconds of page load, there appears a message: Hello Akubatula, you are wonderful. Lets say, i want to find out, from where does the word wonderful comes from....
user avatar
  • 603
1 vote
0 answers
120 views

What is the link between g-recaptcha-response one time token and deciphered audio text?

They are multiple reports of recaptcha v2 bypass. Most of the time, the explanation is neural networks services provided by Google or ɪʙᴍ. But there is something I am failing to understand : for most ...
user avatar
1 vote
0 answers
291 views

Ruby on Rails Code Analysis [closed]

I have 'inherited' a fairly large Ruby on Rails repository that was developed for a web application and am trying to make heads or tails of it. I am specifically looking at this from the perspective ...
user avatar
1 vote
1 answer
1k views

reverse engineering a website for the Html, css and javascript [closed]

Is this possible to do? I intend to extract those files and change all coding to make it my own. Its meant for a static website.
user avatar
1 vote
1 answer
2k views

Understanding hashing in cookies

I am using a website whose cookies are as following (when I'm as a guest at 3 different instances in increasing order of time) : eyJ0YWxrX3N0YXRlIjowfQ\075\075|1497742098|...
user avatar
  • 13
3 votes
1 answer
370 views

Reverse engineering POST request body

I have a POST request that had spawned a PHP webshell. It has exploited the REST API vulnerability in WordPress versions 4.7.0 and 4.7.1. The body of the request is in binary (possibly gzip-compressed)...
user avatar
  • 131
5 votes
3 answers
61k views

How to get Video URL from embedded Link in Twitter

I'm trying to get the Video URL of ( https://twitter.com/i/videos/823649890379120640?embed_source=facebook ) I tried going over the source code but it give the same URL link <meta property="og:...
user avatar
3 votes
1 answer
2k views

Possible to get the full url behind javascript button?

I am programming a little tool for patching. I found the microsoft update catalog, where all updates are stored, and I managed to look for some of them. But my problem is now that the actual download ...
user avatar
  • 31
0 votes
2 answers
19k views

Reverse engineering a whole website [closed]

How do i reverse engineer every single aspect and functionality of a website so that i get an exact fully working copy of it?. All interactions including JavaScript, cascade style sheets, PHP to make ...
user avatar
-1 votes
1 answer
307 views

how can one cause heap memory buffer overflow in a worker process by using a specially crafted request? [closed]

i am to web applications so i have recently published my website and ran a penetration test using Acunetix Vulnerability scanner so i have found the following result and for me to experience a lot ...
user avatar
1 vote
0 answers
78 views

Reverse engineering a hash generated from IP and unixtime - How to approach?

There is a website that gives you a token and the unixtime to access a resource on another domain. I can use those 2 values to access it like that: Example: example.com/test.txt?st=[HASH]&e=[...
user avatar
1 vote
0 answers
734 views

SysTracer by SysReveal.com clean?

SysTracer from SysReveal.com (not from www.blueproject.ro) seems to be a very nice tool for live monitoring your system and check what executable files do at your system. I saw some videos on YouTube ...
user avatar
  • 111
1 vote
0 answers
70 views

Reverse engineer StackExchange winter bash

I'm curious if it's possible to reverse engineer the hat positioning and control of the StackExchange winter bash. They offer the "show controls" checkbox, but it's still all mouse-based; when you ...
user avatar
  • 299
1 vote
0 answers
52 views

Where can I get a dataset of URLs of websites that diffuse malware? [duplicate]

In order to study some malware detection algorithms I am developping in my PhD, I would like to know where I could download a list of malware websites. Thank you
user avatar
0 votes
1 answer
142 views

Reverse Engineer Joomla fabrik calculator

I am wondering if it is possible to reverse engineer the calculator on this url: http://www.contrelec.co.uk/index.php/en/motor-full-load-current-estimator-kw It appears to be a Joomla site with the ...
user avatar
  • 133
1 vote
1 answer
884 views

NetEase Cloud Music: Getting search results in API

I'm trying to make a search request with NetEase Cloud Music's API. I have found the URL used for sending a search request over POST which is: http://music.163.com/api/search/get/web with x-www-form-...
user avatar
1 vote
0 answers
83 views

Where to identify and access the main object/closure in a JavaScript web app?

I want to add missing functionality to a web app's front end code JavaScript code. I can find the code in the browser's developer tools by setting breakpoints and stepping through. But in a large ...
user avatar
2 votes
1 answer
193 views

How do you determine if a website was created using the Ruby language?

Without being able to look at the backend of a web app and only viewing the source code: Are there any certain directory structures that are common to Ruby? I'm looking to learn the language, but I ...
user avatar
  • 121
9 votes
4 answers
1k views

How to create an API for a web application without its source code?

There's a post here (http://narenonit.blogspot.in/2011/07/my-youmint-api-to-send-free-sms.html) in which the author has tried to inform pretty well, as far as I can guess. The exact problem I'm facing ...
user avatar
7 votes
1 answer
949 views

Reverse engineering XKCD 1190

The latest (as of now) comic is titled "Time". It's a standard-looking comic though without much action, but the picture's alt title says "Wait for it.". I waited but nothing happened (tried in Opera ...
user avatar
  • 34.8k
2 votes
1 answer
204 views

How do I identify the content management system used by a website?

If I go to a random blog or informational website say, having pages with information, a sidebar with an overview of the archives. I know that this website is built with a CMS. How can I get to know ...
user avatar
7 votes
3 answers
2k views

Get used jQuery plugins from website

I want to know what jQuery plugins Facebook uses for their special scrollbar, like the two on the left, not the normal one on the right: (source) Generally, how should I go when I want to know what ...
user avatar