4 votes
Accepted

Understanding hashing in cookies

The two vertical bars hints towards 3 separate parts of the cookie. It seems that the first part is a base64 encoded json object. For the first part of the cookie no. 1 that would be: ...
user avatar
  • 66
4 votes

How to get Video URL from embedded Link in Twitter

youtube-dl is a nice program to download media content from a lot of websites, including twitter (and despites program name). It is open source, studying it can help understand how to retrieve the ...
user avatar
3 votes
Accepted

Radare2 webui - need help setting it up

radare2 -c='H' <binary> can run radare2 with web interface. I guess you are using apt-get package manager for installing radare2, r2 deb package has a bit problem (Web interface files aren't ...
user avatar
3 votes

Reverse Engineering an ERP interface written in Flash

My college has its erp platform in a flash interface, accesible only via Internet Explorer. Thing is, accessing the erp from amything other internet explorer results in the browser download a flash ...
user avatar
3 votes

Reverse Engineering an ERP interface written in Flash

Intercept the traffic between the browser / plugins and the server. I would start with Wireshark. The traffic between the client and the server will be some form of network requests which you can ...
user avatar
3 votes

How to get Video URL from embedded Link in Twitter

You were looking at the wrong piece of code. Twitter features lightly obfuscated javscript. Bring it to order and you'll receive something like this: { "duration": 55322, "scribe_widget_origin": true,...
user avatar
  • 2,826
3 votes

reverse engineering a website for the Html, css and javascript

If what you see rendered on the page is sufficient, then just save the complete page via your browser and modify what you want changed. If you want to be more granular about seeing what the page is ...
user avatar
  • 2,154
2 votes
Accepted

NetEase Cloud Music: Getting search results in API

The answer is embarrassingly simple. Simply remove the /web part of the URL so you end up with something like this: http://music.163.com/api/search/get/ and you're good to go.
user avatar
2 votes

Reverse engineering POST request body

It appears to me that the payload contains no instructions but just addresses of the existing ROP gadgets in the DLLs specific to the system being exploited. Try looking up the addresses in the ...
user avatar
  • 34.7k
1 vote

Inbound network queries not appearing in developer tools of browser

Network sniffing tools such as Wireshark are your best bet. That will let you see all the traffic going across a network interface. You can use Statistics > Conversations to help narrow in on the ...
user avatar
1 vote

Decrypt config.bin file from Huawei B5328 router. I have source files

Unfortunately, knowledge of JS probably isn't going to help. The HTML passes along the uploaded file to the cgi-bin/maintenance.cgi file which is a compiled ARM BE8 binary that's a bit more work to ...
user avatar
  • 161
1 vote
Accepted

Find out where the string comes from (in Browser)

Sounds like it could be data coming from the server via an AJAX call, where they perhaps have a service that fetches a message (at random?) from within an array of messages like that. If it is, then ...
user avatar
  • 2,154
1 vote

How to get Video URL from embedded Link in Twitter

Yes you can. Original post is here. Explication : In your link : https://twitter.com/i/videos/823649890379120640?embed_source=facebook You can see a JSON with some informations. "statusTimestamp":{...
user avatar
  • 111
1 vote

Possible to get the full url behind javascript button?

If you want to get the whole listing of updates, first you should write an xpath to get the uids of each download button, you should get a bunch of uids like xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx ...
user avatar
  • 89
1 vote

Reverse engineering a whole website

You may be able to reverse engineer the Javascript, CSS, and HTML, but not PHP or ASP. Using PHP as an example, if you have a command echo "foo";, the echo code gets executed on the server itself, and ...
user avatar
  • 153
1 vote
Accepted

Reverse engineering a whole website

You can get pretty close, but if the site uses PHP, ASP.NET, or some other form of server-side html rendering, you'll never be able to completely reproduce a copy of it. This is because that server-...
user avatar
  • 126

Only top scored, non community-wiki answers of a minimum length are eligible