4
votes
Accepted
Understanding hashing in cookies
The two vertical bars hints towards 3 separate parts of the cookie. It seems that the first part is a base64 encoded json object. For the first part of the cookie no. 1 that would be:
...
- 66
4
votes
How to get Video URL from embedded Link in Twitter
youtube-dl is a nice program to download media content from a lot of websites, including twitter (and despites program name). It is open source, studying it can help understand how to retrieve the ...
- 155
3
votes
reverse engineering a website for the Html, css and javascript
If what you see rendered on the page is sufficient, then just save the complete page via your browser and modify what you want changed.
If you want to be more granular about seeing what the page is ...
- 2,254
3
votes
Reverse Engineering an ERP interface written in Flash
My college has its erp platform in a flash interface, accesible only via Internet Explorer.
Thing is, accessing the erp from amything other internet explorer results in the browser download a flash ...
- 131
3
votes
Reverse Engineering an ERP interface written in Flash
Intercept the traffic between the browser / plugins and the server. I would start with Wireshark.
The traffic between the client and the server will be some form of network requests which you can ...
- 878
3
votes
How to get Video URL from embedded Link in Twitter
You were looking at the wrong piece of code. Twitter features lightly obfuscated javscript. Bring it to order and you'll receive something like this:
{
"duration": 55322,
"scribe_widget_origin": true,...
- 2,906
3
votes
Accepted
Radare2 webui - need help setting it up
radare2 -c='H' <binary> can run radare2 with web interface.
I guess you are using apt-get package manager for installing radare2, r2 deb package has a bit problem (Web interface files aren't ...
- 188
2
votes
Reverse engineering POST request body
It appears to me that the payload contains no instructions but just addresses of the existing ROP gadgets in the DLLs specific to the system being exploited. Try looking up the addresses in the ...
- 36.9k
2
votes
Tools to hook browser's Javascript function implementations
If you have access to the DevTools console and you're able to make the call to encrypt happen whenever you want after the page loads, then you could just redefine the encrypt method to log what's ...
- 2,254
1
vote
Accepted
Can’t download embedded audio
Using Chrome:
More Tools -> Developer Tools
Within developer tools, click on the Network tab at the top
Within the Network tab, click on Media
Click the play button
An entry named preview.mp3 ...
- 957
1
vote
Inbound network queries not appearing in developer tools of browser
Network sniffing tools such as Wireshark are your best bet. That will let you see all the traffic going across a network interface. You can use Statistics > Conversations to help narrow in on the ...
- 878
1
vote
Decrypt config.bin file from Huawei B5328 router. I have source files
Unfortunately, knowledge of JS probably isn't going to help. The HTML passes along the uploaded file to the cgi-bin/maintenance.cgi file which is a compiled ARM BE8 binary that's a bit more work to ...
- 171
1
vote
Accepted
Find out where the string comes from (in Browser)
Sounds like it could be data coming from the server via an AJAX call, where they perhaps have a service that fetches a message (at random?) from within an array of messages like that. If it is, then ...
- 2,254
1
vote
How to get Video URL from embedded Link in Twitter
Yes you can. Original post is here.
Explication :
In your link : https://twitter.com/i/videos/823649890379120640?embed_source=facebook
You can see a JSON with some informations.
"statusTimestamp":{...
- 111
1
vote
Possible to get the full url behind javascript button?
If you want to get the whole listing of updates, first you should write an xpath to get the uids of each download button, you should get a bunch of uids like xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
...
- 109
1
vote
Reverse engineering a whole website
You may be able to reverse engineer the Javascript, CSS, and HTML, but not PHP or ASP. Using PHP as an example, if you have a command echo "foo";, the echo code gets executed on the server itself, and ...
- 153
1
vote
Accepted
Reverse engineering a whole website
You can get pretty close, but if the site uses PHP, ASP.NET, or some other form of server-side html rendering, you'll never be able to completely reproduce a copy of it. This is because that server-...
- 126
Only top scored, non community-wiki answers of a minimum length are eligible