Questions tagged [api-reversing]
The api-reversing tag has no summary.
25 questions
0 votes
1 answer
287 views
Code injection to system process(lsass.exe)
I allocated an RWX (PAGE_EXECUTE_READWRITE) memory region inside LSASS.exe (i tried a RX codecave), then wrote my shellcode there. After that, I tried to execute my shellcode via NtQueueApcThread → ...
1 vote
1 answer
131 views
What tool is this text file formatted by?
I'm trying to gather data for a data science project. The target is info on rock climbing routes, and there is a certain site that hosts a ton of crowd-sourced data, however they removed their api ...
0 votes
1 answer
232 views
How can I change the data type of `puVar1` in this C++ function?
I was reversing ( new to the reversing world of course) being using Ghidra for this. I get a C++ function AppChat::__Status::setDescription(ErrorCode param_1). Within this function, there's a variable ...
0 votes
1 answer
578 views
How could I extract a certificate and private key out of a exe?
I’m trying to get API responses from a backend service to make a server emulator for a game called NBA 2k17, but I can't get to them cause they are encrypted so I need to impersonate the client to get ...
1 vote
0 answers
379 views
Snapchat Internal API
I have been trying to find a way to access Snapchats internal API and I have found stuff like: https://github.com/transitive-bullshit/snapchat https://github.com/NSExceptional/SnapchatKit https://...
3 votes
0 answers
85 views
How do I make a text field editable when the app is designed to autofill OTP SMS?
Hello fellow rev engineers, I'm running an app in an emulator and the problem is that for registration it must autofill the OTP sent by SMS, the text field isn't editable/clickable and I can't advance ...
1 vote
0 answers
614 views
Bypass SSL pinning for android application
I am trying to analyze the network traffic from an android application for research purpose. I tried few approaches but unable to achieve the results. I am using rooted android emulator. I tried to ...
2 votes
0 answers
92 views
Decoding set of byte arrays representing light spectrum
I have a small spectrometer that measures in the spectral range of 740-1070nm. The device is commercial, and used to send the raw data to the manufacturer's server for decoding, but that does not seem ...
3 votes
0 answers
617 views
How do I hook these js methods/functions with Frida?
I want to hook these methods for the purpose to log the string variables (str) just before they are encrypted by a function (encr). I'm showing only the relevant parts for simplicity. 1- protected ...
2 votes
0 answers
47 views
How to deal with this frustrating case of JWT auth bearer + async token?
Here's the case: I'm analyzing an API and the way JWT was implemented seems to be anti-tampering. There's two components that must be there or there's an authentication error: Auth Bearer -> Stays ...
3 votes
0 answers
277 views
How do I log a string in smali without its obfuscated function?
I'm reversing engineering an app and after analyzing with man-in-the-middle, I find that it obfuscates its messages to the server so it looks like a gibberish. String stc = ("msg=" + ...
2 votes
0 answers
349 views
Warframe Network Communication
Warframe is a MMO that has both servers and peer to peer networking, I am looking into the server side of things. What I am wanting to achieve is client communication to a emulated server. So far I am ...
1 vote
0 answers
188 views
Heavens gate code
Recommend me please how and what better to reverse the code containing "heavens gate"? What tool to bypass protection? Thank you. I use Intel Pin push cs push 0xa02829 jmp far ...
0 votes
2 answers
413 views
How to declare a constructor in reversed class?
I wonder how to declare the reference to a constructor to a reversed class, i.e. I have a class say Game and it has a constructor at a certain address. It is declared like this: game.h namespace ...
1 vote
0 answers
300 views
Bypassing unsupported android TV box!
I have an android TV box called Proximus decoder v4, anyway the android TV box is not supported anymore by the company. When I turn it on I get an update checking, you can't even cancel it, and then I ...