HakByte: How to use Postman to Reverse Engineer Private APIs

[@danielm1359]

Amazing, reverse engineered a wireless controller the same way. It was a great way to start network automation.

[@c0ri]

Postman is awesome, been using it for a long time. It is extremely helpful writting code to interface APIs.. even if they are undocumented.

[@lazerusmfh]

Good timing. I need a simple integration to a device with an api without documentation, and this will definitely help!

[@Belioyt]

Really enjoyed this, eyes are wide open for possibilities

[@finbom]

Thanks!!!! Amazing! Well worth spent 10 minutes to give me a MUCH better understanding. No fuzz, straight on with good examples and a working result.

[@davidabba7663]

This was so understandable I think that’s what I was waiting for I feel much more confident on the vectors now or what to ask Bless you!

[@John_Smith__]

The entire header section is going to be used by ebay in this case to fingerprint the browsers. Should be anonymized. But I've noticed servers on ebay sometimes do not have all the required fields populated, that is a search like that will miss a Lot of servers simply because the seller does not fill in all data on the required description of the item.

[@cristianbam]

Why not just filter by XHR requests?

[@janpost8598]

Sometimes they put the data (like json) in the html code.

[@oglothenerd]

I am trying to learn this stuff so I can archive Netflix original series as local video files! I hate the fact that if Netflix decides to remove these series, they will no longer exist.

[@georgesmith9178]

Really nice vid. Thumbs-up of course. Just a quick suggestion - bump up your font size a bit (on some screens it is hard to see) and use some sort of pointer tracking tool, so that people can see where you click. I had to go back a couple of times in several sections of the video to see where you were clicking.

[@coder159]

Please not the pointer tracking tool dear god

[@robertfacella846]

Using Runescape as the ideal case example, I see you

[@drygordspellweaver8761]

Do RuneScape API bots even work? Most I know use Ahk

[@drygordspellweaver8761]

Nice video- any resources on reversing a mobil app API?

[@uboxtech]

what to do about cors error? i tried this multiple times, checked all headers but still giving me cors error

[@BusinessIdeasHub]

Can you decompile an app and search api and can you use in postman? If yes then I'll send apk

[@bukalter]

I would like to use your method but I get error 401 meassage "Access denied due to missing subscription key. Make sure to include subscription key when making requests to an API." Is there some method to find it or use other way?

[@notamindninja2003]

Exactly like when a ho up in this house is taking too much of the pie and you need to take more from their available code so you can reverse engineer to thief back and take a higher position and more of your commission back- gig workers- get on that. They love to give opaque information but no helpful data. - Thanks for this-

[@mmaranta785]

Good info. Can I do that with C#?

[@kizhissery]

to be frank the website you want most likely have cookies which changes in 12_24 hr , hence they will send 404

[@ignaciokairuz]

Great information!!

[@Benedikt.05]

want to create a zalando invoive scraper but I am completely new in that theme. Already checked that there is a specific link which triggers the download of the invoive. But I need an efficient way to scrape the ordernumbers and orderdates. Can I use the technique shown in the video to scrape those informations?

[@bigbooduh]

Enjoyed this, does Michael Raymond have any courses on api Hacking?

[@mamupelu565]

What if there's a really shitty website and I want to make another one on top of it, just to use it as a database basically?

[@SamoCoder]

Great video. Liked and subscribed. Thanks.

[@zuberkariye2299]

Hey Micheal from the Security FWD

[@sihmy9870]

What is he wearing? Is that a mic?

[@firesnake6311]

Oh yeah wait a minute Mr.postman hey ey ey ye Mr.postman

[@ryanrozario1195]

Can we do the same thing for air tickets??

[@Rheaded]

can i do this with safari and brave

[@LeanneGrhymes]

does this work on websites that requires user log ins

[@dr.groove7957]

Brah, you need to hit up a boot camp.

[@gasparem16]

thanks! great video!!!

[@statesponsored9435]

Wow great michael.

[@shemmo]

i like scraping sites but many times it can be illegal when you tap on the source with PII in it.. just saying, btw, nice tutorial

[@zapbeeblebrox1053]

Maybe against terms of service but illegal? Not sure about that. The data is being delivered publicly. You can do what you want.

[@kingsleyben297]

For this, You can search for *Hacklord Tom* a business page on fäcebóok.. he offers a wide range of hacking and spy services

[@randyallen8610]

I need help scraping data from a website that has a firewall. Will pay

[@evancunningham9872]

Very cool indeed.

[@TabletMini]

Just be careful to use the online version, as you might disclose sensitive information public.

[@Pervy]

Jason.

[@river1711]

Very cool!

[@denissetiawan3645]

Yummy yummy, time to scrape.

[@RohanVetale]

thankyouu

[@midimusicforever]

Cool. :)

[@ismailachabi8627]

💚

[@mindyabiznarc]

💯

[@ca7986]

👌

[@ianp6742]

First

[@xseflx]

5

[@saberint]

omfg you are claiming you are 'reverse engineering' lmfao, this is pathetic...

[@Christian-mn8dh]

what is this then?

[@saberint]

@@Christian-mn8dh it’s simply monitoring the results. It’s not giving you the code behind or data access layers. Sure it shows a how to *sniff* an api, but that’s it.

[@Christian-mn8dh]

@@saberint interesting. im trynna learn reverse engineering, have any advice on how I should start? it's kinda hard to find a good structured education for this

[@edoch3700]

Fourth

[@DD_MN]

Second

[@harshdesai7957]

third

[@mandc20022]

This guy has very feminine qualities

[@retiallc]

He is wearing a pride shirt.

[@CelesteOnYoutube]

WTF is wrong with you people