javascript - Reverse Engineering Web Applications -

aloha, stackoverflow.

i come across web applications, , wonder myself, "how write script/application interface that?" (purely academic, not spamming purposes!).

for example, website omegle; people have written python scripts interface website , run chat without opening browser... how? admit web programming not strongest area, know how 1 extract protocol being used such applications, , use knowledge create custom apps , tinker service.

so basically, how can figure out inner workings of web app (ie. imeetzu.com such can write code interface desktop?

thank in advance!

you'll need set of tools start with:

• a browser debugging window (chrome particularly this). allow in particular access network calls browser directly makes (there's caveat coming), , see:

  • their content
  • their parameters
  • their target

• a network packet sniffer trace down goes through flash (or websockets). i'm quite fond of ethereal (now called wireshark), though if you're in us, breaking law using (depends on use make of it). allow see every tcp frame enters , leaves network interface.

the knowledge need:

• ability identify , isolate network stream. comes through practice
• knowledge of language app trying reverse-engineer written in. if javascript isn't cup of tea, avoid js-based stuff
• maths , cryptography. data may encrypted/obfuscated/stegg-ed time time. aware , out it.

in particular case, looks might have deal flash. there additional resources on this, although of them non-free. there 1 particularly flash decompiler called sothink swf decompiler, allows turn swf fla or collection of sources.

that's tools. method easy - data comes in/out , figure out elimination what. if it's encrypted, you'll need ivs , samples hope break (or decompile code , find how key/handshake done). very, extensive field , haven't touched tip of iceberg - feel free ask more info.

(how know this? contributor eathena project, reverse-engineered game protocol)