+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: find the api url that Website Use (/showthread.php?tid=6123167)
find the api url that Website Use - armanmanos - Nov 24, 2020
hi , i use social media growing website . this website offer some social media services .
this site have form that when fill it and pay the price , connect to an API ( i`m sure the API is from another site ) and process your order
i need to find what is the URL of API ?
i try to use Browser inspect elements but no success
is this any way to find and track it ?
thank u so much
RE: find the api url that Website Use - absojedi - Nov 25, 2020
Check "Network" tab, instead of "Inspector" and browse through the requests
RE: find the api url that Website Use - memory - Nov 26, 2020
Similar to inspect element, you can try viewing complete source code and inspecting any JS/HTML files that may be crafting the unique API URL
RE: find the api url that Website Use - h3x0ne - Dec 3, 2020
If its send via XHR there will be a call in the network section of your dev tools in your browser. From this you will see what kicked off the request (what js file)
RE: find the api url that Website Use - SIM-2793336 - Dec 4, 2020
(Nov 24, 2020 01:00 AM)armanmanos Wrote: hi , i use social media growing website . this website offer some social media services .
this site have form that when fill it and pay the price , connect to an API ( i`m sure the API is from another site ) and process your order
i need to find what is the URL of API ?
i try to use Browser inspect elements but no success
is this any way to find and track it ?
thank u so much
Hi
You cant find API easly with inpsect you just cant
U can find it with headers with sending request
try to find section so u can send request
for example : fields , score something like that
and u can get the api if exist.
Check all recived and sending headers from whole website
and u got it with checking the fight place at right time.
tools u can use:
- burp
- live http headers
- tamper data
Good luck.