Prepare Release 2 - Githubissues

LAripping / SAPhIRE

Simple API Reverse Engineering helper

9 stars 1 forks source link

Prepare Release 2 #17

Open LAripping opened 6 years ago

LAripping commented 6 years ago

Summarize improvements since last (look in commit messages)
Make screenshots that highlight them (...for the preso)
Find use case (CTF?) that SAPhIRE alone solves. Candidates:
1. messenger log-in, then search with graphql.
  - NOT the existing
  - rerun with empty cache
  - use demo@lavreotiki.info account, then change password
  - first login with wrong to show the 200 resp
  - then correctly for the 301 + tokens
  - do the search, clear the har to only contain ONE result
Update the asciinema (video?)
Make preso with screenshots, nice theme, 'future' section that describes
- Desired features until GUI
- GUI look
- Leave
Link it via the README

LAripping commented 6 years ago

"the alternative to working in the debugger", instead, split-screen harfile(sublime-> can collapse) and saphire step-by-step (--interactive), highlight (literally, circle them on the slide) the common data, with a dedicated profile

LAripping commented 6 years ago

(modified) existing [messenger-firefox.com]() contains a ts=... : demonstrate smart-decoder's timestamps

also, [skroutz.gr/analytics]() contains a ?gen=150824... : demonstrate timestamps

[gameboard.pentestcyprus.com]() contains a session=... : demontsrate smart-decoder's JWTs

[skroutz.gr]() has a set-cookie="helmet-couch=...session-id..." : demonstrate smart-decoder's base64

[skroutz.gr]() has a cookie=__insp_targlpt=Σύγκριση τιμών : demostrate Unicode support <input tokens? json tokens?