Scraping and reverse engineering the right way
summary
Claims that much of fintech integration is screen scraping and shows how to reverse‑engineer Domino’s API end to end, extracting requests with the browser network inspector, copying as curl, using Postman import and man‑in‑the‑middle proxies (mitmproxy/Charles), plus mobile tools (Objection/Frida) where needed. Describes stripping headers, matching TLS and timing, using a payment token (ACI) to finalize orders, cites prior work on ~5,000 merchants, and actually orders pizza for the conference to prove the flow works.
AI-written summary · about
chapters (10)
- 0:00Introduction and setup
- 3:19What is reverse engineering
- 9:18Tools for reverse engineering
- 11:26Live demo with Giphy
- 16:44Reverse engineering Domino's API
- 24:04Hands-on workshop start
- 41:11Order validation and payment tokens
- 51:29Ordering pizza and demos
- 1:01:18Company pitch and resources
- 1:29:52Q&A and closing remarks
related talks
27mReverse Engineering a Private API
27mReverse Engineering a Web API
29mScorthter, Hacking Banks and Cryptocurrency Exchanges through their APIs
01h 30mMaster Advanced Anti-Ban & Web Scraping Techniques
27mReverse-engineering JavaScript to get rid of trust issues
32mEnhancing Security, Reliability, and Global Scalability in FinTech
46mMastering Web Scraping: Unleash Your Data Extraction Wizardry!
01h 01mPrincess of Thieves: How I Robbed 30 Banks