02-AREAS
APIs
APIscene | Inspiring the community, one API story at a time
Dive deep into the API Economy with the API Scene. Read about API platform practices, cloud APIs, API management, and how to participate in the platform...
API Documentation Using Hacker Tools Mitmproxy2swagger
Discover mitmproxy2swagger: A quick solution to generate API documentation, bridging the gap between backend and frontend teams effortlessly in just 2 mins
API documentation is a collection of references, tutorials, documents, or videos that help developers use your API governed by the Open API Specification(OAS). An API(Application programming interface) is a data-sharing technique that helps applications communicate with each other. Not the best definition in the world but I like to think of an API as a dynamic messenger. They can store your message, process it, and also deliver it to multiple people. They are also responsible for the security of your message until it reaches you.
There are a lot of tools in the market used to produce great documentation; Swagger, Postman, Doxygen, ApiDoc, and Document360 just to name a few. However, most developers remain oblivious to the tools developed for reconnaissance which when you interact with them are useful to developers as well.
mitmproxy2swagger
mitmweb is a component of the mitmproxy project and it will serve to intercept the requests that will be channeled to the listener port opened at 8080
Next, we'll need to configure the requests source for which we'll use Postman
Next, click on the gear icon at the top right corner of the postman interface to access the settings
On the settings pop up select proxy and then toggle use custom proxy configuration Here we'll add the proxy listener port so that Postman can channel all request through out custom proxy from mitmproxy
Reverse Engineer an API using MITMWEB and POSTMAN and create a Swagger file (crAPI)
Many times when the we are trying to Pentest an API we might not get access to Swagger file or the documentations of the API, Today we will…
Many times when the we are trying to Pentest an API we might not get access to Swagger file or the documentations of the API, Today we will try to create the swagger file using Mitmweb and Postman.
Man in The Midlle Proxy (MITMweb)
run mitmweb through our command line in Kali
and as we can see it starts to listen on the port 8080 for http/https traffic, and we will make sure that its running by navigating to the above address which is the localhost at port 8081
and then we will proxy our traffic thorugh Burp Suite proxy port 8080 because we already has mitmweb listening for this port (make sure Burp is closed)
and then we will stop the capture and use mitmproxy2swagger to analyse it
Reverse engineering a Web API
Introduction Most websites or web services have an API in the backend that delivers requested data to its frontend. This can be anything from the Google Search API to delivering a message on Discord. Some people in the gaming community scan a game’s username database for certain available special names, like 3 letter names, to register them. I’ve been asked to write a tool to automate that. To do that I had to reverse engineer the R6DB API. I then could use that API to check for available usernames programmatically. This API has shut down since, likely due to abuse. The method I’m going to show also works on Electron Apps such as Discord by bringing up the DevTools. For any other app, you can use something like Fiddler to intercept the web requests.
Agent Protocol
Agent Protocol - The open source communication protocol for AI agents.
AIFunction calling with an OpenAPI specification | OpenAI Cookbook
Open-source examples and guides for building with the OpenAI API. Browse a collection of snippets, advanced techniques and walkthroughs. Share your own examples and guides.
Using Powershell scripts to start and stop Windows Services - Davidson Sousa
If you have a slow computer and want to save some memory or processing when you are not coding, this is for you
PowerShell
Mastering Windows Services: Unleashing the Power of PowerShell for Streamlined Management and Automation
5 Essential Tips for Running Windows PowerShell as a Windows Service
ChatGPT
A conversational AI system that listens, learns, and challenges
ChatGPT
A conversational AI system that listens, learns, and challenges
Spider: The Web Crawler for AI
Experience cutting-edge web crawling with unparalleled speeds, perfect for LLMs, Machine Learning, and Artificial Intelligence. The fastest and most efficient web scraper tailored for AI applications.
API Transformer - Convert API Definition Files | APIMatic
Convert your API definition files to any format with API Transformer, including from Postman collections to OpenAPI 3. Migrate to OpenAPI 3.1 in seconds.
Yaak – The API client for modern developers
Call REST, GraphQL, and gRPC APIs from a simple and intuitive app
Databasesjsonsystems/public
Contribute to jsonsystems/public development by creating an account on GitHub.
Codesourcemeta/awesome-jsonschema: A curated list of awesome JSON Schema resources, tutorials, tools, and more
A curated list of awesome JSON Schema resources, tutorials, tools, and more - sourcemeta/awesome-jsonschema
Awesome ListsReusing Description
For API designers and writers wishing formalize their API in an OpenAPI Description document.
Taming My ADHD with Obsidian and PowerShell
Alleviating my ADHD headaches with Obsidian. Periodic Notes and Templater extensions save the day by reminding me of the next step towards my larger goals.
Obsidian
How to enhance your R shiny application with httpOnly Cookies
httpOnly Cookies are crucial for security, protecting against cross-site scripting attacks in R Shiny apps. Read more about them here.
R - Shiny#shiny#webdev#r-development#dev#r-shiny#shiny-server#security#http-only#cookie#cross-site scripting#xss
Draft for adding OAuth support to shiny by thohan88 · Pull Request #518 · r-lib/httr2
Info: This is a draft for discussion purposes. It's not a polished PR and currently includes minimal error handling and documentation. It may be big enough to warrant a separate package, bu...
Roxygen R6 Guide
mlr3: Machine Learning in R - next generation. Contribute to mlr-org/mlr3 development by creating an account on GitHub.
RMarkdown
AgentGPT 🤖
Assemble, configure, and deploy autonomous AI Agents in your browser.
RstudioCloud Run Websocket support now allows you to deploy a R Shiny Server as a serverless app to GCP Cloud Run
Cloud Run Websocket support now allows you to deploy a R Shiny Server - a dashboard hosting tool to host R Shiny dashhboards - as a serverless app to GCP Cloud Run