DEV Community

Cover image for 📖 Case Study: ⚙️ Reverse Engineering using Node JS 👾

📖 Case Study: ⚙️ Reverse Engineering using Node JS 👾

The Black Mamba🔥 on November 02, 2019

⚠️ 🚧 Warning!! : This post is about reverse engineering Back in the old days, there used to be pirated version of software/games which were availa...
Collapse
 
fsavalam profile image
fsavalam • Edited

I did this once too on a NodeJS app. The process was not as complicated as this. They had an exposed config.json file with all variables, including a "EXPIRES_IN". I bumped up that number to 999999, and Voila! I had unlimited subscription. I wrote the dev team, with screenshots, and the app was later rolled as a online web use only... 🤦🏿‍♂️

Collapse
 
blackmamba profile image
The Black Mamba🔥

😁Thanks for sharing your experience, I hope you got a bug bounty from the developer for reporting that vulnerability 🧐. the scenario here is a little different, I routed all the requests from the app to the express server that I made by modifying the application library.

Collapse
 
fsavalam profile image
fsavalam

genius

Collapse
 
prafulla-codes profile image
Prafulla Raichurkar

Good article 😁👍🏻

Collapse
 
blackmamba profile image
The Black Mamba🔥

Thanks man 😇