2019-11-10

Android API Sniffer / Debug

• ​On the Wire: Network Capture Tools for API Developers (June 2007-06)
• ​A Tutorial for Reverse Engineering Your Software's Private API: Hacking Your Couch (2015-01-06)
• ​Reverse Engineering APIs from Android Apps — Part 1 (2017-03-22)
• ​Reverse Engineering Android Applications (2017-07-18)
• ​3. Sniffing HTTPS API Traffic on Nougat 7.0 & newer OS bypassing default OS TLS security (2018-05-25)
• ​Reverse engineering an API (2019-01-02)

Proxy

• ​Fiddler
  • ​API Sniffing using Fiddler (2018-02-16)
• ​Charles
• ​Postman
  • ​Postman Interceptor
• ​mitmproxy

Java API Security

• ​https://howtodoinjava.com/security/rest-api-security-guide/

Android Security

• ​https://github.com/s3bap3/apk-analyser
• ​https://developer.android.com/studio/build/apk-analyzer
• ​https://androguard.readthedocs.io/en/latest/
• ​https://github.com/gorla/appmining
• ​https://software.imdea.org/~alessandra.gorla/papers/Gorla-CHABADA-ICSE14.pdf

Golang

• ​https://awesome-go.com/

Open Data

• ​https://medium.com/openlink-software-blog/the-screenshots-below-demonstrate-the-point-i-am-making-about-facebook-pages-having-sparse-metadata-27646aabef25
  • 透過 Linked Data 來驗證 Facebook 文章的可信度... 挺有趣的
• ​http://osds.openlinksw.com/

Swagger / Open API 轉換

• ​https://github.com/LucyBot-Inc/api-spec-converter - 支援在不同 API 格式之間作轉換

Google API

• ​https://developers.google.com/identity/
• ​https://developers.google.com/calendar/
• ​https://developers.google.com/sheets
• 以前舊的叫 Google Data API
  • ​https://developers.google.com/gdata/docs/directory

gRPC

• ​https://grpc.io/