Skip to content
Sign in
Artwork for My Weird Prompts
My Weird Prompts · August 17 · 27 min

Reverse-Engineering Hidden Web APIs

Every web app you use exposes a hidden API layer through the HTTP requests your browser makes. This episode explores how to discover those undocumented endpoints, reverse-engineer them from network traffic, and wrap them into tools for AI agents. From simple copy-as-cURL endpoints to CSRF-protected workflows and request sequencing, we cover the taxonomy of hidden APIs, browser-agnostic approaches using mitmproxy, and the tradeoffs of building agent tooling on unsupported interfaces. Episode #349601 — open it directly at myweirdprompts.com/349601

0:00 · Intro-27:58
Play in
Transcript file

transcript

No transcript — this publisher did not publish one.

show notes

Every web app you use exposes a hidden API layer through the HTTP requests your browser makes. This episode explores how to discover those undocumented endpoints, reverse-engineer them from network traffic, and wrap them into tools for AI agents. From simple copy-as-cURL endpoints to CSRF-protected workflows and request sequencing, we cover the taxonomy of hidden APIs, browser-agnostic approaches using mitmproxy, and the tradeoffs of building agent tooling on unsupported interfaces.

Episode #349601 — open it directly at myweirdprompts.com/349601

chapters

5 chapters

more episodes

All episodes