Richard Colley
Richard Colley
Sorry forgot to add versions: Python: 2.7.8 Django: 1.7.4 DRF: 3.1.0 DRF-bulk: 0.2
I had a quick go, but there are two many new things for me to easily come up with a solution. In case anyone has the inclination to continue, here's...
Yes, already did all the above. The requests from the chrome extension seem to be sending binary data. Well, more exactly, base64 encoded payloads (yes, they are already unmasked). At...
A bit of searching shows that this is likely an encrypted payload. OpenSSL's encrypt routines output the string "Salted__" and then an 8-byte salt (see e.g. http://hustoknow.blogspot.com.au/2013/02/openssl-encryption-libraries-add-salted.html) But I don't...
I've taken the tack of looking at the extension js source. That's paying dividends, but is slow going (all the code is obfuscated). Hopefully I can have some more detail...