DEF CON 610 Monthly Meetup: Full Throttle Scrape: Reverse Engineering a Mobile A

Full Throttle Scrape:
Reverse Engineering a Mobile API, Bypassing Protections, and Building an Aggregator

Join us for a deep dive into a project where we reverse-engineered a custom transport protocol used by a popular website's mobile-only API. We'll explore the techniques used to bypass anti-bot measures and Cloudflare, ultimately enabling a full-scale scrape of the entire website. We'll also walk through the development of a custom aggregator built from this data. More importantly, this talk will serve as a case study on web security (and its common pitfalls), the power of data aggregation, and the significant ethical and practical reasons why undertaking such a project is ill-advised. Get ready for a journey through the wilder side of web interaction and a frank discussion on the responsibilities that come with these capabilities.

Schedule:

6pm - 7pm Setup / Meet & Greet

7pm - Full Throttle Scrape

***

General Stuff We Always Have:

Lock picking with practice locks. Picks and training provided.

Video games for the kids...okay mostly for adults, but also for the kids.

Great conversation and exchange of ideas.

***

What to bring:

Having a laptop helps, but not required.

Any hardware you'd like to show off/need help with.

Lock picks.