skills.rest
AgentComputerAI
AgentComputerAIOFFICIAL
Explore all skills by this author →
WebsiteGitHub

reverse-engineer

Reverse-engineer hidden internal APIs and encrypted data from target websites.

5|Updated Apr 9, 2026
Search Tags:#api#graphql#websocket#reverse-engineering#decryption#webscraping
One-click install
npx skills add https://github.com/AgentComputerAI/torch --skill reverse-engineer-agentcomputerai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: reverse-engineer
Source: https://github.com/AgentComputerAI/torch/tree/main/skills/reverse-engineer
Command: npx skills add https://github.com/AgentComputerAI/torch --skill reverse-engineer-agentcomputerai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Many modern websites hide the data users need behind internal APIs, encrypted payloads, WebSocket streams, or heavily obfuscated JavaScript, making traditional HTML scraping impossible.

Core Features & Use Cases

  • Network capture to discover hidden API calls.
  • Response classification to distinguish plaintext, compressed, or encrypted data.
  • API replay with minimal required headers.
  • Token extraction from cookies, local storage, or inline scripts.
  • JavaScript deobfuscation to locate endpoints and keys.
  • Payload decryption for NaCl, AES‑GCM, or CryptoJS protected data.
  • WebSocket interception for real‑time feeds.
  • GraphQL reconstruction when introspection is disabled.
  • Protobuf decoding for binary message formats.

These capabilities enable developers to extract data from e‑commerce sites, dashboards, real‑time feeds, and any web app that loads content dynamically.

Quick Start

Use torch to reverse‑engineer a URL and automatically retrieve its hidden API data.

Frequently Asked Questions about reverse-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract hidden API data from a website with obfuscated JavaScript?▼

To reverse-engineer hidden API data, you capture network traffic to discover XHR or GraphQL calls, deobfuscate inline JavaScript to locate endpoints, and replay requests with minimal required headers to retrieve the data.

How do I decrypt encrypted API payloads protected by AES-GCM or CryptoJS?▼

Decrypting encrypted API payloads requires extracting tokens from cookies or local storage, deobfuscating JavaScript to find keys, and applying decryption for AES-GCM, NaCl, or CryptoJS protected data.

What is the best way to intercept WebSocket streams for real-time data feeds?▼

Intercepting WebSocket streams involves capturing real-time network feeds and optionally handling protobuf decoding for binary message formats without requiring manual coding.

Can I reconstruct GraphQL queries when API introspection is disabled?▼

Yes, you can reconstruct GraphQL queries when introspection is disabled by capturing network traffic, classifying responses, and replaying the observed internal API calls.

Do I need to write manual code to reverse-engineer API tokens from local storage?▼

No, reverse-engineering API tokens from local storage does not require manual coding; the process automates token extraction from cookies, local storage, or inline scripts.

What are the limitations of reverse-engineering hidden APIs on dynamic web apps?▼

Reverse-engineering hidden APIs requires the target site to load data dynamically via XHR, WebSocket, or GraphQL; traditional HTML scraping remains impossible for obfuscated JavaScript without network capture.

Related Skills

Explore More Data & Analytics Skills→
ceoimperiumprojectsceoimperiumprojects
5

api-discovery

Intercept XHR, fetch, and WebSocket traffic to map hidden API endpoints.

Community
Advanced
AradotsoAradotso
8

he4rt-twitter-engagement-tracker

Monitors Twitter GraphQL responses to export engagement data as JSON.

Official
Intermediate
kevinnftkevinnft
13

web-scraping

Extract structured data from static HTML, JS-rendered pages, and hybrid sites.

Community
Intermediate
zhizhuodemaozhizhuodemao
402

ast-deobfuscate

Deobfuscate JavaScript code using a Babel-based AST transformation pipeline.

Community
Advanced