Howto Reverse-Engineer a REST-Webservice

Question

I'm currently trying to reverse-engineer a private REST-Webservice, which lacks documentation. The only thing I know about it is, that it's written in PHP, using the ZendFramework. Is there any simple way of finding out, which actions are allowed and which parameters I have to supply to make the service work correctly?

Greets, Rob

Answer 1

You can use network analyzer tool like WIRESHARK to capture data sent on network Read more about it on wireshark site

For example i hit login web service data captured by wireshark is as:

In above image you can see data sent on HTTP protocol

1.) method POST

2.) Under MIME info for example

Content-Disposition: form-data; name="phoneNumber"\r\n\r\n

name of parameter is phoneNumber

===========UPDATE==============

Here you can see fiddle captured data:

1.) Click on GO bottun, after that it starts capturing requests