Live data from Hacker News

Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs

zatanna.ai

81–90 of 97 posts

Re: Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs

#81

Hey Alex, we had similar thoughts at Retriever AI of moving from webpage interactions to reverse engineering the underlying APIs. Compared to your our approach, we are doing this entirely within a browser extension so meeting users where they already doing their existing work. Within the extension just record doing a task, we reverse engineer the APIs and write a script. Then execute the script from within the webpag…

cool . can you give me the link of the tool

Re: Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs

#84

Earlier quoted context omitted.

Some people may believe in equal measure that intentionally trying to break interoperability is unethical. Especially if it's my data.

show me one ToS for any major service that has "interoperability" in their clauses. "interoperability" is never the case in the agreements. it is very stupid decision from business perspective. and unless legally required (like in agriculture or something, "right to repair"), no sane business will provide this to their customers.

> show me one ToS for any major service that has "interoperability" in their clauses... no sane business will provide this to their customers.

I will concede your observation that often businesses act unethically if it means they get more money.

But, ethics doesn't mean "obey the ToS", it means structure the ToS such that the ToS itself is ethical. In my opinion (which is equal in value to yours), banning interoperability in a ToS is even less ethical than violating such an unethical ToS.

For a clue as to why that is, ask why "right to repair" exists as a concept. What are the ethical principles underlying "right to repair"? After all: like you say, companies could make more money by forbidding it in their ToS (and have).

Re: Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs

#87

Prety cool, are you able to output a openapi or similar spec? I tried my hand at this once from har file, build a DAG of the requests and responses and how their parameters map into each other, and then try to build a spec. But it was very brittle. I imagine now with LLMs its much more viable. I always thought generating clients and load tests would be a cool use case.

You can prompt the mcp to do this. Honestly considering adding this as a skill in the agent chat. Internally we do this all of the time for our white glove integrations.

Re: Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs

#88

Hey Alex, we had similar thoughts at Retriever AI of moving from webpage interactions to reverse engineering the underlying APIs. Compared to your our approach, we are doing this entirely within a browser extension so meeting users where they already doing their existing work. Within the extension just record doing a task, we reverse engineer the APIs and write a script. Then execute the script from within the webpag…

Interesting. We essentially do the same thing, but with MITM. We have a chrome extension internally, but have found it's a bit of a clunky interface. Might be releasing one soon. The approach with executing script in webpage is interesting. Best of luck!

Re: Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs

#89
post #83

Interesting , I am curious how this gonna reverse engineer a perfect webapp that have many guards like captcha,cookies,auth.etc just looking for what is USP(unique selling point) here happy for you though if this actually works

Web apps like this are few and far between, and piggy-backing on the session/anti-bot tokens from your browser usually works. In really complex cases we do help companies on a white glove case-by-case basis.

Re: Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs

#90
post #71

Earlier quoted context omitted.

sorry a bit confused on your question here. If you're asking about JSON RPC we handle this via parsing. The AI can then handle deducing structure most of the time given enough context

ya, unless its very trivial, AI won't be able to "deduce the structure most of the time".

Feel free to try it out and let us know if you have any issues. I was personally skeptical, but it now does about 70% of my "reverse engineering" work. Sometimes needs a bit of guidance on really complex fields, but I think the tool calls we have given it allow it to be pretty smart. Just my biased $0.02 though
Post reply on HN