Posts in reverse-engineering

Enabling Hidden Maps And Game Modes In Halo Infinite

July 12, 2022

You might've seen over the course of the past couple of months since the Halo Infinite release some news and rumors about upcoming game modes in the game. I wondered how those folks got their hands on the new experience and just assumed that it's typical data mining in game files to look for new assets. That was until I really got hooked on the Halo Infinite story, started exploring the undocumented Halo Infinite API, and realized that the answer to my question was here all along!

Reverse Engineering The Halo Infinite Rating And Favoriting API

July 10, 2022

If you've been following me on Twitter, you probably already know that I spend inordinate amounts of time on reverse engineering the Halo Infinite API. As I am working on my .NET wrapper for it (astutely called Grunt, I realized that putting together a nice-to-use blanket over the many GET HTTP APIs is relatively straightforward. There are some permissions here and there that I need to figure out, or in some cases fiddle with undocumented query parameters.

Getting Halo Infinite Match Stats With Official Halo API

January 27, 2022

Now that I got authentication out of the way, it's time that we actually get something useful done with the Halo Infinite API. This whole saga started with me wanting to get the match stats so that I can analyze them outside the game, and that's what I thought I'd tackle first.

Halo Infinite Web API Authentication

January 26, 2022

A week ago I was finally able to figure out what endpoints the Halo Infinite Web API uses. Now, the challenge became figuring out how to properly request the data from those, as there were two component pieces to every request - a Spartan token, and a clearance. After fiddling with the API a bit, and looking at the endpoint that aggregates all other endpoints, I was able to learn that there is a straightforward way to get all the right tokens through a number of chained requests, that are documented in this blog post.

Discovering the Halo Infinite API

January 21, 2022

As with most of my reverse engineering stories, this one starts with "Hmm... I wonder if I can get this data anyway?" I mentioned this in my previous blog post that I just finished the Halo Infinite campaign, and the next step was multiplayer, which also meant that I wanted to keep track of my stats to see just how bad I am playing against real people and aimbots.

Behind The Spotify Wrapped API Scenes

December 2, 2021

Every year (unless you're one of those Apple Music people) music fans rejoice to get their Spotify Wrapped, or - the musical year in review. It's a fun way to explore the most frequently listened to songs and artists. And every year up until this one, if memory serves me right, the experience could be viewed in the browser. And then, I paid the site a visit in the year 2021.

Reverse Engineering The Stream Deck

July 29, 2021

I've had a Stream Deck for a while. It's basically keyboard shortcuts, mapped to an individual button, with a visual set up for that button. It's convenient, it's easy to use, and it looks really good on the desk among the multitude of other RGB lights that are embedded in modern computing technology.