REVERSE engineering THE KAYAK MOBILE API

The travel meta-search web site Kayak apparently used to have a public API which is no longer available. We can’t say we mourn the loss of the interface we’d never known about. If you are someone who was automating their searches for that best holiday vacation deal, there’s still hope. but either way you’ll like this one. [Shubhro Saha] figured out how to access the API used by the Kayak mobile app. We like that he details how to sniff the traffic between an app and the Internet and make sense of what is found.

His tool of choice is the Python package Mitmproxy. We haven’t heard of it but we have heard of Wireshark and [Shabhro] makes the case that Mitmproxy is remarkable for this application. As the name suggests, you set it up on your computer and use that box’s IP as the proxy connection for your phone. After using the app for a bit, there is enough data to start deconstructing what’s going on between the app and remote server which which it communicates. We could have a lot of fun with this, like seeing what info those complimentary apps are sending home, or trying to find safety problems in your own creations.

[Thanks Juan by means of Twitter]

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post