How get access to a private API.

When i was started in investing world i had an idea. Have my investing progress in a single number to track from my home assistant.

Okey, this it´s a good idea (i think). But how can i do that with a private api??. I don´t have access to the official api… Well i can get access sniffing the traffic.

IMPORTANT: We can do this with many websites. Feel free to test other websites and login methods.

We´ll start sniffing this traffic between my laptop to the website.

First we need Burpsuite tool. You can download from this link.

Once we have burpsuite, we need to sniff the traffic. Go to proxy opction and open the default browser.

IMPORTANT: We need have the proxy settings with localhost connection

Once we have opened the browser, go to the main website and go login page.

Now we need to enable the intercept in burpsuite. Press intercept button in burp suite