From aldeid
Jump to navigation Jump to search


API Monitor is a free software that lets you monitor and control API calls made by applications and services. Its a powerful tool for seeing how applications and services work or for tracking down problems that you have in your own applications.



API calls selection

First of all, select what API calls you wish to monitor from the top left panel:

In the above example, we're only interested in the calls to the CryptDecrypt function but we select the entire "Data Encryption & Decryption"" group.

Process monitoring

New process

If you want to analyze a new process, go to "File > Monitor New Process" or click CTRL+M.

Attach to existing process

You can also attach API Monitor to an existing process. Select the process from the processes list, right click on it and select "Start Monitoring":

Output windows

The above example shows how API Monitor has easily decrypted the p parameter from the below request:

GET /ads.php?i=
29753e233e6039293939342f753e233e HTTP/1.1
Accept: */*
Connection: Close
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)
Host: brb.3dtuts.by
Cache-Control: no-cache