doctoreenot/numbuster-api

Fully reversed NumBuster app for android, and rewrited all requests for numbuster`s api in python.

NumBuster API

So.. I fully reversed NumBuster app for android, and rewrited all requests for numbusters api in python.

For working with that api you need access_token, there are 2 ways of getting it, choose one, which works for you.

First way(Not so easy):

Download NumBuster!_6.3.6.apk - I hope you can find it by yourself

Download Genymotion and install Google Pixel 7.1 - API 25 in Genymotion  (Thats the easiest step, so...)

Download And Install https://github.com/MobSF/Mobile-Security-Framework-MobSF  (Thats not easy, but I believe in you)

Start emulator in Genymotion and start MobSF, open MobSF in your browser http://127.0.0.1:8000 (try that)

Drop NumBuster!_6.3.6.apk to MobSF in your browser

Go to DYNAMIC ANALYZER and press Start Dynamic Analysis

Then press button start instrumentation and go to emulator, wait for numbuster to load.

Then register new account and check any number in app(Numbuster) / or use alreay created account, for that just register 
new account for the same phone number, bdw you can use free online numbers, but tss....

After that, go to MobSF and press button Generate Report

In MobSF press StartHTTPTools find something like that http://apikz2.nmb.st/api

In the http://apikz2.nmb.st/api menu look for that v6/old/search/ and in the parameters you will find your 
access_token

Second way (Why that's not the First way? BECAUSE):

So, First of all call function request_sms_code() with number for account
Second, wait for sms, then call send_sms_code(phonenumber,code), 
where phonenumber is phonenumber and, you won't believe, code is code,
after that api will get access_token Numbuster.access_token and you'l
be able to use all functionality of api. DON'T FORGET TO SAVE ACCESS_TOKEN,
I won't do it for you, I'm not your mom or something...

Now lets talk about api:

Main api file with all api functions is NumbusterAPI.py, in file signatures.py functions for creating signaturs for 
different requests.

And yes, user has only 30 free requests per day for that function: v6_old_search,
BUT with that function: v6_old_phone you have unlimited free requests.

    Also be aware, that numbuster has "shadow limit" on their servers, if you make to many requests you will start getting random info from server.

More about random data: #13 (comment)

numbuster-api's Issues

v6_old_phone doesn't work

Hello! Thanks for your project!
I noticed that function v6_old_phone didn't work properly. It gives for the same number various and randomly generated names... Last week all were good, but this week not. Function v6_old_search gives names in hash-view.
What do you know about it? Did Numbuster change his API or close the door to unlimit requests?

TODO

Implement functions for api v7 and v8

Thank you so much

Your code is excellent. I'm gratefull for your hard work! Thxs again!

403 Forbidden

Hi!
When trying the very first step to authenticate, namely api.request_sms_code, the request made in api.another_profiles returns 403 Forbidden.

Did something change on Numbuster side, or am I missing something?

Hey

I have been using your code for almost 2 years now, I would like you to update it because it doesn't work properly, when you request a number, it gives data, but if you request data for this number again, it will give different
RU: Я пользуюсь вашим кодом уже почти 2 года, хотелось бы чтобы вы его обновили потому что он не работает должным образом, при запросе номера выдает данные, но если еще раз запросить данные на этот номер, то выдаст другие

Implement v6_auth_precheck

Code isn't coming to my phone after calling "request_sms_code" function

I've implemented the "request_sms_code" function (and, of course, all other stuff that is required for it). The problem is that after calling the "v6_auth_agreement_code" function responses look like successful:

{"status_code":0,"status":"success","message":"","data":null}")

but actually a confirmation code isn't coming to a phone number specified. Do you have any ideas why it happens?

Thanks in advance.

Contacts md5 hash

Thank you for application. How are contact names hashed? This is md5, but not just from the name. What does the hash come from? Readed - #6, but Md5 hashes match for the same names for different phone numbers.

Good Job. Decode Contacts[]

Hi. Very good jobs. If I buy pro version, I can see more contact name. But in free version I can't see more info, but API result have contacts[]
"contacts": [ { "firstName": "d78cc706ae0b03bc283dc1c119be6ef1", "lastName": "225a387247aefb8b1b00d7d94355b935", "count": 1 }, { "firstName": "e45cb1b8d805c6db64575fece1b26e0e", "lastName": "3e02d397a9dcc118cb4ac471ff20468a", "count": 1 } ],
How can I decode this part? May be have any ideas

How to get information not as json format

Your programme is excellent but i need to get information simply in text, not in json format. How i can do it?

Binary data

Rewrite auth function, because cliend sends binary data to server.

Functions for easy registration/auth

API V7

Thank you for your app. Over time, some questions and problems have emerged.

1. apparently, numbuster updated the api and now uses the v7 api. Do you have any ideas for switching your app to the v7 api as well?
2. couldn't give your contact.