Tracing Cookie and Token Dependencies with Reqvexa

说明与用途

Reqvexa 能追踪 HAR 文件中 cookie 与令牌的来源，显示完成目标 API 调用所需的最小请求链。

问题

Understanding why a target HTTP request succeeds requires knowing the origin of its session cookie, tokens, and headers, which is hidden in large HAR files.

结果

Reqvexa identified the exact sequence of requests that supplied the session cookie, CSRF token, and access token for the target API call, while marking an unobserved signature as UNKNOWN. The minimal flow was: POST /login → GET /csrf → POST /refresh → POST /api/products.

工作流

• 1. Capture a HAR file of the browser session.
• 2. Run Reqvexa on the HAR file, selecting the target request ID.
• 3. Review the analysis tab to see the minimal prerequisite flow and evidence for each value.
• 4. Inspect or ignore unresolved values and rerun analysis if needed.
• 5. Export the plan or report for documentation or automation use.

证据

Reqvexa is an open-source HTTP provenance analyzer. Give it a HAR file, select a target request, and it searches earlier traffic for the values that made the target possible.

来源

Supported evidence is different from a hypothesis… SUPPORTED means the capture contains evidence for the relationship. UNKNOWN does not mean the value is invalid.

来源

Reqvexa currently requires Python 3.12 or newer. The repository includes a synthetic HAR fixture, so you can try it without sharing or recording real traffic.

来源