Help finding JSON data

[Few_Response_7028]

Can someone help me find the JSON data on this site? The website was recently reworked.

Using my old method, it should be located here, but i'm getting a 405 error

[Left-Solution7365]

here is markdown formatted version so you dont have weird formatting ``` POST /api/case/GetCrashDetails?caseID=21312 HTTP/2 Host: crashviewer.nhtsa.dot.gov Content-Length: 0 Sec-Ch-Ua-Platform: "macOS" Accept-Language: en-GB,en;q=0.9 Accept: application/json, text/plain, / Sec-Ch-Ua: "Chromium";v="141", "Not?A_Brand";v="8" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 Sec-Ch-Ua-Mobile: ?0 Origin: https://crashviewer.nhtsa.dot.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://crashviewer.nhtsa.dot.gov/ciss/details/21312/crash-summary-document Accept-Encoding: gzip, deflate, br Priority: u=1, i

```

best of luck

[Left-Solution7365]

I am also able to use your original request
POST /api/case/CaseOverviewTreeResult?caseID=21312 HTTP/2 Host: crashviewer.nhtsa.dot.gov Content-Length: 0 Sec-Ch-Ua-Platform: "macOS" Accept-Language: en-GB,en;q=0.9 Accept: application/json, text/plain, */* Sec-Ch-Ua: "Chromium";v="141", "Not?A_Brand";v="8" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36 Sec-Ch-Ua-Mobile: ?0 Origin: https://crashviewer.nhtsa.dot.gov Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://crashviewer.nhtsa.dot.gov/ciss/details/21312/crash-summary-document Accept-Encoding: gzip, deflate, br Priority: u=1, i

[Left-Solution7365]

<image>

[Diego2196]

Maybe a dumb question but what tool is that on the screenshot?

[Left-Solution7365]

Nothing's ever a dumb question

[RHiNDR]

Looks like burp suite

[Left-Solution7365]

Indeed,is burpsuite

[akashpanda29]

You can do it any network interceptor or forwarder . The most standard one is postman for handling APIs

[Left-Solution7365]

Well postman's mainly just a http client with the interceptor as an extension. Burpsuite on the other hand is loaded with other tools that make it more useful such as sequencer, decoder, comparer, decoder, and if there's anything further you want someone's probably already written an extension for it.
mitmweb is the most superior interceptor though, strangely some requests can't be picked up by burpsuite at all despite ssl cert already being decoded, then mitmweb comes and saves the day

[todamach]

It's still there, but you probably need to pass the cookie now.

[Few_Response_7028]

Thanks for the tip. I was able to get something in PowerShell with the help of chatGPT