I shouldn't overstate what I'm doing - this is largely an exercise in reversing what they're doing. And when I figure it out I might have a little fun by way of

I shouldn't overstate what I'm doing - this is largely an exercise in reversing what they're doing. And when I figure it out I might have a little fun by way of verifying I figured something out. Tools - I use Charles Proxy and perl with WWW::Mechanize (substitute your recreational language of choice). Sometimes JMeter is helpful, but that's kind of a rathole if you haven't had reason to subject yourself to it before.