A list of hidden and undocumented apis/endpoints

RakNetProtocol · November 8, 2020, 6:30pm

A alright, thank you for brining this to my attention.

RakNetProtocol · November 8, 2020, 7:40pm

RakNetProtocol · November 8, 2020, 8:05pm

Another analytics endpoint:
https://ecsv2.roblox.com/client/pbe

it requires some query params or something

RakNetProtocol · November 8, 2020, 8:10pm

The above is also persistent on /studio/pbe

RakNetProtocol · November 9, 2020, 8:27pm

cxmeels · November 13, 2020, 4:03pm

I’m actually quite curious what gold.roblox.com is. I inspected Studio traffic using Wireshark today and it seems to be doing something with that endpoint when calling Players:GetUserIdFromNameAsync.

My first guess was that gold.roblox.com is the actual endpoint for API requests, and other API endpoints (e.g. users, auth, etc.) are just aliases for it that setup the request internally. Which then made me think silver.roblox.com is the old API using ASP.

metatablecatmaid · November 13, 2020, 4:23pm

Adding these because it’s useful, these act as replacements for .roblox.com.

ModManager uses it’s S3 bucket to download sitetest branches.
https://sitetest1.robloxlabs.com
https://sitetest2.robloxlabs.com
https://sitetest3.robloxlabs.com (exists but doesn’t have an /index page)

https://s3.amazonaws.com/setup.sitetest2.robloxlabs.com/version.txt

also a lot of these ‘hidden’ APIs do have partners in their relative subdomain, you shouldn’t be using the assetgame APIs where possible

RakNetProtocol · November 13, 2020, 5:22pm

What was the endpoint it was using? Because I know there are tracker pixels on this site.
http://gold.roblox.com/_/_/1px.gif

cxmeels · November 13, 2020, 5:24pm

I don’t know. Wireshark only provides the hostname for encrypted packets. I tried Fiddler too, but it doesn’t pick up requests made from within the context of a DataModel; only requests made by Studio itself.

RakNetProtocol · November 13, 2020, 5:25pm

I know robloxlabs, but in the most recent dump I had I only dumped *.roblox.com subdomains.
There are subdomains on robloxlabs such as https://setup.opstest1.robloxlabs.com/.
These endpoints are not entirely intended to be used, they are only here as a form of resource. And also I know that the ones that don’t have a /index
https://ash1.statping.aws.robloxlabs.com/ is one

RakNetProtocol · November 13, 2020, 5:33pm

Also, are you directly filtering wireshark towards one protocol? Or are you just watching the requests with no filters?

cxmeels · November 13, 2020, 5:45pm

I didn’t apply any filters. Just captured traffic on my Ethernet adapter. I usually use Fiddler, not Wireshark. I just knew Wireshark can usually see things Fiddler can’t.

RakNetProtocol · November 13, 2020, 5:46pm

Such as TCP and TLS, could we push this to a PM to discuss more?

RakNetProtocol · December 3, 2020, 8:14pm

So after days of painful searching and crying to myself I have uncovered a couple of 6000 subdomains on *.roblox.com and *.robloxlabs.com, keep in mind I am not guaranteeing that these aren’t dead yet. Any of them that timeout, they don’t have index pages.

RakNetProtocol · December 3, 2020, 8:17pm

Almost all gametests are dead btw, I believe gametest4 still exists

metatablecatmaid · January 11, 2021, 4:10pm

redirects to

RakNetProtocol · January 12, 2021, 7:52pm

Why is this relevant to me? Please explain

metatablecatmaid · January 30, 2021, 11:07am

GET https://api.roblox.com/developerproducts/list

Parameter	Type
universeId	int64
page	number

Julli4n · January 30, 2021, 12:28pm

This post isn’t actively maintained anymore (last edit November 2nd) if it was, you would have seen it here already.
FYI you forgot the placeId parameter

DinoHawaii · August 12, 2022, 3:21am

Some reveal private information about accounts and trying to use them for yourself or other users in code will give a 403 forbidden error unless you have some cookie or something, I think.