A question that every folk at my university asks me is now taking his way into boredom.
No matter to whoever I talk about IULMS mobile app the first question they ask is “Where did you get their database?”. I finally got time to write this down for those who are still stayed unanswered and for my future laugh.
IULMS is a website. A website works on HTTP protocol. You need to first understand the protocol to use it and thus to understand the IU app back end.
When you visit iulms.edu.pk, the first thing you do is log into your account with reg. no and password. With the help of Chrome Inspector I was managed to see what HTTP call/request is being made when you hit login after entering your reg. no. and password. I figured the URL was http://iulms.edu.pk/login/index.php and the method was POST with your reg. no. and password. I found that if the result of the request has status code 200 OK, it means you had wrong reg. no or password but if otherwise it was 303 See Other, then it was successful login.
After login, similarly I visited http://iulms.edu.pk/sic/StudentAttendance.php to inspect what request is bringing your attendance data and I found what I needed. I wrote quick PHP code that was doing the job of scrapping this data as requested.
Disclaimer: This post is only for educational purposes and is not in any way meant for hacking.