Reverse engineering website, network calls not showing up in dev console

Development Web Development
1

Hi all,

I currently have some ETFs at 2 different brokers. I want to write a little CLI tool that allows me to combine both portfolios, so I can get an overview of them both at the same time. I’m programming this myself because i’m trying out a new language.

Now, one broker is really nice and offers a csv download that contains all the info I need. Stuff like “you bought x of y, for EUR z each and you paid v transaction costs and w taxes”. The other one doesn’t have this. Although all the info is available somewhere, there’s not one page that I can just copy the html from, it’s spread out.

So I thought I’d write a little script to collect all this data for me, but neither firefox’s, chromium’s or chrome’s developer console show any requests being made while browsing that site. So my question is: does anybody know of a way to connect to some web server that might not get picked up by the web browser’s dev console?

Their website seems to be made with angular (not sure on Angular2 or AngularJS, I’m assuming the former). I tried installing augury, but that did not allow me to see anything. It did not even detect it was an Angular website.

If anyone has an idea, please let me know!
Otherwise I’ll have to sift through minified Javascript, and I don’t think I want to do that :confused:

2

What’s the website?

3

https://www.bolero.be/

EDIT: The problem only occurs when you’re logged in unfortunately

4 
Accept-Ranges	
bytes
Age	
0
Cache-Control	
max-age=360, private, s-maxage=360
Connection	
keep-alive
Content-Encoding	
deflate
Content-Length	
14695
Content-Security-Policy	
Content-Type	
text/html; charset=UTF-8
Date	
Mon, 20 Nov 2017 21:05:58 GMT
Referrer-Policy	
strict-origin-when-cross-origin
Strict-Transport-Security	
max-age=15638400; includeSubDomains
Vary	
Accept-Encoding,Accept-Language
X-Cache	
uncached
X-Cacheable	
NO:Cache-Control=private
X-Content-Security-Policy	
frame-ancestors 'self' https:/…his.com https://pbs.twimg.com
X-Content-Type-Options	
nosniff
X-Frame-Options	
SAMEORIGIN
x-webkit-csp	
frame-ancestors 'self' https:/…his.com https://pbs.twimg.com
X-XSS-Protection	
1; mode=block

Ahh, its a frame with nosniff

5

Never even heard of that. Thx for your help!
I’ll ẗake a look at it tomorrow, I need some sleep now.