API Access

The ZION OFFSEC API is served directly from this domain. Authenticated endpoints use your operator session (cookie), matching the web interface.

API Status: Operational
Base URL: https://zion-offsec.com/api

Endpoints

Auth & Safety

Session: operator cookie
CSRF: required on writes
Format: JSON

Quick Start

Public endpoints can be called directly. Authenticated endpoints require a session — log in through Access Terminal first and keep the session cookie.

# Search the arsenal (public)
curl "https://zion-offsec.com/api/search.php?q=injection"

# Login and keep the session cookie
curl -c zion.jar -d "csrf_token=TOKEN&username=operator&password=••••" https://zion-offsec.com/pages/login.php

# Then call authenticated endpoints with -b zion.jar
curl -b zion.jar "https://zion-offsec.com/api/cart.php?action=get"
POST

/api/cart.php

Session-authenticated cart. Actions: add, remove, update, get, clear.

curl -b zion.jar -d "action=add&product_id=7&quantity=1" "https://zion-offsec.com/api/cart.php"
curl -b zion.jar "https://zion-offsec.com/api/cart.php?action=get"
POST

/api/wishlist.php

Session-authenticated wishlist. Actions: get, list, toggle, check, count.

curl -b zion.jar -d "action=toggle&product_id=7" "https://zion-offsec.com/api/wishlist.php"
POST

/api/licenses.php

License operations: my_licenses (your keys), verify, availability (stock), and admin actions assign, generate, revoke. Requires session; admin actions require the admin role.

curl -b zion.jar "https://zion-offsec.com/api/licenses.php?action=my_licenses"
curl -b zion.jar "https://zion-offsec.com/api/licenses.php?action=verify&license_key=ZION-XXXX-XXXX"
GET

/api/download.php

Secure product delivery. Validates ownership of a sold license, download limits, expiration and IP binding, then streams the file.

curl -b zion.jar -OJ "https://zion-offsec.com/api/download.php?license=ZION-XXXX-XXXX&product_id=7"
POST

/api/contact.php

Submit a contact message (fields: name, email, subject, message).

curl -d "name=operator&email=operator@zion.net&subject=hello&message=hi" "https://zion-offsec.com/api/contact.php"