This is awesome, I've long had the same thought.
Another approach to consider would be reverse engineering the mobile apps to gain access to the private API.
Also, be careful not to commit any files with your username and password in them while testing! :O
