PDA

View Full Version : Breaking the security of RTMPTE protocol running with flowplayer


auro
04-01-2014, 03:57 AM
I am reading this forum since 2 days but did not had any success regarding downloading the video hosted on sso15.gateforum.com( premium educational website containing videos) I am tring to download the videos since 15 days and have contacted many people who had good knowledge about streaming videos but nothing happened...

BUT when i came to this forum and read some posts every persons problem regarding the videos streaming is getting solved instantly...

I need these videos to prepare for my competetive exam next year... I would be very thankful for every one of you who helped...

---------------------------------------------------------------------------
first we have to login into the user15.gateforum.com with username and password then after login in we are then given a link http://sso15.gateforum.com(where actual videos are hosted), then in that the videos are played in flowplayer the juicy part is in javascript

The url containing the code below http://sso15.gateforum.com/main_page.php?part=4

<div id="video_panel" class="boxCont" align="center" >
<script type="text/javascript">
// <![CDATA[
window.onload = function () {
var player = $f("player", "flowplayer/flowplayer.commercial-3.2.16.swf", {
key:'#$b526207fead9b16994d',
plugins: {
rtmp: {
url: "flowplayer/flowplayer.rtmp-3.2.12.swf",
netConnectionUrl: "rtmpte://s20e7fj8eqzqv1.cloudfront.net/cfx/st",
inBufferSeek:false
}
},
clip: {
provider: "rtmp",
url: "mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires=1396345812&Signature=OojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL 7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXn tKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_&Key-Pair-Id=APKAI7LSJFZ27IW5FDOQ",
scaling: "fit"
}

});

};
// ]]>
</script>

and html code

<div id="player" style="width:720px;height:480px;">
<object id="player_api" width="100%" height="100%" type="application/x-shockwave-flash" data="flowplayer/flowplayer.commercial-3.2.16.swf" name="player_api">
<param value="true" name="allowfullscreen">
<param value="always" name="allowscriptaccess">
<param value="high" name="quality">
<param value="#000000" name="bgcolor">
<param value="config={"key":"#$b526207fead9b16994d","plugins":{"rtmp":{"url":"flowplayer/flowplayer.rtmp-3.2.12.swf","netConnectionUrl":"rtmpte://s20e7fj8eqzqv1.cloudfront.net/cfx/st","inBufferSeek":false}},"clip":{"provider":"rtmp","url":"mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires%3D1396345812%26Signatur e%3DOojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL 7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXn tKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_%26Key-Pair-Id%3DAPKAI7LSJFZ27IW5FDOQ","scaling":"fit"},"playerId":"player","playlist":[{"provider":"rtmp","url":"mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires%3D1396345812%26Signatur e%3DOojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL 7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXn tKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_%26Key-Pair-Id%3DAPKAI7LSJFZ27IW5FDOQ","scaling":"fit"}]}" name="flashvars">
</object>
</div>
</div>


if any information is left then i can provide that too but i need this video for my preparation....

THERE is a guy here name KSV who is a pro in this field please do help me

hasomaso
04-01-2014, 04:45 AM
send me

login:
pass:

i look

KSV
04-01-2014, 04:53 AM
it seems pretty straightforward. try following command after replacing the authentication token (red part) with fresh one.

rtmpdump -r "rtmpe://s20e7fj8eqzqv1.cloudfront.net/cfx/st" -a "cfx/st" -y "mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires=1396345812&Signature=OojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL 7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXn tKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_&Key-Pair-Id=APKAI7LSJFZ27IW5FDOQ" -o Test.flv

auro
04-01-2014, 05:24 AM
sir you are the best its working... i wish that god helps you like you are helping us... very very thankfull this would help me alot in my career.....


thank u again....

auro
04-01-2014, 05:31 AM
hasomaso sir thankyou for replying KSV sir solved my problem if i encounter any problem ahead then i will ask you guyz....

auro
04-02-2014, 12:06 AM
KSV sir the command you gave is not working at my college as the port 1935 is blocked is there anyway i could downlaod this video through port 80 as the rtmpe protocol uses port 1935... please need urgent help....

KSV
04-02-2014, 01:46 AM
just change the protocol from rtmpe to rtmpte.

rtmpdump -r "rtmpte://s20e7fj8eqzqv1.cloudfront.net:80/cfx/st"........

har6031
06-08-2014, 12:57 PM
Can u plz tell me the procedure to me? my mail ID is khvr1234@gmail.com
thank you

redo redov
08-07-2014, 06:42 PM
just change the protocol from rtmpe to rtmpte.

rtmpdump -r "rtmpte://s20e7fj8eqzqv1.cloudfront.net:80/cfx/st"........

Hi, KSV, I'm from Bulgaria.
I searched some information about how to record from secured flowplayer, because I have a registration for tv stream, and want to record from it with WM Recorder. Before that flowplayer, the site was streaming by direct link with wmv file, which link I used to record some tv news, but now, I can't found any direct link.
In the source of the site, I found only this with key "stream":

view-source:http://www.neterra.tv/content#category=&date=&id=&ignore_list=1&issue_id=130323&offset=&text=undefined&type=live

plugins: {
secure: {
url: "http://www.neterra.tv/players/flowplayer/flowplayer.securestreaming-3.2.9.swf",
token: "qawsedr55"
},
rtmp: {
url: "http://www.neterra.tv/players/flowplayer/flowplayer.rtmp-3.2.13.swf",
netConnectionUrl: "",
failOverDelay: 1000,
proxyType: "none"

Can you help me how to found direct link to the streamed video, and is there any possibility to get any link in that situation with flowplayer.

Thank you in advance,
Redo
Bulgaria

PS: I can give you my pass and username if you needed.

the site is
http://www.neterra.tv/content#category=&date=&id=&ignore_list=1&issue_id=130323&offset=&text=undefined&type=live

streamer
07-28-2015, 12:48 AM
it seems pretty straightforward. try following command after replacing the authentication token (red part) with fresh one.

rtmpdump -r "rtmpe://s20e7fj8eqzqv1.cloudfront.net/cfx/st" -a "cfx/st" -y "mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires=1396345812&Signature=OojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL 7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXn tKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_&Key-Pair-Id=APKAI7LSJFZ27IW5FDOQ" -o Test.flv

How do you know what to replace the red part with?

alok97097
10-13-2016, 11:41 PM
i am having the same problem.plz tell me how i can download this video from gate forum site
window.onload = function () {
var player = $f("player", "flowplayer/flowplayer.commercial-3.2.16.swf", {
key:'#$b526207fead9b16994d',
showErrors: false,
onError: function (errorCode, errorMessage) {
document.getElementById("info").innerHTML = errorCode === 201 ?
"lost connection, will try to reconnect." : errorMessage;
},
plugins: {
rtmp: {
url: "flowplayer/flowplayer.rtmp-3.2.12.swf",
netConnectionUrl: "rtmpe://s20e7fj8eqzqv1.cloudfront.net/cfx/st",
inBufferSeek:false
}
},
clip: {
provider: "rtmp",
url: "mp4:2017/2017_CS/DSA_Abdul/01.Introduction.mp4?Expires=1476420211&Signature=nwkP~Ce6H0GF-7lKG1EFOZwn5S8bmysbwb73Rz0Alc7bcwSLCL58fFiuXS9w84X WQ8U-Gh9Il1mZ7WckFuSLxJLQVaac-uT1UVw7vJCp-dtYgD-OX7G6RNlDjVvJBeW0gyAgjy-xQX91DzV--Jw0nfYLi1eOc4iA-4TNaU0UEas_&Key-Pair-Id=APKAI7LSJFZ27IW5FDOQ",

silentuv
10-25-2017, 10:53 AM
but did not had any success regarding downloading the video hosted on sso18.gateforum.com( premium educational website containing videos) I am tring to download the videos since 15 days and have contacted many people who had good knowledge about streaming videos but nothing happened...

BUT when i came to this forum and read some posts every persons problem regarding the videos streaming is getting solved instantly...

I need these videos to prepare for my competetive exam next year... I would be very thankful for every one of you who helped...


first we have to login into the user15.gateforum.com with username and password then after login in we are then given a link http://sso15.gateforum.com(where actual videos are hosted), then in that the videos are played in flowplayer the juicy part is in javascript

The url containing the code below
http://sso18.gateforum.com/main_page.php

<div id="video_panel" class="boxCont" align="center" >
<script type="text/javascript">
// <![CDATA[
window.onload = function () {
var player = $f("player", "flowplayer/flowplayer.commercial-3.2.18.swf", {
key:'#$b526207fead9b16994d',
plugins: {
slowmotion: {
url: "swf/flowplayer.slowmotion-3.2.9.swf",
serverType: "fms"
},
rtmp: {
url: "flowplayer/flowplayer.rtmp-3.2.13.swf",
netConnectionUrl: "rtmpe://s20e7fj8eqzqv1.cloudfront.net/cfx/st",
inBufferSeek:false
},
tube: {
url: "swf/buttons_tube.swf",
type: "classLibrary"
},
log : {
level : 'debug',
},
// add a content plugin to show speed information (this is optional)
speedIndicator: {
url: "swf/flowplayer.content-3.2.8.swf",
bottom: 50,
right: 15,
width: 135,
height: 30,
border: 'none',
style: {
body: {
fontSize: 12,
fontFamily: 'Arial',
textAlign: 'center',
color: '#ffffff'
}
},
},


if any information is left then i can provide that too but i need this video for my preparation....

THERE is a guy here name KSV who is a pro in this field please do help me

silentuv
10-25-2017, 11:01 AM
but did not had any success regarding downloading the video hosted on sso18.gateforum.com( premium educational website containing videos) I am tring to download the videos since 15 days and have contacted many people who had good knowledge about streaming videos but nothing happened...

BUT when i came to this forum and read some posts every persons problem regarding the videos streaming is getting solved instantly...

I need these videos to prepare for my competetive exam next year... I would be very thankful for every one of you who helped...


first we have to login into the user18.gateforum.com with username and password then after login in we are then given a link http://sso18.gateforum.com(where actual videos are hosted), then in that the videos are played in flowplayer the juicy part is in javascript

The url containing the code below
http://sso18.gateforum.com/main_page.php

<div id="video_panel" class="boxCont" align="center" >
<script type="text/javascript">
// <![CDATA[
window.onload = function () {
var player = $f("player", "flowplayer/flowplayer.commercial-3.2.18.swf", {
key:'#$b526207fead9b16994d',
plugins: {
slowmotion: {
url: "swf/flowplayer.slowmotion-3.2.9.swf",
serverType: "fms"
},
rtmp: {
url: "flowplayer/flowplayer.rtmp-3.2.13.swf",
netConnectionUrl: "rtmpe://s20e7fj8eqzqv1.cloudfront.net/cfx/st",
inBufferSeek:false
},
tube: {
url: "swf/buttons_tube.swf",
type: "classLibrary"
},
log : {
level : 'debug',
},
// add a content plugin to show speed information (this is optional)
speedIndicator: {
url: "swf/flowplayer.content-3.2.8.swf",
bottom: 50,
right: 15,
width: 135,
height: 30,
border: 'none',
style: {
body: {
fontSize: 12,
fontFamily: 'Arial',
textAlign: 'center',
color: '#ffffff'
}
},
},

// skinless controlbar using tube buttons
controls: {
url: "swf/flowplayer.controls-skinless-3.2.15.swf",
skin: 'tube'
}
},
play: {
url: 'img/play_large_red.png',
width: 83,
height: 83
},
clip: {
provider: "rtmp",
url: "mp4:2018/EC/Control_System/01.System_and_Control_System.mp4?Expires=150895059 4&Signature=GFM~g22WZgNAxL3HCqEOyTZoivai37Mdj48xek-JiKj3iNqQOdWbRDbjYyVPT5ery3a3PZ5yhJIJ3WYj7y8mMWpOJ ~51bx6rsKFj0s7jac9tLJfnJfPCDjliJO1zN7feUlBhMpOm5fZ JmV2sp~-V~1LFGafUhUUwIt-5gXyXUW0_&Key-Pair-Id=APKAI7LSJFZ27IW5FDOQ",
scaling: "fit",
autoBuffering: true,
fadeInSpeed: 20000,
onLastSecond: function() {
this.getScreen().animate({opacity: 0}, 3000);
},

// if screen is hidden, show it upon startup
onStart: function() {
this.getScreen().css({opacity: 0.8});
}
}

});



if any information is left then i can provide that too but i need this video for my preparation....

THERE is a guy here name KSV who is a pro in this field please do help me