PDA

View Full Version : How to detect stream address in an Android app


Mr0aj
07-14-2017, 10:33 PM
I am trying to capture a video stream . But it does not have any website. Only an app that runs on android. No windows version. Now I want to find address of streaming server . What options I have.

mckv
07-15-2017, 01:36 AM
https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05c-Reverse-Engineering-and-Tampering.md

Mr0aj
07-15-2017, 02:06 AM
Very much technical. And I was not looking for this info.
May be I have not framed my question well.

cabulo
07-15-2017, 12:00 PM
MCKV,

heads up!

You are most welcome to post some good link here, may be technical..

http://stream-recorder.com/forum/showpost.php?p=92712&postcount=29

cheers,

Cabulo.

ihryjfbd
07-15-2017, 04:47 PM
https://play.google.com/store/apps/details?id=app.greyshirts.sslcapture

Works fairly and will show you the urls but you'll need to read through alot of code before you find the urls as it doesn't filter anything out.

Mr0aj
08-07-2017, 01:35 AM
Packet capture was working fairly until app was updated. Now it is showing url but in parts.

Mr0aj
08-07-2017, 03:24 AM
GET /videos/2017/7/134661/5970972276696109272b0400_134661_main.m3u8 HTTP/1.1
User-Agent: InstaPlay Android SDK/1.0.0 (Linux;Android 6.0.1) ExoPlayerLib/2.2.0
Host: d1s3oezf1vtq1t.cloudfront.net
Connection: Keep-Alive
Accept-Encoding: gzip

HTTP/1.1 200 OK
Content-Length: 455
Connection: keep-alive
Date: Fri, 21 Jul 2017 14:28:55 GMT
Last-Modified: Thu, 20 Jul 2017 11:57:02 GMT
ETag: "5c18e59fea430257736a29fdd248c22d"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: RefreshHit from cloudfront
Via: 1.1 9b90f85a19339fa4490a2633d70825fa.cloudfront.net (CloudFront)
X-Amz-Cf-Id: bGX9L9jTCka4LcExcShs1LKvtxfUp_XatPAymJZp-fBv7svbXZbEfQ==

#EXTM3U
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=192000,RESOLUTION=144x176
../134657/video.m3u8
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=320000,RESOLUTION=240x320
../134655/video.m3u8
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=576000,RESOLUTION=320x480
../134653/video.m3u8
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=832000,RESOLUTION=480x640
../134648/video.m3u8
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=1628000,RESOLUTION=720x1280
../134659/video.m3u8
GET /videos/2017/7/134657/video.m3u8 HTTP/1.1
User-Agent: InstaPlay Android SDK/1.0.0 (Linux;Android 6.0.1) ExoPlayerLib/2.2.0
Host: d1s3oezf1vtq1t.cloudfront.net
Connection: Keep-Alive
Accept-Encoding: gzip

HTTP/1.1 200 OK
Content-Length: 256
Connection: keep-alive
Date: Fri, 21 Jul 2017 14:28:55 GMT
Last-Modified: Thu, 20 Jul 2017 11:50:32 GMT
ETag: "86bd673ba8b854f6862d0a303429704a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: RefreshHit from cloudfront
Via: 1.1 9b90f85a19339fa4490a2633d70825fa.cloudfront.net (CloudFront)
X-Amz-Cf-Id: qecFc4LQXgW2sVXv2nyzdJC96MTAtWDmrqq4qEZ3LQVojRgYKO qHew==

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-MEDIA-SEQUENCE:0
#EXT-X-ALLOW-CACHE:YES
#EXT-X-TARGETDURATION:11
#EXTINF:10.153844,
video0.ts
#EXTINF:10.000000,
video1.ts
#EXTINF:10.000000,
video2.ts
#EXTINF:10.000000,
video3.ts
#EXTINF:8.384611,
video4.ts
#EXT-X-ENDLIST
GET /videos/2017/7/134657/video0.ts HTTP/1.1
User-Agent: InstaPlay Android SDK/1.0.0 (Linux;Android 6.0.1) ExoPlayerLib/2.2.0
Accept-Encoding: identity
Host: d1s3oezf1vtq1t.cloudfront.net
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Length: 265456
Connection: keep-alive
Date: Fri, 21 Jul 2017 14:28:55 GMT
Last-Modified: Thu, 20 Jul 2017 11:50:30 GMT
ETag: "40b66942e28787dcc4145c04dafd5fa0"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: RefreshHit from cloudfront
Via: 1.1 9b90f85a19339fa4490a2633d70825fa.cloudfront.net (CloudFront)
X-Amz-Cf-Id: TCUc3SP2zcIpoW4fDv7NCRIZNOEqdOp5sWSBViVj_TDyRVwNpD 6NFA==

G@B?%Á?ü€HFFmpeg Service01§y*????????????????????????????????????? ?????????????????????????????????????????????????? ?????????????????????????????????????????????????? ??????G@°
Á?*±??????????????????????????????????????????? ?????????????????????????????????????????????????? ?????????????????????????????????????????????????? ?????????????????????????GP°Áá?á?á?
eng?‚š?????????????????????????????????????????? ?????????????????????????????????????????????????? ?????????????????????????????????????????????????? ?????????GA