PDA

View Full Version : [HELP] We want one guide find secureToken!!!


em_dai_kho
06-21-2014, 01:01 AM
We want one guide find secureToken :D . Thank

em_dai_kho
06-21-2014, 07:31 PM
Or when it is encrypted like:

decompiled/vn/pvac/vivoPlayer/playSessionModels/RTMPPlaySession.as: this._nc.call("secureTokenResponse",null,TEA.decrypt(event.info.secureToken,_-y._-l(844,-970)));

You can see attachments has decomp and line 78 is: (S#adE%h0P#w@H2$% but it is not accurate when using the -T

And line: 216

KSV has helped me find the code is:"1f87a6aed03c7269d139311efe8d22e3"

So why?

Sory my bad english

peterpan
06-21-2014, 08:45 PM
post the original link

em_dai_kho
06-21-2014, 09:16 PM
post the original link

http://vivo.vn

but Vietnam only allows website access play, you can find proxy. thank

peterpan
06-21-2014, 09:53 PM
Need specific link to a video or channel you want to dump/play...(not just a web site), as some videos, on this site, don't require a token!

Example:
ffplay -i "http://123.30.104.190:10908/vivo/_definst_/mp4:video/a_new_leaf/a_new_leaf_005_2_high.mp4/playlist.m3u8"

So you need to be specific bro ;)

em_dai_kho
06-21-2014, 11:14 PM
Yes, can play with ffplay and dump with ffmpeg.
But I want here is to find and decrypt the token how to apply to other cases. :)


Specifically in this topic, we need to find ways to decrypt the token.

em_dai_kho
06-22-2014, 09:28 PM
We need .

peterpan
06-22-2014, 10:17 PM
You need to provide a specific link to a video or channel that HAS THE TOKEN you want to decrypt!

em_dai_kho
06-22-2014, 10:58 PM
You need to provide a specific link to a video or channel that HAS THE TOKEN you want to decrypt!

this
http://vivo.vn/episode/cap-doi-ky-la-/318-tap-1-13.html

file .swf
http://files.vivo.vn/ui/files/player/vivoPlayer1.1.4.swf

or any videos on vivo.vn

p/s: use proxy Vietnam when play video


i find: http://stream-recorder.com/forum/showpost.php?p=66354&postcount=17
yes, how to decrypt

mckv
06-23-2014, 02:10 AM
you already have the token what else do you need? the guide is going to be useless anyway as it will be different for an another swf.

peterpan
06-23-2014, 02:27 AM
To play and/or record most, if not all, of the videos on this site, you do NOT NEED A TOKEN. Just find the m3u8 version by using iOS as UA.

example:

ffplay -i 'http://123.30.104.190:10908/vivo/_definst_/mp4:video/couple_and_troubl/couple_and_trouble_001_1_low.mp4/playlist.m3u8'


http://i.imgur.com/CJREI08.png

However, your question, I believe pertains to the token and how you can decrypt it. I'm not an expert on encryption/decryption, but I think the hash used was MD5-based. In general, to decrypt a token, you'll have to know what encryption was used and in many cases what key was used to encrypt the token. There are folks "experts" on this forum that are far more knowledgeable that I could ever be. KSV, being one of them :) So hopefully someone could shed some light on how it's done (although I doubt it). Note that there is no "one-size-fits-all" when it comes to finding and decrypting tokens, so I would not expect a "how to guide" on how to decrypt tokens, b/c there are several ways you can skin a cat :)

Good Luck!

mckv
06-23-2014, 02:50 AM
peterpan read http://stream-recorder.com/forum/dumping-ilive-t16652.html for some examples

peterpan
06-23-2014, 04:34 AM
@mckv: Read post#2 and you'll understand what he wants. If I understood it correctly, this guy has already found the token "(S#adE%h0P#w@H2$%" BUT he says it's NOT working. KSV gave him another code and this guy wants to know how KSV got that...the thread you mentioned above is indeed pretty useful, but I'm not sure it'll help with this vivo stream...I will try it and report back to base :) Cheers!

em_dai_kho
06-23-2014, 04:42 AM
Thank for peterpan again :)

But we do not want to find a way to record from website, we give examples to try to decode toke

Thank mckv, looks like I see it and comment on the topic decode token but not a specific guide (I guess because I'm not good english)


somehow you've found a method to reverse the process:
Recieve SecureToken()--->DecodeTEA()--->SendSecureResponse()


@mckv: Read post#2 and you'll understand what he wants. If I understood it correctly, this guy has already found the token "(S#adE%h0P#w@H2$%" BUT he says it's NOT working. KSV gave him another code and this guy wants to know how KSV got that...the thread you mentioned above is indeed pretty useful, but I'm not sure it'll help with this vivo stream...I will try it and report back to base :) Cheers!

pls don't report, i'm download :)

KVS send for me :P
http://stream-recorder.com/forum/showpost.php?p=66368&postcount=18

in commando have option
-C S:TUtIflXL8B2NUETXMpUMtusas7iz4NhjeQ%3D%3D
what this?
=======


And
http://stream-recorder.com/forum/showpost.php?p=66354&postcount=17

peterpan
06-23-2014, 05:36 AM
@mckv, That did it :) -- Cheers m8!
@emdaiko This "-C S:TUtIflXL8B2NUETXMpUMtusas7iz4NhjeQ%3D%3D" is a connection parameter.

em_dai_kho
06-24-2014, 12:03 AM
Who can? .
We need.

em_dai_kho
06-25-2014, 11:57 PM
:( .