PDA

View Full Version : Key for Secure Token Response in RTMPE


fedex1
08-27-2013, 10:34 AM
Thanks to everyone in this forum. It is truly appreciated.

Chap helped us with a particular public government website and gave us the key for the secure token response. Many thanks to chap! But we want to be able to find the key ourselves.

Can someone point us to a page where it describes how to derive the key for the secure token response?

For example, this works:

rtmpdump -r "rtmpe://nyc.pegcentral.com/councilnyc/" -a "councilnyc/?doConnect=12345&doPublish=54321" -f "WIN 11,8,800,94" -W "http://councilnyc.pegcentral.com/flash/media_player_798c.swf" -p "http://councilnyc.pegcentral.com/flash/media_player_798c.swf?server=nyc-rtmp.pegcentral.com&account=councilnyc&videoFilename=NYCC-PV-CH-Cha130822-153731.mp4&from=legistar&inTime=&startState=play" -y "mp4:NYCC-PV-CH-Cha130822-153731.mp4" -o "2013-08-26_11-53-22_mp4_NYCC-PV-CH-Cha130822-153731.flv" -T "2JNxehiz"

but how was the -T parameter found?

I suspect it may be different for different cases but what is the general strategy? And it probably is an evolving issue :)

nullacht
08-28-2013, 01:35 AM
The key is stored inside the SWF file.

http://councilnyc.pegcentral.com/flash/media_player_798c.swf

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))

secureTokenCode = "2JNxehiz"

fedex1
08-29-2013, 09:08 PM
Thank you nullacht!

For those using ubuntu, you can use swfmill to decompile the SWF file

For example,

Install:
sudo apt-get install swfmill

Run:
swfmill swf2xml media_player_798c.swf media_player_798c.xml

Then look for the token manually.

makkie_65
01-29-2014, 08:36 PM
The key is stored inside the SWF file.

http://councilnyc.pegcentral.com/flash/media_player_798c.swf

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))

secureTokenCode = "2JNxehiz"

Hello,

Can you walk me through how you got from

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))

To

secureTokenCode = "2JNxehiz"

I got to the first part with an swf decompiler (showmycode.com), but for the life of me I have NO clue how you got to the second part. :confused: Please help????

makkie_65
01-31-2014, 10:22 AM
Hello,

Can you walk me through how you got from

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))

To

secureTokenCode = "2JNxehiz"

I got to the first part with an swf decompiler (showmycode.com), but for the life of me I have NO clue how you got to the second part. :confused: Please help????

Respectfully, bump:)

peterpan
01-31-2014, 10:41 AM
Try this... http://bit.ly/1d5ndHy :)

makkie_65
01-31-2014, 03:49 PM
Try this... http://bit.ly/1d5ndHy :)

Thank you for the response!
So now..... How do I get from

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))

To

secureTokenCode = "2JNxehiz"

Using JPEXS?

Thanks again!!!

peterpan
01-31-2014, 07:43 PM
C'mon Bro...Use Your Brain a Little Bit...

Install it
Open the file (swf)
Go to Tools
Select "Search All ActionScripts"
Check "ignore case"
Type token in the search box and click OK
Go up and down til you find it ;)

Note: this works for some swf's, but not all :(

good luck

makkie_65
02-01-2014, 12:26 PM
C'mon Bro...Use Your Brain a Little Bit...

Install it
Open the file (swf)
Go to Tools
Select "Search All ActionScripts"
Check "ignore case"
Type token in the search box and click OK
Go up and down til you find it ;)

Note: this works for some swf's, but not all :(

good luck

Thank you for your response. I already had tried that and I got a BIG ZERO... NADA:p

Here are three files I am using to learn how to do this (I have a whole list of channels I need to get the tokens for)

http://player.longtailvideo.com/player5.3.swf
http://www.zenex.tv/data/scripts/eplayer.swf
http://www.iguide.to/player/secure_player_iguide_embed_token.swf

Which means: what do you do when you cannot get the token using this method?

Thanks

chap
02-01-2014, 01:44 PM
makkie_65
I have a whole list of channels I need to get the tokens for
list of channels

makkie_65
02-02-2014, 01:30 PM
makkie_65

list of channels

For the following I would need full stream URL including the tokens:

http://www.tv-envivo.com.ar/2011/01/tyc-sports-en-vivo.html
http://www.tv-envivo.com.ar/2012/08/tyc-sports-internacional-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/fox-sports-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/telefe-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/canal-13-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/canal-9-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/canal-7-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/america-en-vivo.html
http://www.tv-envivo.com.ar/2012/07/cronica-tv-en-vivo.html
http://www.tv-envivo.com.ar/2011/09/canal-encuentro-en-vivo.html
http://www.tv-envivo.com.ar/2013/03/deportv-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/cm-canal-de-la-musica-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/america-sports-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/canal-26-en-vivo.html
http://www.tv-envivo.com.ar/2013/07/monte-carlo-tv-en-vivo.html
http://www.tv-envivo.com.ar/2014/01/vtv-uruguay-en-vivo.html
http://www.tv-envivo.com.ar/2011/01/directv-sports-en-vivo.html
http://www.tv-envivo.com.ar/2013/07/univision-tdn-en-vivo.html
http://www.tv-envivo.com.ar/2013/03/unimas-en-vivo.html
http://www.elgrantv.com/canal13.html
http://www.elgrantv.com/canales2.php?a=canal13hd#c9
http://www.elgrantv.com/america2tv.html
http://www.elgrantv.com/canal9.html
http://www.elgrantv.com/tycmax.html
http://www.elgrantv.com/Foxsports.html
http://www.sintelevisor.com/tv/tycsports.html

I'd appreciate any help I could get on these. Thank you

chap
02-02-2014, 03:40 PM
example
http://www.sintelevisor.com/tv/tycsports.html
rtmpdump -r "rtmpe://93.120.27.99/live" -a "live" -f "WIN 11,9,900,170" -W "http://ukcast.tv/player/player.swf" -p "http://www.ukcast.tv/embedold.php?u=egt55&vw=500&vh=370" --live -y "egt55" -o "2014-02-03_12-26-28_egt55.flv"

no Secure Token

http://www.elgrantv.com/canal13.html
http://prepublish.fibertel.qaotic.net/epa/ngrp:CMD-10003_all/manifest.f4m

no Secure Token

makkie_65
02-03-2014, 09:54 AM
http://www.tv-envivo.com.ar/2012/08/tyc-sports-internacional-en-vivo.htmlrtmpdump -r "rtmp://edge1.video.vaughnsoft.net:443/live" -a "live" -f "WIN 12,0,0,43" -W "http://vaughnlive.tv/swf/VaughnSoftPlayer.swf" -p "http://vaughnlive.tv/embed/video/alientv?viewers=true&watermark=left&autoplay=true" --live -y "live_alientv" -o "TycSports.flv" -T "balls2u"

Can't seem to get these to work in the xml file that gets uploaded to XBMC. What an I missing in the format for the xml file? Thanks

makkie_65
02-03-2014, 09:55 AM
example
http://www.sintelevisor.com/tv/tycsports.html
rtmpdump -r "rtmpe://93.120.27.99/live" -a "live" -f "WIN 11,9,900,170" -W "http://ukcast.tv/player/player.swf" -p "http://www.ukcast.tv/embedold.php?u=egt55&vw=500&vh=370" --live -y "egt55" -o "2014-02-03_12-26-28_egt55.flv"

no Secure Token

http://www.elgrantv.com/canal13.html
http://prepublish.fibertel.qaotic.net/epa/ngrp:CMD-10003_all/manifest.f4m

no Secure Token

Can't seem to get these to work in the xml file that gets uploaded to XBMC. What an I missing in the format for the xml file? Thanks