[xanathar]

Hello,

I would like to know if some people here are still able to record reallifecam streams using rtmpdump.

I used to to do it for years but I'm really struggling now with the latest version of flowplayer.

I can get the urls and parameters required, however I have some issues finding the secure token.

They used to have 2 different secure token (one for free cams and one for premiums). Both were easy to find when decompiling the old swf player.

Now things are getting more difficult. According to what I have found, I think they read an encrypted binary file. (The algorithm seem easy though)

The swf can be found here:
"http://reallifecam.com/static/flowplayer/flowplayer.swf-20160913"

It would be great if anyone interested in reversing this kind of stuff could have a look.

Are there any other options/tools to find the secure tokens ? I guess the token is somewhere in memory. Are there any tools for browsing/searching the browser/flash plugin memory ?

We can discuss in private if you want. Reversing is fun and I'm here to learn and share.

Thanks

[ihryjfbd]

urlsnooper2

GET /static/flowplayer/flowplayer.swf-20160913 HTTP/1.1
Host: reallifecam.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Referer: http://reallifecam.com/en/view/06_1
Cookie: guest_tkt="e9d8d961022a9570a3bde6ee5e45f9c41f1d93f0c230805c22 5309b459f774b0401dbc4ab6401e794dde2bbc13fa94baf7d2 678556dbf416f77fe4018d5535b757d9c2a6MTZlOGJkYQ%3D% 3D!guest\054issued-d5f9e293-1473888934!userid_type:b64str";
lang=en
Connection: keep-alive

[xanathar]

urlsnooper2

GET /static/flowplayer/flowplayer.swf-20160913 HTTP/1.1
Host: reallifecam.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Referer: http://reallifecam.com/en/view/06_1
Cookie: guest_tkt="e9d8d961022a9570a3bde6ee5e45f9c41f1d93f0c230805c22 5309b459f774b0401dbc4ab6401e794dde2bbc13fa94baf7d2 678556dbf416f77fe4018d5535b757d9c2a6MTZlOGJkYQ%3D% 3D!guest\054issued-d5f9e293-1473888934!userid_type:b64str";
lang=en
Connection: keep-alive

Thanks, but I have all of this. (and even more). What I know is that the secure tokens (the -T parameter in rtmpdump) were:
#Loi8iJu for free cams
and
VTd3uh@SgFpf for premium.

I'm trying to find the new ones.

[xanathar]

Here's a summary of my findings.

The swf is encrypted but all the parts can easily be dumped from memory using a tool like SWF Memory Dumper.

(The algorithm is simple. Before using a memory dumper, I managed to decrypt the swf using a simple python script). It's quicker with a tool though.

Using JPEXS flash decompiler we can find a few references to the 'secureToken' but nothing in clear text. Reversing the functions could take ages. Static analysis can be really difficult.

I looked at a different option. On windows 10, I dumped the chrome process (The one with flash running. You can find the process id with swf memory dumper for example) using the task manager option. (Right click on process -> Create Dump File).

With winhex I found in the dump a reference to the string 'securetoken' (ignore the case) and next to it a key that really look like what we need. Unfortunately it did not work with rtmpdump. Also it seems that the securetoken is dynamic and keep changing.

http://i68.tinypic.com/2mm5t03.png

Any help/idea is welcome.

Tools:
http://www.forceprojectx.com/services/apps/memory_dumper
https://www.x-ways.net/winhex/
https://www.free-decompiler.com/flash/

Reference:
http://blog.codestage.ru/2012/03/07/packed/

[j_cool]

I got this with urlsnooper:


rtmps://edge14.reallifecam.com/liveedge?uid=b5b4459&stamp=1474111782&token=eb65d67e240e947cc1c923610e205605

rtmps://edge27.reallifecam.com/liveedge?uid=afa61ea&stamp=1474111848&token=a01f6a373539dfa9104be0a777db174b


any good ?


Cheers,

Johnny.

[xanathar]

Thanks, but it's not what I am looking for. The secureToken is 'embedded' in the swf file. You can't get it with a 'sniffer' like this. AFAIK the only way is to either decompile the swf (which can be difficult when the code is encrypted/obfuscated/complex) or scan the memory (using an hex editor for example).

Anyway here's a little trick. You don't need urlsnooper to get those urls :)

Just try this:
http://reallifecam.com/resources/guest/fa5re/playlist/03_1

Simply replace 03_1 by the camera you want.

If you are a member and logged, replace 'guest' by 'member' in the url I gave you so you can get any camera stream.

Thanks for looking at it though.

[j_cool]

I am intersted in this research.

I cannot get rtmp parameters on some peep-show websites unless
logged in as a member.
Here it looks like the same, the difference is that you have to pay $$$
to be a member. No $$$, no research.
I could not find T in memory dump on other peep-show sites, was it because I was not paying for private shows?

Am I right here? Here I see rtmps, not seen before on peep-show website.

Thank you for feedback, it was good so far, and was good post.

[xanathar]

I am intersted in this research.

I cannot get rtmp parameters on some peep-show websites unless
logged in as a member.
Here it looks like the same, the difference is that you have to pay $$$
to be a member. No $$$, no research.
I could not find T in memory dump on other peep-show sites, was it because I was not paying for private shows?

Am I right here? Here I see rtmps, not seen before on peep-show website.

Thank you for feedback, it was good so far, and was good post.

Well, I have never done any research on 'peep-show' websites so I'm not sure. Each website can use a different way to protect their streams, so there's no universal solution to grab them. I know though (as I said before) that for reallifecam they had different tokens for guests and members. In an older version of their player the secureToken was in clear text in the swf. A simple decompilation was enough to find it. Things have changed a few months ago when they updated to a recent version of flowplayer.

I'm glad that you are interested in that research. I hope more skilled people will join us.

[ihryjfbd]

So encrypting each new packet with a new key?
something like ssl?

[xanathar]

So encrypting each new packet with a new key?
something like ssl?

I don't know exactly. I tried to dump the process a few times and had a different 'key' next to 'secureToken' (As seen in the screenshot).
I'm not even 100% sure that this string is the secureToken.
That's why I posted here, hopefully more experienced people will look at it too.

[wizard]

I'm glad that you are interested in that research. I hope more skilled people will join us.

Just to let you know there are other members around that are interested into research of pvt shows. Some of us for more than 5 years.

Anyway, what I wanted to say is that most of the things posted here at the board gets patched by cam site admins or their technical staff soon after posting. Therefore, experienced members not that just stopped posting the solutions, they even stopped posting here anything at all.

Furthermore, finding people you can trust these days is like a science fiction so mostly everything ends up with "the more you know - the less you talk".

[xanathar]

Just to let you know there are other members around that are interested into research of pvt shows. Some of us for more than 5 years.

Anyway, what I wanted to say is that most of the things posted here at the board gets patched by cam site admins or their technical staff soon after posting. Therefore, experienced members not that just stopped posting the solutions, they even stopped posting here anything at all.

Furthermore, finding people you can trust these days is like a science fiction so mostly everything ends up with "the more you know - the less you talk".

Thanks for your reply. Personally I don't mind if they don't post ready-to -use solutions. What I'm looking for is learning and understand how things work. Reversing is fun, interesting and can be gratifying too.

Do you reckon I'm wasting my time posting here and good findings are only shared privately ?

It's sad because nobody knows everything, sharing knowledge is essential. Everyone was a newbie once.

Regarding trust I agree, however I think that there's a difference between a paid RLC member wanted to record what he's watching and being able to watch/record 'private shows' for free.

Anyway that won't stop me in my research. Sci-fi or not if some people are working on the same thing (I can't be the only one) willing to discuss about it or/and share some knowledge feel free to pm me.

[j_cool]

Wizard,

Relax.

Things are difficult enough for anybody to panic.

Peep-show admins are constantly improving, with me or without me.

If you were KSV, you wouldn't care about peep-show alltogether.

Johnny.

Or,

maybe you care because you are peep-show admin,
staying on this forum may cause you heart attack at an early age.

[wizard]

Omg, it seems to me that I was missunderstood.

Can't imagine what would I know atm if I would be having the knowledge KSV and some other board members have. And for sure, no one is wasting his time here. I have discovered and learned a lot thanks to posts at this forum board. And private project board has been started mostly thanks to this board too.

Anyway, my intention was not to be offensive to the newbies but to notify them that admins are following the board so they should choose carefully what will be posting. Unfortunately, we lost several great backdoors and exploits because of the posts here and around the web in general. I apologize if anyone of the newbies felt bad or insulted cause that was the last thing I wanted to happen :(

By the way Xan, of course that you are not the only one. There is a small group of us around :)

[j_cool]

Wizard,

Look at chaturbate board somewhere on this forum.

There is nobody scared there as you are here.

Why you don't join us here in what we are looking for ( token or not ) and contribute in your way with what you know?


EDITED
_________________

I just had a good look at livejasmin board and only wankers appear to post there
and you appear to be one of them, or admin.

Cheers,

Johnny.

[wizard]

I don't know why you are so hard but I am not judging you as you don't know me.

I am scared because I am into this cam thing for a long long time now. I have seen a lot of things, a lot of backdoors & exploits and met some skillful members for past 6-7 years. Unfortunately, as the years were passing by and posted content become better and better (with solutions, tips & tricks) I was watching how the backdoors / exploits were dying one by one afterwards. We lost F4F, IML, EL, CB pass shows, MFC, LJ pvts (yes we had even LJ till last year), C4 and who knows what else (btw, LJ is now protected better than the white house). Furthermore, I could mention several members that were actively creating new solutions (like Elgero for example) but at the end they realized that posting anything here ends bad. Beside other private reasons, I believe that this was one of the main reasons why they stopped being active (at least in public). Hopefully, you understand now why I am the "scared one" around.

Furthermore, you may be surprised, but believe it or not peep shows admin were mostly lazy to do any updates and they don't care much about the models anyway. However, when hundreds of people start to exploit their website holes and start to post shows at various tube sites than they have to react. Who would care for a few guys only. Upgrading and updating of those websites is "our" fault, not theirs.

Considering the LJ and CB threads, there are ton of them at the board so I am not sure which ones you were referring to but doesn't matter. Most of the postings there are "how to ?" instead of "this is how..." Sadly, maybe it is better to be so....

Considering this thread, I would like to help but I can't as me or any of my friends were never been into RLC. Hopefully solution that you find will last a bit longer.

Cheers, wizard :)

[j_cool]

livejasmin is as generous as chaturbate.

"free peeks" for those who want it.

Now, let's go back to learning.

[mckv]

looks to be dynamic based on guest_screen

[xanathar]

looks to be dynamic based on guest_screen

Thanks for this information. I'm not familiar with this situation, I need to do some reading.

[j_cool]

ActionScript is an object-oriented programming language originally developed by Macromedia Inc.
(since merged into Adobe Systems).
It is a derivation of HyperTalk, the scripting language for HyperCard.

This for the start.

MCKV,

would you mind me asking where the screenshot comes from ?

[mckv]

jpexs decompiler

[j_cool]

thank you.

swf file to look at.

[xanathar]

thank you.

swf file to look at.

You will soon realise that there's not much in the swf file. (Well there is but it's 'packed/hidden' in the 'DefineBinaryData' section).
You should look at one of my previous message. (I posted some links). Basically, you dump the unpacked data directly from ram.
It's a common step often required for packed swf files.
I haven't much time to look at this the last few days and I haven't done much progress.

[j_cool]

you know more than me.

this is why I have to look.

though, guidance is "god sent".

Johnny.

[j_cool]

Wizard,

I look at your last post and think.

You say you had livejasmin privates untill last year.

Not much has changed there since last year except them giving people "free peeks".

Then you go on:

we lost flirt4free, ImLive, myfreecams, chaturbate, cam4, and more.

Then, what are you left with ?

Don't you think it is time to start something new like xanathar and think about what to read for the start ?

I joined this thread with the hope xanathar will tell me at the end
what did he read that gave him some result at the end.

What alternative do you offer?

Send me PM with whatever you propose
or better, join us here.

[j_cool]

xanathar,

there is a lot of reading out there.

here is short summary, to keep me busy for now:

http://smallbusiness.chron.com/difference-between-dynamic-static-pages-69951.html

Static vs Dynamic Creation
Developers generally create static pages with HTML, but use languages like PHP, Javascript, or Actionscript to create dynamic pages.

https://channel9.msdn.com/Series/Javascript-Fundamentals-Development-for-Absolute-Beginners

[xanathar]

xanathar,

there is a lot of reading out there.

here is short summary, to keep me busy for now:

http://smallbusiness.chron.com/difference-between-dynamic-static-pages-69951.html

Static vs Dynamic Creation
Developers generally create static pages with HTML, but use languages like PHP, Javascript, or Actionscript to create dynamic pages.

https://channel9.msdn.com/Series/Javascript-Fundamentals-Development-for-Absolute-Beginners

Good, I doubt it will be useful for what we want to achieve considering it's not related to swf reversing. This is basic 'modern' web programming, things I learned a long time ago :)
However if you don't know this already, feel free to learn it. Every one has a different background. Good luck. Thanks anyway.

[j_cool]

It is hard to hear from somebody who knows more, so welcome.

I need to learn javascript, it will add up to my creativity.

With computer, it all works together.

I tried google - swf reversing, we saw from MCKV that actionscript has something to do with reallifecams.

http://www.kahusecurity.com/2014/reversing-rig-eks-flash-file/

On this forum:

http://stream-recorder.com/forum/tags/

and looking for:

swf

returns a lot and it will take me time to look at it all before posting my next comment.

[xanathar]

It is hard to hear from somebody who knows more, so welcome.

I need to learn javascript, it will add up to my creativity.

With computer, it all works together.

I tried google - swf reversing, we saw from MCKV that actionscript has something to do with reallifecams.

http://www.kahusecurity.com/2014/reversing-rig-eks-flash-file/

On this forum:

http://stream-recorder.com/forum/tags/

and looking for:

swf

returns a lot and it will take me time to look at it all before posting my next comment.

Not sure what you mean with "actionscript has something to do with reallifecams" ? Actionscript is simply the language used to develop flash (swf) applications.

Now regarding the link you posted, it's simply some details about the analysis of a vulnerability in a swf file. It's interesting but not related at all with rtmp streaming.

You will certainly find a lot of information regarding swf on this forum considering flash was the most common way to play streaming videos in a browser for a long time. (it's getting slowly replaced by html5).

[j_cool]

There is a lot of information out there. I try to find something relevant, may not be perfect at doing that.

Kahu says:

ActionScriptExtractor the first shot. If it doesn’t work, you might have to use a commercial tool

When I come to "If it doesn’t work", I will ask him what commercial tool and if he is a good man to tell me buy that tool.

So myself.

He also has some interesting links and tools, check PM for that.

Anybody less than MCKV or KSV is facing Goliath in this thread.

[xanathar]

There is a lot of information out there. I try to find something relevant, may not be perfect at doing that.

Kahu says:

ActionScriptExtractor the first shot. If it doesn’t work, you might have to use a commercial tool

When I come to "If it doesn’t work", I will ask him what commercial tool and if he is a good man to tell me buy that tool.

So myself.

He also has some interesting links and tools, check PM for that.

Anybody less than MCKV or KSV is facing Goliath in this thread.

The link you posted is from 2014...
JPEXS is a nice alternative now to commercial tools.
https://www.free-decompiler.com/flash/

We are able to get the 'source' of RLC player (the swf file) by decompiling the files but to make sense of it is a different story.

[j_cool]

OK.

Let's chase the token that is changing every 2 minutes or every 2 seconds.

So far, I cannot get rtmpsuck working on that site in windows.

I set up ubuntu with lubuntu desktop, now let's make something happen there.

You encourage me to talk here while I should have my hands dirty doing some work.

For rtmpdump team if reading this, Reallifecam and ImLive are crushing rtmpsuck in windows.

Rtmpsuck should bypass tokens ( HYC, rtmpdump team, said so ) and there it is better than rtmpsrv, If I got it right.
Rtmpsrv is for parameters.

And windows is brain damaged by design ( HYC: rtmpsuck was written for Linux, which has a complete TCP/IP networking stack that isn't brain-damaged by design )

Yes I know, screen recorder...

I am glad that at least 2 of us keep this going with what we know.

[xanathar]

OK.

Let's chase the token that is changing every 2 minutes or every 2 seconds.

So far, I cannot get rtmpsuck working on that site in windows.

I set up ubuntu with lubuntu desktop, now let's make something happen there.

You encourage me to talk here while I should have my hands dirty doing some work.

For rtmpdump team if reading this, Reallifecam and ImLive are crushing rtmpsuck in windows.

Rtmpsuck should bypass tokens ( HYC, rtmpdump team, said so ) and there it is better than rtmpsrv, If I got it right.
Rtmpsrv is for parameters.

And windows is brain damaged by design ( HYC: rtmpsuck was written for Linux, which has a complete TCP/IP networking stack that isn't brain-damaged by design )

Yes I know, screen recorder...

I am glad that at least 2 of us keep this going with what we know.

Interesting, I have never used rtmpsuck before, I will try to have a look and see if I can make it work with RLC.

[j_cool]

I thought I will take a day break and cannot after reading your post.

This is a shock.

You used rtmpdump what is more challenging then rtmpdumphelper
doing everything for you.

I will be sorry to see you go when you find rtmpsuck working for you.

Please read this, I also said something.

http://stream-recorder.com/forum/rtmpsuck-and-rtmpsrv-use-rtmpsuck-and-rtmpsrv-t8302.html

[xanathar]

I thought I will take a day break and cannot after reading your post.

This is a shock.

You used rtmpdump what is more challenging then rtmpdumphelper
doing everything for you.

I will be sorry to see you go when you find rtmpsuck working for you.

Please read this, I also said something.

http://stream-recorder.com/forum/rtmpsuck-and-rtmpsrv-use-rtmpsuck-and-rtmpsrv-t8302.html

Thanks. I've done a quick search on the forum after I read "Rtmpsuck should bypass tokens" and found the thread you have just posted.
I generally managed to record whatever I wanted using rtmpdump + wireshark. I heard about those tools like rtmpsrv, rtmpdumphelper...however I always thought they were simply helping you to find the parameters. rtmpsuck seems to be a different beast, I will try to use it as soon as I can. I did not know that it was also saving the stream while watching it.

[j_cool]

I just logged in again after reading this...

you could tell me some simple how-to tips with wireshark.

I am comming back soon.

My head is spinning.

[mckv]

there are like 100s tokens from guest_screen parameter
http://pastebin.ca/3728078

[Umut]

there are like 100s tokens from guest_screen parameter
http://pastebin.ca/3728078

How did you find these tokens? It seems that server accepts secure token, but I couldn't watch the stream.

http://pastebin.com/8C8MZUXQ

[j_cool]

http://stream-recorder.com/forum/showpost.php?p=88104&postcount=104

[xanathar]

there are like 100s tokens from guest_screen parameter
http://pastebin.ca/3728078

I arrived to a similar list when I decompiled the swf files. There's a class with a map (key/value). The keys are the same as the ones in your list, however the values are longer (80 chars). The tokens in your list are only 16 chars long.

I guess from the longer longer values we should be able to derive the different tokens for (guest, members and premium members).

ex:
"74dde894c36b0fc417d3ae651d7c4e18":"XfPr4qsCpQ88s39GR9Hz3zQmctk52KGLJpjfQ58N45V2xNDfbT hHgRnXwK7LqprkDCHPMs28L5Z5mVcD",
"3fd8bf92415cf8f2018998c51c2171c2":"5RZ3THF6bs5LB2KknxHTCJxdC6532KJtPgbHmwSsQDjPrkCcld hpSQTR3KGdfhqhShpK3wTqPDMFHJ8g",
...
...
How did you find that only the first 16 chars are used as the tokens ?

Did you manage to record with rtmpdump and these tokens ?

You can pm me if you don't want to post in public.

Thanks.

[j_cool]

Somebody may try this with rellifecam and post result here

Finally found out how to do it.
For future reference, the solution is to run rtmpsuck(supplied with rtmpdump) on a second computer,
while redirecting rtmp stream traffic on the first computer to the second computer by editing the hosts file.
rtmpsuck acts like a "man-in-the-middle" and intercepts/forwards/captures the rtmp stream data.

http://forums.whirlpool.net.au/archive/1520658

[dandalaptop]

Hello, I would like to know if some people here are still able to record reallifecam streams using rtmpdump. I used to to do it for years but I'm really struggling now with the latest version of flowplayer. I can get the urls and parameters required, however I have some issues finding the secure token. They used to have 2 different secure token (one for free cams and one for premiums). Both were easy to find when decompiling the old swf player. Now things are getting more difficult. According to what I have found, I think they read an encrypted binary file. (The algorithm seem easy though) The swf can be found here: "http://reallifecam.com/static/flowplayer/flowplayer.swf-20160913" It would be great if anyone interested in reversing this kind of stuff could have a look. Are there any other options/tools to find the secure tokens ? I guess the token is somewhere in memory. Are there any tools for browsing/searching the browser/flash plugin memory ? We can discuss in private if you want. Reversing is fun and I'm here to learn and share. Thanks http://i.imgur.com/dhko7Ot.png

THIá??T Ká?? WEB Tá?*I THIETKEWEBCHUYEN .COM THEO Y?ŠU Cá?¦U TRá»?N G?“I CHá»? 1.990.000 VND -?€€0986.184.211 (VIBER-ZALO) (Mr. Ngá»?c)

Trang web sá?? thiá??t ká?? giao diện theo y??u cá?§u ri??ng, há»?p sá»? th?*ch, phong thủy, vá?*n mệnh… Ä‘á»? giá»›i thiệu sá??n phá?©m, dịch vá»?, c?´ng ty, cá»*a h?*ng … Ä‘á»? bá??n ph??t triá»?n kinh doanh kh?´ng ngừng.

TRANG WEB Sá?? Ä???á»?C Bá??O H?€NH VĨNH VIỄN


C??C DỊCH VỤ KH??C:

Quá??n l?? ná»™i dung Fanpage: 900,000 VNÄ?/ Th??ng
Quá??n l?? ná»™i dung Webstie: 700,000 VNÄ?/ Th??ng
Seo google adword
RAO Vá?¶T TRá»?N G?“I CHá»? VỚI 2,000,000 / TH??NG
Vá»›i 2,000,000 bá??n sá?? c??:

- Ä?Ä?ng 1000 nh??m facebook/th??ng (má»—i nh??m từ 5,000 -> 100,000 th?*nh vi??n).

- Ä?Ä?ng 1000 tin/th??ng web rao vá?·t v?* diá»…n Ä‘?*n lá»›n

- Ä?Ä?ng 1000nh??m/th??ng google plus (má»—i nh??m từ 1000 -> h??n 10,000 th?*nh vi??n)

H??y li??n hệ th?´ng tin b??n d?°á»›i ( kh?´ng b?¬nh luá?*n v?*o b?*i viá??t n?*y v?¬ m?¬nh kh?´ng xem lá??i tin nhá??n tá??i Ä‘??y)

+ 0986.184.211 (VIBER-ZALO) (Mr. Ngá»?c) ( bá??n c?? thá»? nhá??n tin Ä‘á»? y??u cá?§u gá»?i lá??i miá»…n ph?*) - 0902.836.561
+ Email: NgocTran@ThietKeWebChuyen.com - SKYPE: confirmdnt
+ Website: ThietKeWebChuyen. com

[j_cool]

Danda doesn't like my post.

I went too far from cracking flowplayer.swf-20160913.

Can someone crack FilmonPlayer.swf, might be less than 100 tokens there ?

[phuongtrinhqn1102]

xin ch?*o c??c bá??n may xuc dat (https://www.youtube.com/watch?v=QktsEU2V7aI) d?*nh cho trá?» con,video hay lÄ?ng x?? d?*nh cho b?© , can cau oto xuc dat cho be may xuc

[j_cool]

phuong,

your youtube clip is very interesting, but how about getting secure token from FilmonPlayer.swf ?

You will be able to watch BBC high stream if I get the token.

[j_cool]

http://stream-recorder.com/forum/showpost.php?p=88540&postcount=20

[xanathar]

Somebody may try this with rellifecam and post result here

Finally found out how to do it.
For future reference, the solution is to run rtmpsuck(supplied with rtmpdump) on a second computer,
while redirecting rtmp stream traffic on the first computer to the second computer by editing the hosts file.
rtmpsuck acts like a "man-in-the-middle" and intercepts/forwards/captures the rtmp stream data.

http://forums.whirlpool.net.au/archive/1520658

Interesting idea, but I don't really see why we need two computers for this. AFAIK rtmpsuck is already a MITM for the rtmp stream (well a kind of proxy). Actually to use rtmpsuck (As explained in most tutorials) we have to redirect the traffic from port 1935 to a different user. Maybe I don't really understand everything in this method. Anyway this won't help us much regarding the tokens required to record RLC.

Regarding RLC we have what seems to be some sort of tokens. We have to understand how they are used in the flash player. It seems that we can't use them 'raw' and some processing is required. I might be wrong, but some code in the decompiled player seem dedicated to that. I'm not a flash/actionscript programmer so understanding decompiled code is not easy.

To me we have all the network/urls...information needed. The only missing part is the correct tokens.

mckv seemed to be on something when he posted his list of tokens but he disappeared (from this thread at least).

[j_cool]

xanathar, welcome back.


I did not move one inch with ubuntu after installing it on one of my many ssds.

Next what I would like to do is run rtmpsuck on ubuntu and post result here.

Reading old posts on this forum I see there was a time when rtmpsuck did not work well and KSV patched it.




In windows, on filmon BBC 4 rtmpsuck shows this:

RTMP Proxy Server v2.4 GIT-2015-12-14 (Compiled by KSV)
(c) 2010 Andrej Stepanchuk, Howard Chu; license: GPL

Streaming on rtmp://0.0.0.0:1935
ERROR: Handshake failed
ERROR: Handshake failed
Closing connection... Closing connection... done!

ERROR: Handshake failed
done!

ERROR: Handshake failed
Closing connection... ERROR: Handshake failed
done!

Closing connection... Closing connection... done!

done!




on reallifecam stream does not appear and rtmpsuck shows this:

RTMP Proxy Server v2.4 GIT-2015-12-14 (Compiled by KSV)
(c) 2010 Andrej Stepanchuk, Howard Chu; license: GPL

Streaming on rtmp://0.0.0.0:1935



on ImLive commes half the way and crushes.



I can record free filmon and ImLive streams easily because there is no token,
those extremists from RLC use token for free steams and I know of rtmpsuck only to bypass them.

That guy with 2 computers may had achieved something then, and may be worth trying to replicate,
but how did he run rtmpsuck in windows then when there was no rtmpdumphelper ?
May be easier trying linux than having headache with Microsoft here.

Why rtmpsuck?

MCKV has 100 tokens, none works for umut, and I am far behind you in swf.



In the meantime, something interesting what rtmpdump can do ( content aside ):

rtmpdump -r "rtmp://publish.thewebstream.co/ppv//passionxxx" -W "http://iptv.firestormmedia.tv/flash/player/player.20160518.swf" | "vlc.exe" -

http://stream-recorder.com/forum/showpost.php?p=84657&postcount=2


livestreamer does miracles sometimes too, but not everywhere.

[nguyenthanhtam9723]

http://caobanlong.org/cach-chon-mua-cao-ban-long-tot/

[j_cool]

nguyen,

Chinese are settling in Siberia slowly but surely.

Is this about that ? I have something better for you to read:

http://www.france24.com/en/20120928-reporters-siberia-chinese-immigration-russia-blagoveshchensk-farming-labourers-business-tensions

[confused.com]

Interesting idea


https://github.com/streamlink/streamlink/issues?q=is%3Aissue+is%3Aopen+label%3A%22plugin+re quest%22