Breaking the security of RTMPTE protocol running with flowplayer

auro · #1 04-01-2014, 04:57 AM

I am reading this forum since 2 days but did not had any success regarding downloading the video hosted on sso15.gateforum.com( premium educational website containing videos) I am tring to download the videos since 15 days and have contacted many people who had good knowledge about streaming videos but nothing happened...

BUT when i came to this forum and read some posts every persons problem regarding the videos streaming is getting solved instantly...

I need these videos to prepare for my competetive exam next year... I would be very thankful for every one of you who helped...

---------------------------------------------------------------------------
first we have to login into the user15.gateforum.com with username and password then after login in we are then given a link http://sso15.gateforum.com(where actual videos are hosted), then in that the videos are played in flowplayer the juicy part is in javascript

The url containing the code below http://sso15.gateforum.com/main_page.php?part=4

Code:

          <div id="video_panel" class="boxCont" align="center" >
        <script type="text/javascript">
		// <![CDATA[
		  window.onload = function () {
			var player = $f("player", "flowplayer/flowplayer.commercial-3.2.16.swf", {
			key:'#$b526207fead9b16994d',
			  plugins: {
				rtmp: {
				  url: "flowplayer/flowplayer.rtmp-3.2.12.swf",
				  netConnectionUrl: "rtmpte://s20e7fj8eqzqv1.cloudfront.net/cfx/st",
				  inBufferSeek:false
				}
			  },
			  clip: {
				provider: "rtmp",
				url: "mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires=1396345812&Signature=OojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXntKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_&Key-Pair-Id=APKAI7LSJFZ27IW5FDOQ",
				scaling: "fit"
			  }
					  
			});

		  };
		  // ]]>
		  </script>

and html code

Code:

<div id="player" style="width:720px;height:480px;">
<object id="player_api" width="100%" height="100%" type="application/x-shockwave-flash" data="flowplayer/flowplayer.commercial-3.2.16.swf" name="player_api">
<param value="true" name="allowfullscreen">
<param value="always" name="allowscriptaccess">
<param value="high" name="quality">
<param value="#000000" name="bgcolor">
<param value="config={"key":"#$b526207fead9b16994d","plugins":{"rtmp":{"url":"flowplayer/flowplayer.rtmp-3.2.12.swf","netConnectionUrl":"rtmpte://s20e7fj8eqzqv1.cloudfront.net/cfx/st","inBufferSeek":false}},"clip":{"provider":"rtmp","url":"mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires%3D1396345812%26Signature%3DOojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXntKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_%26Key-Pair-Id%3DAPKAI7LSJFZ27IW5FDOQ","scaling":"fit"},"playerId":"player","playlist":[{"provider":"rtmp","url":"mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires%3D1396345812%26Signature%3DOojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXntKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_%26Key-Pair-Id%3DAPKAI7LSJFZ27IW5FDOQ","scaling":"fit"}]}" name="flashvars">
</object>
</div>
</div>

if any information is left then i can provide that too but i need this video for my preparation....

THERE is a guy here name KSV who is a pro in this field please do help me

hasomaso · #2 04-01-2014, 05:45 AM

send me

login:
pass:

i look

KSV · #3 04-01-2014, 05:53 AM

it seems pretty straightforward. try following command after replacing the authentication token (red part) with fresh one.

Code:

rtmpdump -r "rtmpe://s20e7fj8eqzqv1.cloudfront.net/cfx/st" -a "cfx/st" -y "mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires=1396345812&Signature=OojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXntKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_&Key-Pair-Id=APKAI7LSJFZ27IW5FDOQ" -o Test.flv

auro · #4 04-01-2014, 06:24 AM

sir you are the best its working... i wish that god helps you like you are helping us... very very thankfull this would help me alot in my career.....

thank u again....

auro · #5 04-01-2014, 06:31 AM

hasomaso sir thankyou for replying KSV sir solved my problem if i encounter any problem ahead then i will ask you guyz....

auro · #6 04-02-2014, 01:06 AM

KSV sir the command you gave is not working at my college as the port 1935 is blocked is there anyway i could downlaod this video through port 80 as the rtmpe protocol uses port 1935... please need urgent help....

KSV · #7 04-02-2014, 02:46 AM

just change the protocol from rtmpe to rtmpte.

Code:

rtmpdump -r "rtmpte://s20e7fj8eqzqv1.cloudfront.net:80/cfx/st"........

har6031 · #8 06-08-2014, 01:57 PM

Can u plz tell me the procedure to me? my mail ID is khvr1234@gmail.com
thank you

redo redov · #9 08-07-2014, 07:42 PM

Quote:

Originally Posted by KSV

just change the protocol from rtmpe to rtmpte.

Code:

rtmpdump -r "rtmpte://s20e7fj8eqzqv1.cloudfront.net:80/cfx/st"........

Hi, KSV, I'm from Bulgaria.
I searched some information about how to record from secured flowplayer, because I have a registration for tv stream, and want to record from it with WM Recorder. Before that flowplayer, the site was streaming by direct link with wmv file, which link I used to record some tv news, but now, I can't found any direct link.
In the source of the site, I found only this with key "stream":

view-source:http://www.neterra.tv/content#catego...ined&type=live

plugins: {
secure: {
url: "http://www.neterra.tv/players/flowplayer/flowplayer.securestreaming-3.2.9.swf",
token: "qawsedr55"
},
rtmp: {
url: "http://www.neterra.tv/players/flowplayer/flowplayer.rtmp-3.2.13.swf",
netConnectionUrl: "",
failOverDelay: 1000,
proxyType: "none"

Can you help me how to found direct link to the streamed video, and is there any possibility to get any link in that situation with flowplayer.

Thank you in advance,
Redo
Bulgaria

PS: I can give you my pass and username if you needed.

the site is
http://www.neterra.tv/content#catego...ined&type=live

streamer · #10 07-28-2015, 01:48 AM

Quote:

Originally Posted by KSV

it seems pretty straightforward. try following command after replacing the authentication token (red part) with fresh one.

Code:

rtmpdump -r "rtmpe://s20e7fj8eqzqv1.cloudfront.net/cfx/st" -a "cfx/st" -y "mp4:11.02.2014/CS/CS_11022014_PI.mp4?Expires=1396345812&Signature=OojK3TNBhQwerm3J-COvw~P-Jf3vJ5G5LhvgSyByiplIPYUvjGwn2pDoDxd2FDJjAWhhZNqzjL7lKLAOBK0qyndDr-KJYpCugCasmfs6hMT70aFBCU92lX0OjueiJDcDq6Zpq3CtKbXntKZBY3YhMLr-tSy67bZyC3Ewvo0a4MQ_&Key-Pair-Id=APKAI7LSJFZ27IW5FDOQ" -o Test.flv

How do you know what to replace the red part with?