chaturbate.com: SecureToken problems

[albee]

Originally Posted by Elgero

Or you write your own tool in order to do everything automatically. Mwuhahahaha




(how many forumposts do you need to have, before you're allowed to add a link to your post, without that stupid message popping up it needs to be approved first by a mod?)

hey Elgero,does ur automatic recorder can also grab privates and groupshow?

[albee]

okay thanks for answering ,just wanted to know if it was possible or not

[yetanotherday]

Originally Posted by savanna

Well it seems to me that you can have javascript do the work of constructing a command string. No need to type a model's name into a prompt. The following works if you put it in the bookmarks bar in Firefox and click the bookmark when you have entered a room. You could even modify this to extract things like the password hash automatically, have fun!

javascript:var%20a=document.getElementById('movie');var%20b=a.childNodes[6].value;%20var%20c=b.indexOf('&');var%20d=b.substr(4,c-4);%20alert('rtmpdump%20-r%20"rtmpe://edge2-b.stream.highwebmedia.com/live-edge"%20-W%20"http://chaturbate.com/static/flash/CBV_2p627.swf"%20-p%20"http://chaturbate.com/'+d+'/"%20-C%20S:AnonymousUser%20-C%20S:'+d+'%20-C%20S:2.627%20 -C S:anonymous%20-y%20"anything"%20-o%20'+d+'t.flv%20-T%20"m9z#$dO0qe34Rxe@sMYxx%"')

Thanks i was looking for things like this
but can we use this bookmarklet to download the video

[bhatti00]

how did u get the secure token may i ask?

[youzme]

Originally Posted by Elgero

Currently no, because I'm testing the tool. I can modify it to record private/group shows, but I'm going to keep that to myself.

What technologies do you need to have knowledge of in order to clearly see how this would be done?

I know C, C++ and Java, but I'm guessing that the methods to achieving what I quoted don't become clear until studying flash to find out how the access controls work on these streaming cam sites, so one could modify something like RTMPdump to grab privs.

Is it just understanding flash and then modifying rtmpdump to bypass access controls? Or do your exploits depend more heavily on general web programming knowledge like html, http(s), etc?

I understand if you prefer to PM a response (if you're willing), and forgive me if these questions sound stupid, but unfortunately nobody has ever written a really elucidated post on the skillset for doing these kinds of exploits, and I'm a curious learner.

[hyc]

Originally Posted by youzme

What technologies do you need to have knowledge of in order to clearly see how this would be done?

I know C, C++ and Java, but I'm guessing that the methods to achieving what I quoted don't become clear until studying flash to find out how the access controls work on these streaming cam sites, so one could modify something like RTMPdump to grab privs.

Is it just understanding flash and then modifying rtmpdump to bypass access controls? Or do your exploits depend more heavily on general web programming knowledge like html, http(s), etc?

I understand if you prefer to PM a response (if you're willing), and forgive me if these questions sound stupid, but unfortunately nobody has ever written a really elucidated post on the skillset for doing these kinds of exploits, and I'm a curious learner.

Nobody teaches these things, you learn by doing.

You say you know C, C++, and Java. Sounds to me though, like you don't actually know how computers work. There's only one skill you actually need - the ability to look at someone else's code and understand what it does. All else follows from this. It doesn't matter what language you're dealing with. Understanding how software works is the same skill, regardless.

[youzme]

Originally Posted by hyc

Nobody teaches these things, you learn by doing.

You say you know C, C++, and Java. Sounds to me though, like you don't actually know how computers work. There's only one skill you actually need - the ability to look at someone else's code and understand what it does. All else follows from this. It doesn't matter what language you're dealing with. Understanding how software works is the same skill, regardless.

Thanks for the hard response (seriously). Appreciate the no-bs advice.

Truth is, I spent about 3 months learning those 3 languages from books, and I studied them pretty hard to actually grasp it, and I understand the toy programs in the books that they use to explain language features like a pointer or whatnot, I just don't have a lot of practical experience creating my own stuff or even modifying other peoples (I guess the latter is a better place to start).

I'll look over the RTMPdump code again and try to understand it better with the help of google. I think I got a bit intimidated at first seeing something bigger than the simple programs that demonstrate language features.

Thanks.

[eroyamam]

Hmmm. Anyone else now getting netstream.play.failed on pw'ed shows? Just wondering if Cbate changed again. Was doing pw's and the odd private. Now? Nada.

[yetanotherday]

i cant download from chaturbate using rtmpdump on windows ! does they made changes ?
.....

Trying different position for server digest! INFO: Connected...

then stop

rtmpdump -r "rtmpe://edge1-a.stream.highwebmedia.com/live-edge" -a "live-edge" -f "WIN 11,3,300,271" -W "http://ccstatic.chaturbate.com/static/flash/CBV_2p628.swf" -p "http://chaturbate.com/jenny_sofine/" -C S:AnonymousUser -C S:jenny_sofine -C S:2.628 -C S:anonymous -y "mp4ublic-anything" -v -T "m9z#$dO0qe34Rxe@sMYxx%" -o "download.flv"

[yetanotherday]

ok problem solved i have download the latest verion of rtmpdump