How to detect stream address in an Android app

[Mr0aj]

I am trying to capture a video stream . But it does not have any website. Only an app that runs on android. No windows version. Now I want to find address of streaming server . What options I have.

[mckv]

https://github.com/OWASP/owasp-mstg/...d-Tampering.md

[Mr0aj]

Very much technical. And I was not looking for this info.
May be I have not framed my question well.

[cabulo]

MCKV,

heads up!

You are most welcome to post some good link here, may be technical..

http://stream-recorder.com/forum/sho...2&postcount=29

cheers,

Cabulo.

[ihryjfbd]

https://play.google.com/store/apps/d...rts.sslcapture

Works fairly and will show you the urls but you'll need to read through alot of code before you find the urls as it doesn't filter anything out.

[Mr0aj]

Packet capture was working fairly until app was updated. Now it is showing url but in parts.

[Mr0aj]

GET /videos/2017/7/134661/5970972276696109272b0400_134661_main.m3u8 HTTP/1.1
User-Agent: InstaPlay Android SDK/1.0.0 (Linux;Android 6.0.1) ExoPlayerLib/2.2.0
Host: d1s3oezf1vtq1t.cloudfront.net
Connection: Keep-Alive
Accept-Encoding: gzip

HTTP/1.1 200 OK
Content-Length: 455
Connection: keep-alive
Date: Fri, 21 Jul 2017 14:28:55 GMT
Last-Modified: Thu, 20 Jul 2017 11:57:02 GMT
ETag: "5c18e59fea430257736a29fdd248c22d"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: RefreshHit from cloudfront
Via: 1.1 9b90f85a19339fa4490a2633d70825fa.cloudfront.net (CloudFront)
X-Amz-Cf-Id: bGX9L9jTCka4LcExcShs1LKvtxfUp_XatPAymJZp-fBv7svbXZbEfQ==

#EXTM3U
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=192000,RESOLUTION=144x176
../134657/video.m3u8
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=320000,RESOLUTION=240x320
../134655/video.m3u8
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=576000,RESOLUTION=320x480
../134653/video.m3u8
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=832000,RESOLUTION=480x640
../134648/video.m3u8
#EXT-X-STREAM-INF:PROGRAM-ID=1, BANDWIDTH=1628000,RESOLUTION=720x1280
../134659/video.m3u8
GET /videos/2017/7/134657/video.m3u8 HTTP/1.1
User-Agent: InstaPlay Android SDK/1.0.0 (Linux;Android 6.0.1) ExoPlayerLib/2.2.0
Host: d1s3oezf1vtq1t.cloudfront.net
Connection: Keep-Alive
Accept-Encoding: gzip

HTTP/1.1 200 OK
Content-Length: 256
Connection: keep-alive
Date: Fri, 21 Jul 2017 14:28:55 GMT
Last-Modified: Thu, 20 Jul 2017 11:50:32 GMT
ETag: "86bd673ba8b854f6862d0a303429704a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: RefreshHit from cloudfront
Via: 1.1 9b90f85a19339fa4490a2633d70825fa.cloudfront.net (CloudFront)
X-Amz-Cf-Id: qecFc4LQXgW2sVXv2nyzdJC96MTAtWDmrqq4qEZ3LQVojRgYKO qHew==

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-MEDIA-SEQUENCE:0
#EXT-X-ALLOW-CACHE:YES
#EXT-X-TARGETDURATION:11
#EXTINF:10.153844,
video0.ts
#EXTINF:10.000000,
video1.ts
#EXTINF:10.000000,
video2.ts
#EXTINF:10.000000,
video3.ts
#EXTINF:8.384611,
video4.ts
#EXT-X-ENDLIST
GET /videos/2017/7/134657/video0.ts HTTP/1.1
User-Agent: InstaPlay Android SDK/1.0.0 (Linux;Android 6.0.1) ExoPlayerLib/2.2.0
Accept-Encoding: identity
Host: d1s3oezf1vtq1t.cloudfront.net
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Length: 265456
Connection: keep-alive
Date: Fri, 21 Jul 2017 14:28:55 GMT
Last-Modified: Thu, 20 Jul 2017 11:50:30 GMT
ETag: "40b66942e28787dcc4145c04dafd5fa0"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: RefreshHit from cloudfront
Via: 1.1 9b90f85a19339fa4490a2633d70825fa.cloudfront.net (CloudFront)
X-Amz-Cf-Id: TCUc3SP2zcIpoW4fDv7NCRIZNOEqdOp5sWSBViVj_TDyRVwNpD 6NFA==

G@B?%
Á
?
ü€H
FFmpeg Service01§y*????????????????????????????????????? ?????????????????????????????????????????????????? ?????????????????????????????????????????????????? ??????G@°

Á
?*±??????????????????????????????????????????? ?????????????????????????????????????????????????? ?????????????????????????????????????????????????? ?????????????????????????GP°
Áá?á?á
?
eng?‚š?????????????????????????????????????????? ?????????????????????????????????????????????????? ?????????????????????????????????????????????????? ?????????GA