help token

[chitawar]

hello quisera ask for help to find the token in dinozap this is the channel:

http://www.dinozap.tv/redirect/chann...tostart= true

and this is what I captured:

rtmpdump -r "rtmpe://184.75.213.50:1735/vod" -a "vod" -f "WIN 11,6,602,171" -W "http://93.114.45.68/jwplayer5/player.swf" -p "http://www.dinozap.tv/redirect/embedredi.php?c=111&width=720&height=440&autostart =true&tk1=O9CIxPEml6ubA9NS1nu1zKIQbfE8CMkOLiFjAZMt U8Q%3D&tk2=713dTcBcMa%2FpkgRfN3rk7lSvpCCc7pflp5e8c 5dGb7k%3D&tk3=0iw3nPPpqjzJiOxi1GkUBUlPe4h%2BspnJ%2 FuvlGtekF28%3D" -y "abonovip.eu" -o "abonovip.eu.flv"

I have been looking into the sfw with:

http://www.showmycode.com/

but can not find it anywhere token. have if you can help me learn to get the token. to avoid having to ask for them at all times. a greeting

[hasomaso]

Originally Posted by chitawar

hello quisera ask for help to find the token in dinozap this is the channel:

http://www.dinozap.tv/redirect/chann...tostart= true

and this is what I captured:

rtmpdump -r "rtmpe://184.75.213.50:1735/vod" -a "vod" -f "WIN 11,6,602,171" -W "http://93.114.45.68/jwplayer5/player.swf" -p "http://www.dinozap.tv/redirect/embedredi.php?c=111&width=720&height=440&autostart =true&tk1=O9CIxPEml6ubA9NS1nu1zKIQbfE8CMkOLiFjAZMt U8Q%3D&tk2=713dTcBcMa%2FpkgRfN3rk7lSvpCCc7pflp5e8c 5dGb7k%3D&tk3=0iw3nPPpqjzJiOxi1GkUBUlPe4h%2BspnJ%2 FuvlGtekF28%3D" -y "abonovip.eu" -o "abonovip.eu.flv"

I have been looking into the sfw with:

http://www.showmycode.com/

but can not find it anywhere token. have if you can help me learn to get the token. to avoid having to ask for them at all times. a greeting

try this

-T "#ro%g0#r@1"

[chitawar]

Originally Posted by hasomaso

try this

-T "#ro%g0#r@1"

With that token code gives me error:

Microsoft Windows [Versión 6.1.7601]
Copyright (c) 2010. Www.WarezVirtual.Com

C:\Users\Administrador>rtmpdump -r "rtmpe://184.75.213.50:1735/vod" -a "vod" -f
"WIN 11,6,602,171" -W "http://93.114.45.68/jwplayer5/player.swf" -p "http://www.
dinozap.tv/redirect/embedredi.php" -T "#ro%g0#r@1" -y "abonovip.eu" -o "abonovip
.eu.flv"
RTMPDump v2.4 GIT-2012-12-09 (Compiled by KSV)
(c) 2010 Andrej Stepanchuk, Howard Chu, The Flvstreamer Team; license: GPL
Connecting ...
ERROR: RTMP_Connect0, failed to connect socket. 10060 (Unknown error)

C:\Users\Administrador>

I wonder how do you get the token. thank you very much for helping


Edit: I read that probably my pc problem. I tested with this application:

http://fmsguru.com/FreeApps/connectiontester.cfm

and this is the result:

RMTP Default Success 15.9s
RMTP Port 1935 Success 15.9s
RMTP Port 80 Success 15.9s
RMTP Port 443 Success 15.9s
RMTPT (Tunneling) Default Success 16.7s
RMTPT (Tunneling) Port 80 Success 19.2s
RMTPT (Tunneling) Port 443 Success 16.8s
RMTPT (Tunneling) Port 1935 Success 16.8s

[AmazingMatze]

Decompile the SWF and you will find the secureToken.

The secure Token is #ro%g0#r@1

If you run your RTMPDump command from within a batchfile you need to escape the reserved character '%' with '%%'.

-T "#ro%%g0#r@1"

rtmpdump -r "rtmpe://184.75.213.82:1735/vod" -a "vod" -f "WIN 11,6,602,171" -W "http://93.114.45.68/jwplayer5/player.swf" -p "http://www.dinozap.tv/redirect/embedredi.php?c=111&width=720&height=440&autostart=true&tk1=HWDvdPrnrqE9mzzyrN55mL9wYZP1hJs93the5X6qOwo%3D&tk2=D9MIgWC1tWCADPfZ9JFTIZY27gGZP6KKjZq4TdaKOVI%3D&tk3=QGw%2F24ygYGmY3SFBKej1ffGDO77mvQSAmiTSgfc9AyI%3D" -T "#ro%%g0#r@1" -y "abonovip.eu" -o "abonovip.eu.flv"

[chitawar]

Originally Posted by AmazingMatze

Decompile the SWF and you will find the secureToken.

The secure Token is #ro%g0#r@1

If you run your RTMPDump command from within a batchfile you need to escape the reserved character '%' with '%%'.

testing the new token gives me another error:

Microsoft Windows [Versión 6.1.7601]
Copyright (c) 2010. Www.WarezVirtual.Com

C:\Users\Administrador>rtmpdump -r "rtmpe://184.75.213.82:1735/vod" -a "vod" -f
"WIN 11,6,602,171" -W "http://93.114.45.68/jwplayer5/player.swf" -p "http://www.
dinozap.tv/redirect/embedredi.php?c=111&width=720&height=440&autostart =true&tk1=
HWDvdPrnrqE9mzzyrN55mL9wYZP1hJs93the5X6qOwo%3D&tk2 =D9MIgWC1tWCADPfZ9JFTIZY27gGZP
6KKjZq4TdaKOVI%3D&tk3=QGw%2F24ygYGmY3SFBKej1ffGDO7 7mvQSAmiTSgfc9AyI%3D" -T "#ro%
%g0#r@1" -y "abonovip.eu" -o "abonovip.eu.flv"
RTMPDump v2.4 GIT-2012-12-09 (Compiled by KSV)
(c) 2010 Andrej Stepanchuk, Howard Chu, The Flvstreamer Team; license: GPL
Connecting ...
WARNING: Trying different position for server digest!
INFO: Connected...
ERROR: RTMP_ReadPacket, failed to read RTMP packet header

C:\Users\Administrador>

thank you very much to all who are helping me

[AmazingMatze]

Are you sure that you closed your browser window before executing the command?

This is the RTMPDump version I used:

http://stream-recorder.com/forum/showpost.php?p=60019&postcount=10

And even this abbreviated command worked for me:

rtmpdump -r "rtmpe://184.75.213.82:1735/vod/abonovip.eu" -p "http://www.dinozap.tv/" -T "#ro%%g0#r@1" -o "abonovip.eu.flv"

You pasted it into a .txt file and saved it as .bat, right?

[chitawar]

Originally Posted by AmazingMatze

Are you sure that you closed your browser window before executing the command?

This is the RTMPDump version I used:

http://stream-recorder.com/forum/showpost.php?p=60019&postcount=10

And even this abbreviated command worked for me:

rtmpdump -r "rtmpe://184.75.213.82:1735/vod/abonovip.eu" -p "http://www.dinozap.tv/" -T "#ro%%g0#r@1" -o "abonovip.eu.flv"

You pasted it into a .txt file and saved it as .bat, right?

now it works. the problem is that it ran directly from cmd. to save the bat txt me works perfect. thank you very much.

rtmpdump -r "rtmpe://184.75.213.82:1735/vod" -a "vod" -f "WIN 11,6,602,171" -W "http://93.114.45.68/jwplayer5/player.swf" -p "http://www.dinozap.tv/redirect/embedredi.php" -T "#ro%%g0#r@1" -y "abonovip.eu" -o "abonovip.eu.flv"

I could say that I find the token sfw. I looked here:

http://www.swfdecrypt.com/

I have been testing Flash Decompiler Trillix, SWFInvestigator, Hash & SizeSWFPlayer. but I have not found in either the token. I downloaded the sfw mozilla watching the page information in half and save as.

[AmazingMatze]

Try flasm. This pretty ancient tool still does the job (for this particular SWF):

http://www.nowrap.de/flasm.html
http://www.nowrap.de/download/flasm16win.zip

Usage: flasm -x player.swf

Or you can try dumping the process memory of the Adobe Flash player components:

FlashPlayerPlugin_11_6_602_171.exe
plugin-container.exe

If you have Windows 7 open the Task Manager and rightclick these processes and create a dump file.

If you don't have Windows 7 use ProcDump:

http://technet.microsoft.com/en-us/sysinternals/dd996900

Now open the decompressed .swf or the .dmp with a HexEditor e.g. (hXXp://mh-nexus.de/en/programs.php) and watch out for the usual suspects (like: secureToken, sharedsecret etc.)

[chitawar]

Originally Posted by AmazingMatze

Try flasm. This pretty ancient tool still does the job (for this particular SWF):

http://www.nowrap.de/flasm.html
http://www.nowrap.de/download/flasm16win.zip

Usage: flasm -x player.swf

Or you can try dumping the process memory of the Adobe Flash player components:

FlashPlayerPlugin_11_6_602_171.exe
plugin-container.exe

If you have Windows 7 open the Task Manager and rightclick these processes and create a dump file.

If you don't have Windows 7 use ProcDump:

http://technet.microsoft.com/en-us/sysinternals/dd996900

Now open the decompressed .swf or the .dmp with a HexEditor e.g. (hXXp://mh-nexus.de/en/programs.php) and watch out for the usual suspects (like: secureToken, sharedsecret etc.)

thank you very much for everything.

with me pluging container generates this file:

plugin-container.DMP
FlashPlayerPlugin_11_6_602_171.DMP

With what program I can open it? I've tried with a edithex but I get a lot of numbers and can not find the option to put normal. Show me a program that I can serve. the Flasm've tried but not working. I can not open the program, I guess it's because I have windows 7.

[AmazingMatze]

Originally Posted by chitawar

plugin-container.DMP
FlashPlayerPlugin_11_6_602_171.DMP

With what program I can open it?

I already told you: Any HexEditor is fine. I use HxD - Hexeditor.

Originally Posted by chitawar

I've tried with a edithex but I get a lot of numbers and can not find the option to put normal.

Really? You gotta be kidding me. There is no such thing to "put it normal". Get familiar with how to use a HexEditor and what it does if you are so interested in obtaining this token.

Originally Posted by chitawar

Show me a program that I can serve.

Doubtful that there is a one-click noob friendly proggie for that.

Anyway, if you want to give it another shot:

There are two instances of FlashPlayerPlugin_*.exe running.
Usually the process that occupies more memory contains the secureToken.

Originally Posted by chitawar

Flasm've tried but not working.

I have tried both ways for this particular SWF player. And both ways are working exactly like I explained.

Originally Posted by chitawar

I can not open the program,

Which program? The .dmp or the decompressed .swf is just binary data.

Originally Posted by chitawar

I guess it's because I have windows 7.

I'm also running Windows 7 and it is working fine for me.


For all who are interested in going a step further:

If you only want to dump one process, you can disable Flash player protected mode
by appending the line "ProtectedMode=0" to mms.cfg which is located:

Windows 32bit: C:\windows\system32\macromed\flash
Windows 64bit: C:\windows\syswow64\macromed\flash

It is explained in:

http://forums.adobe.com/thread/1018071

If you are now playing a flash stream, you only have the process plugin-container.exe to watch out for.
Use this at your own risk and revert it once you are done.