Audio/video stream recording forums (http://stream-recorder.com/forum/index.php)
-   rtmpdump (http://stream-recorder.com/forum/forumdisplay.php?f=54)
-   -  

chaturbate.com: SecureToken problems

(http://stream-recorder.com/forum/showthread.php?t=10869)

albee 12-07-2012 05:19 PM

Re: chaturbate.com: SecureToken problems


 
Quote:

Originally Posted by Elgero (Post 57189)
Or you write your own tool in order to do everything automatically. Mwuhahahaha




(how many forumposts do you need to have, before you're allowed to add a link to your post, without that stupid message popping up it needs to be approved first by a mod?)

hey Elgero,does ur automatic recorder can also grab privates and groupshow?

albee 12-07-2012 09:12 PM

Re: chaturbate.com: SecureToken problems


 
okay thanks for answering ,just wanted to know if it was possible or not :)

yetanotherday 12-09-2012 11:32 PM

Re: chaturbate.com: SecureToken problems


 
Quote:

Originally Posted by savanna (Post 57184)
Well it seems to me that you can have javascript do the work of constructing a command string. No need to type a model's name into a prompt. The following works if you put it in the bookmarks bar in Firefox and click the bookmark when you have entered a room. You could even modify this to extract things like the password hash automatically, have fun!

Code:

javascript:var%20a=document.getElementById('movie');var%20b=a.childNodes[6].value;%20var%20c=b.indexOf('&');var%20d=b.substr(4,c-4);%20alert('rtmpdump%20-r%20"rtmpe://edge2-b.stream.highwebmedia.com/live-edge"%20-W%20"http://chaturbate.com/static/flash/CBV_2p627.swf"%20-p%20"http://chaturbate.com/'+d+'/"%20-C%20S:AnonymousUser%20-C%20S:'+d+'%20-C%20S:2.627%20 -C S:anonymous%20-y%20"anything"%20-o%20'+d+'t.flv%20-T%20"m9z#$dO0qe34Rxe@sMYxx%"')

Thanks i was looking for things like this :D
but can we use this bookmarklet to download the video

bhatti00 12-10-2012 03:42 PM

Re: chaturbate.com: SecureToken problems


 
how did u get the secure token may i ask?

youzme 12-11-2012 12:48 AM

Re: chaturbate.com: SecureToken problems


 
Quote:

Originally Posted by Elgero (Post 57228)
Currently no, because I'm testing the tool. I can modify it to record private/group shows, but I'm going to keep that to myself.

What technologies do you need to have knowledge of in order to clearly see how this would be done?

I know C, C++ and Java, but I'm guessing that the methods to achieving what I quoted don't become clear until studying flash to find out how the access controls work on these streaming cam sites, so one could modify something like RTMPdump to grab privs.

Is it just understanding flash and then modifying rtmpdump to bypass access controls? Or do your exploits depend more heavily on general web programming knowledge like html, http(s), etc?

I understand if you prefer to PM a response (if you're willing), and forgive me if these questions sound stupid, but unfortunately nobody has ever written a really elucidated post on the skillset for doing these kinds of exploits, and I'm a curious learner.

hyc 12-11-2012 05:35 PM

Re: chaturbate.com: SecureToken problems


 
Quote:

Originally Posted by youzme (Post 57321)
What technologies do you need to have knowledge of in order to clearly see how this would be done?

I know C, C++ and Java, but I'm guessing that the methods to achieving what I quoted don't become clear until studying flash to find out how the access controls work on these streaming cam sites, so one could modify something like RTMPdump to grab privs.

Is it just understanding flash and then modifying rtmpdump to bypass access controls? Or do your exploits depend more heavily on general web programming knowledge like html, http(s), etc?

I understand if you prefer to PM a response (if you're willing), and forgive me if these questions sound stupid, but unfortunately nobody has ever written a really elucidated post on the skillset for doing these kinds of exploits, and I'm a curious learner.

Nobody teaches these things, you learn by doing.

You say you know C, C++, and Java. Sounds to me though, like you don't actually know how computers work. There's only one skill you actually need - the ability to look at someone else's code and understand what it does. All else follows from this. It doesn't matter what language you're dealing with. Understanding how software works is the same skill, regardless.

youzme 12-11-2012 05:46 PM

Re: chaturbate.com: SecureToken problems


 
Quote:

Originally Posted by hyc (Post 57352)
Nobody teaches these things, you learn by doing.

You say you know C, C++, and Java. Sounds to me though, like you don't actually know how computers work. There's only one skill you actually need - the ability to look at someone else's code and understand what it does. All else follows from this. It doesn't matter what language you're dealing with. Understanding how software works is the same skill, regardless.

Thanks for the hard response (seriously). Appreciate the no-bs advice.

Truth is, I spent about 3 months learning those 3 languages from books, and I studied them pretty hard to actually grasp it, and I understand the toy programs in the books that they use to explain language features like a pointer or whatnot, I just don't have a lot of practical experience creating my own stuff or even modifying other peoples (I guess the latter is a better place to start).

I'll look over the RTMPdump code again and try to understand it better with the help of google. I think I got a bit intimidated at first seeing something bigger than the simple programs that demonstrate language features.

Thanks.

eroyamam 12-18-2012 12:18 PM

Re: chaturbate.com: SecureToken problems


 
Hmmm. Anyone else now getting netstream.play.failed on pw'ed shows? Just wondering if Cbate changed again. Was doing pw's and the odd private. Now? Nada. :confused:

yetanotherday 12-18-2012 02:14 PM

Re: chaturbate.com: SecureToken problems


 
i cant download from chaturbate using rtmpdump on windows ! does they made changes ?
.....
Code:

Trying different position for server digest! INFO: Connected...
then stop

rtmpdump -r "rtmpe://edge1-a.stream.highwebmedia.com/live-edge" -a "live-edge" -f "WIN 11,3,300,271" -W "http://ccstatic.chaturbate.com/static/flash/CBV_2p628.swf" -p "http://chaturbate.com/jenny_sofine/" -C S:AnonymousUser -C S:jenny_sofine -C S:2.628 -C S:anonymous -y "mp4:public-anything" -v -T "m9z#$dO0qe34Rxe@sMYxx%" -o "download.flv"

yetanotherday 12-18-2012 02:45 PM

Re: chaturbate.com: SecureToken problems


 
ok problem solved i have download the latest verion of rtmpdump


All times are GMT -6. The time now is 06:47 AM.