Page 2 of 2 < 1 2
Show 40 post(s) from this thread on one page

Audio/video stream recording forums (http://stream-recorder.com/forum/index.php)
-   rtmpdump (http://stream-recorder.com/forum/forumdisplay.php?f=54)
-   -  

The coolsport.tv challenge

 (http://stream-recorder.com/forum/showthread.php?t=16334)

freez 06-20-2013 01:30 AM

Re: The coolsport.tv challenge


 
Quote:
Originally Posted by oelk (Post 62597)
I think it has been right, but it was changed again. Now we see the following message:
Code:
$lgonnakill%$wyou@#q1
(seems that they know that we can find it :D)

And: It is inside the swf ;)
this token says " I gonna kill you " :D , that Koolsport admin got crazy :D

very good @oelk , but really it is hard to find it this time inside swf , how the hick did u find it? :)

oelk 06-20-2013 09:06 AM

Re: The coolsport.tv challenge


 
The swf is obfuscated, so that simple 'reading' of the token won't work. It is calculated somehow everytime it has to be used. So there are some possible advances to get it:
  • use a debugger to get inside the running swf and extract the token after calculation
  • change the existing code and let the swf show the token for you, or
  • write your own program and use the 'decryption' function
At least one of them works ;) (but all should be possible using the right tools)

I don't know if that's a message for me or for you (I don't record anything.), but I really dislike to be killed. (Just to inform the man who wrote this token.)

freez 06-20-2013 01:24 PM

Re: The coolsport.tv challenge


 
ok oelk , thanx for help , we need that token again till i can figure how i can use ur method it is changed (ff3.swf)

evol 06-23-2013 12:00 PM

Re: The coolsport.tv challenge


 
Has anyone had any look getting the token or a working method of getting it ?

LuzerMasken 06-23-2013 02:25 PM

Re: The coolsport.tv challenge


 
Code:
@lfrench%f1$w@#fkrbas

jhb50 06-25-2013 08:06 AM

Re: The coolsport.tv challenge


 
OK. Changed again. I give up. They are going to keep changing this so its a fools errand to try and keep up. Try other sites like cricfree and igoal.

hasomaso 06-25-2013 12:03 PM

Re: The coolsport.tv challenge


 
edit
edit
edit

gorilla.maguila 10-06-2013 05:01 AM

Re: The coolsport.tv challenge


 
To continue with the disassembly frenzy that began with ilive.to http://stream-recorder.com/forum/dum...ve-t16652.html. I've managed to get the obfuscated token from the coolsport's swf file. BUT somehow it's not working.

This is the token I'm getting:

Code:
#atd%#$ZH
Although:

Code:
rtmpdump -r rtmp://rtmp.featve.com:1935/redirect -W "http://97ff0e7e610f20512dbe-483e6ce63d68aeb3d05af6c054efb801.r29.cf1.rackcdn.com/atdedead.swf" -p "http://featve.com/player3.php?id=20829&width=640&height=460" --live --debug -y 20829 --token "#atd%#$ZH"
It's not working.

Could it be that they have modified TEA.class inside the swf file so it's not an standard TEA decryption?

PS: I can provide more details on how I got the token so we can discuss this further

gorilla.maguila 10-06-2013 06:29 AM

Re: The coolsport.tv challenge


 
Ok so I've found what is going on.

It seems that the current librtmp code fails to compute the operation:

Code:
sendSecureTokenResponse(TEA.decrypt("secureToken", "token"));
For example tampering the swf file:

Code:
TEA.decrypt("5b9389e825ebcca55cf84a71ddc5a13c6ae4f5ce19cd3fdbf91e1a53b3029f383461c800", "#atd%#$ZH")
Gives:

ed08d934-41ac-4b90-80a2-d0cacd923ae1

Where librtmp doing the same operation gives:


$]m.i.eo.I#...z._hB.`

Hence the server rejects the connection

gorilla.maguila 10-06-2013 02:29 PM

Re: The coolsport.tv challenge


 
Ok so in the end it's not a problem with librtmp.

The problem seems to be that rtmpdump.c it's not parsing the correct token string length.

As a work around invoke the token option like this:

Code:
--token "#atd%#\$ZH"
with a backslash before the $

hallucinogen 11-25-2013 03:49 PM

Re: The coolsport.tv challenge


 
Quote:
Originally Posted by gorilla.maguila (Post 63599)
Ok so in the end it's not a problem with librtmp.

The problem seems to be that rtmpdump.c it's not parsing the correct token string length.

As a work around invoke the token option like this:

Code:
--token "#atd%#\$ZH"
with a backslash before the $
Do you have a new one? Seems it doesn't work anymore.

peterpan 11-25-2013 10:20 PM

Re: The coolsport.tv challenge


 
Use this one, it's still working...

http://stream-recorder.com/forum/sho...0&postcount=48

But remember, if used with rtmpdump batch file, you'll need to double every % in the token.


All times are GMT -6. The time now is 11:39 PM.
Page 2 of 2 < 1 2
Show 40 post(s) from this thread on one page