New Tocken Required

(http://stream-recorder.com/forum/showthread.php?t=18650)

Re: New Tocken Required

same old token it has been posted here 10x already

Re: New Tocken Required

rtmpdump -v -r "rtmpe://46.246.124.23:1935/redirect" -a "redirect" -f "WIN

11,9,900,117" -W "http://player.hdcast.org/player.swf" -p

"http://www.hdcast.org/" -y "action" -T "#yw%%tt#w@kku" -C S:OK -q | ffmpeg -i

- -re -isync -vcodec copy -acodec copy -f flv

with this tocken it was working till yesterday but now not working

Re: New Tocken Required

Quote:

Originally Posted by mian.saad111 (Post 69678)

Re-dump and look at full dump, you have made a simple mistake in your config!

Re: New Tocken Required

Can you please guide me where is the mistake as this one is working fine till 5 days ago but now its not working with the same command. I will be thankful to yu.

Re: New Tocken Required

mian.saad
how did you draw token..please provide info

Re: New Tocken Required

same token is still valid

Re: New Tocken Required

Quote:

Originally Posted by P3T3 (Post 69722)

Re-dump and look at full dump, you have made a simple mistake in your config!

Re-dump the stream they are now using live playpath!!
All info you need has already been posted, for there streams......

Re: New Tocken Required

Code:

SecureTokenhash

#yw%tt#w@kku

Code:

rtmpdump -v -r "rtmpe://209.95.34.60:1935/live" -a "live" -f "WIN 14,0,0,179" -W "http://www.hdcast.org/j2/jwplayer.flash.swf" -p "http://www.hdcast.org" --live -y "action" -T "#yw%tt#w@kku" -o "out.flv"

You can find the used token in memory of your flash plugin container.Just use any Hex tool and load entire memory if the stream is running in your browser and now search for securetoken ASCII format and right after you find the token as I did post above.Just add it and then you can download or watch it in your player.

greetz

Re: New Tocken Required

Thanks for help.. Can you please tell that how can we access flash plugin memory ? ( where is it located in computer)

Re: New Tocken Required

Normaly you can find the token in the swf file directly if you decompile it but not in this case (some dynamic) so there are some missing action script parts.

If you want to check the memory then start Winhex tool and choose tools/OpenRam and now you get a list with all running processes and now choose the Plugin-Container process which is used by the stream you are running in your browser.Choose Entire Memory and now check it.If you search for securetoken string (ASCII) then you find it already with the first hit.

Code:

Offset      0  1  2  3  4  5  6  7   8  9  A  B  C  D  E  F



06454AC0                                     73 65 63 75 72              secur

06454AD0   65 54 6F 6B 65 6E 09 75  6E 64 65 66 69 6E 65 64   eToken.undefined

06454AE0   10 72 6F 67 65 72 53 65  63 75 72 65 54 6F 6B 65   .rogerSecureToke

06454AF0   6E 04 68 61 73 68 0C 23  79 77 25 74 74 23 77 40   n.hash.#yw%tt#w@

06454B00   6B 6B 75 03 54 45 41 17  63 6F 6D 2E 77 6F 77 7A   kku.TEA.com.wowz

06454B10   61 2E 65 6E 63 72 79 70  74 69 6F 6E 41 53 33 07   a.encryptionAS3.

06454B20   64 65 63 72 79 70 74 13  73 65 63 75 72 65 54 6F   decrypt.secureTo

06454B30   6B 65 6E 52 65 73 70 6F  6E 73 65                  kenResponse

So the token stuff is a interesting theme but also I don't know how to find them always or how to deobfuscate tokens etc.The main problem is that the guys on this forum don't wanna explain it (no idea why they make a big secret about it) or create some video tutorials.Normaly I come from the RCE scene and wrote many tutorials & Olly-scripts for years for the people and all are happy and thats the different to this forum for exsample.So I have seen already many posts by people who are looking for explanations about how to find the token (if token is not directly to find in swf file) in this or that case but the only answer they get it just a postet token xy without any solution about the way or they get no answer and this is really bad and I don't support such behavior.

greetz