Audio/video stream recording forums (http://stream-recorder.com/forum/index.php)
-   rtmpdump (http://stream-recorder.com/forum/forumdisplay.php?f=54)
-   -  

chaturbate.com: SecureToken problems

(http://stream-recorder.com/forum/showthread.php?t=10869)

greenythebeast 01-25-2012 12:35 AM

chaturbate.com: SecureToken problems


 
I wrote a program for Mac that allowed myself to download videos from a site using rtmpdump by entering the username of the person broadcasting. It used the -T flag of rtmpdump because the site used SecureToken authentication in its .swf file. They just updated the .swf file today and it doesn't work anymore. The code went from this:

Code:

if (_local2.secureToken != null){
this._-7E.call("secureTokenResponse", null, _-0D._-2W(_local2.secureToken, "m9z#$dO0qe34Rxe@sMYxx%"));

to this:
Code:

if (_local2.secureToken != null){
this._-3a.call(_-2I._-3p(-366, 769), null, _-26._-3p(_local2.secureToken, _-2I._-3p(-344, 807)));

What am I supposed to enter for the SecureToken now?

KSV 01-25-2012 01:52 AM

Re: SecureToken problems


 
strings are encrypted now. you have to figure out the obfuscation scheme. or wait till i am back (after 3-4 days) :rolleyes:

greenythebeast 01-25-2012 02:25 AM

Re: SecureToken problems


 
Quote:

Originally Posted by KSV (Post 37953)
strings are encrypted now. you have to figure out the obfuscation scheme. or wait till i am back (after 3-4 days) :rolleyes:

oh my god, if you figure it out i will personally send you 100 virgins for your pleasure =P

greenythebeast 01-25-2012 02:41 AM

Re: SecureToken problems


 
Quote:

Originally Posted by KSV (Post 37953)
strings are encrypted now. you have to figure out the obfuscation scheme. or wait till i am back (after 3-4 days) :rolleyes:

im just curious, but how would one go about figuring out the obfuscation scheme?

greenythebeast 01-26-2012 07:06 PM

Re: SecureToken problems


 
Is there any other way to capture the SecureToken or is deobfuscation the only way?

greenythebeast 01-26-2012 07:47 PM

Re: SecureToken problems


 
After doing some research it looks like the .swf file was obfuscated using SecureSWF. Hope that helps.

Bahman 01-28-2012 10:01 AM

Re: SecureToken problems


 
KSV, Would you mind please teaching us how to figure out the obfuscation scheme too? I'm so interested in knowing it!! A short instruction is enough, please!!:)
The only things that I could find on the net was, It's related to Java!! but I don't have any idea if it be right!! :D

KSV 01-30-2012 02:00 AM

Re: SecureToken problems


 
SecureToken key is still same as shown in post #1. now their flash player sends an extra command CheckPublicAccess before sending play command. you need to modify rtmp.c to emulate this. i am not interested to do so for adult websites. you are on your own. it's easy anyway. checkout the patch file in my package for similar code.

greenythebeast 01-30-2012 05:35 AM

Re: SecureToken problems


 
Quote:

Originally Posted by KSV (Post 38135)
SecureToken key is still same as shown in post #1. now their flash player sends an extra command CheckPublicAccess before sending play command. you need to modify rtmp.c to emulate this. i am not interested to do so for adult websites. you are on your own. it's easy anyway. checkout the patch file in my package for similar code.

Thank you for your hard work in figuring this out. I'm not trying to be rude or anything but do you actually expect someone who can't program to be able to modify this? I'm totally fine in doing the legwork here but are there any hints that you could give me that would help me get started?

svnpenn 01-30-2012 06:19 AM

Re: SecureToken problems


 
If you cant program, that is your problem. This is not a forum to teach that.


All times are GMT -6. The time now is 02:11 AM.