help token

help token

 

hello quisera ask for help to find the token in dinozap this is the channel:

http://www.dinozap.tv/redirect/chann...tostart= true

and this is what I captured:

rtmpdump -r "rtmpe://184.75.213.50:1735/vod" -a "vod" -f "WIN 11,6,602,171" -W "http://93.114.45.68/jwplayer5/player.swf" -p "http://www.dinozap.tv/redirect/embedredi.php?c=111&width=720&height=440&autostart =true&tk1=O9CIxPEml6ubA9NS1nu1zKIQbfE8CMkOLiFjAZMt U8Q%3D&tk2=713dTcBcMa%2FpkgRfN3rk7lSvpCCc7pflp5e8c 5dGb7k%3D&tk3=0iw3nPPpqjzJiOxi1GkUBUlPe4h%2BspnJ%2 FuvlGtekF28%3D" -y "abonovip.eu" -o "abonovip.eu.flv"

I have been looking into the sfw with:

http://www.showmycode.com/

but can not find it anywhere token. have if you can help me learn to get the token. to avoid having to ask for them at all times. a greeting

Re: help token

 

try this

Re: help token

 

With that token code gives me error:

I wonder how do you get the token. thank you very much for helping


Edit: I read that probably my pc problem. I tested with this application:

http://fmsguru.com/FreeApps/connectiontester.cfm

and this is the result:

RMTP Default Success 15.9s
RMTP Port 1935 Success 15.9s
RMTP Port 80 Success 15.9s
RMTP Port 443 Success 15.9s
RMTPT (Tunneling) Default Success 16.7s
RMTPT (Tunneling) Port 80 Success 19.2s
RMTPT (Tunneling) Port 443 Success 16.8s
RMTPT (Tunneling) Port 1935 Success 16.8s

Re: help token

 

Decompile the SWF and you will find the secureToken.

The secure Token is #ro%g0#r@1

If you run your RTMPDump command from within a batchfile you need to escape the reserved character '%' with '%%'.

-T "#ro%%g0#r@1"

Re: help token

 

testing the new token gives me another error:

thank you very much to all who are helping me

Re: help token

 

Are you sure that you closed your browser window before executing the command?

This is the RTMPDump version I used:
And even this abbreviated command worked for me:

You pasted it into a .txt file and saved it as .bat, right?

Re: help token

 

now it works. the problem is that it ran directly from cmd. to save the bat txt me works perfect. thank you very much.

I could say that I find the token sfw. I looked here:

http://www.swfdecrypt.com/

I have been testing Flash Decompiler Trillix, SWFInvestigator, Hash & SizeSWFPlayer. but I have not found in either the token. I downloaded the sfw mozilla watching the page information in half and save as.

Re: help token

 

Try flasm. This pretty ancient tool still does the job (for this particular SWF):
Or you can try dumping the process memory of the Adobe Flash player components:

If you have Windows 7 open the Task Manager and rightclick these processes and create a dump file.

If you don't have Windows 7 use ProcDump:

Now open the decompressed .swf or the .dmp with a HexEditor e.g. (hXXp://mh-nexus.de/en/programs.php) and watch out for the usual suspects (like: secureToken, sharedsecret etc.)

Re: help token

 

thank you very much for everything.

with me pluging container generates this file:

plugin-container.DMP
FlashPlayerPlugin_11_6_602_171.DMP

With what program I can open it? I've tried with a edithex but I get a lot of numbers and can not find the option to put normal. Show me a program that I can serve. the Flasm've tried but not working. I can not open the program, I guess it's because I have windows 7.

Re: help token

 

I already told you: Any HexEditor is fine. I use HxD - Hexeditor.

Really? You gotta be kidding me. There is no such thing to "put it normal". Get familiar with how to use a HexEditor and what it does if you are so interested in obtaining this token.

Doubtful that there is a one-click noob friendly proggie for that.

Anyway, if you want to give it another shot:

There are two instances of FlashPlayerPlugin_*.exe running.
Usually the process that occupies more memory contains the secureToken.

I have tried both ways for this particular SWF player. And both ways are working exactly like I explained.

Which program? The .dmp or the decompressed .swf is just binary data.

I'm also running Windows 7 and it is working fine for me.


For all who are interested in going a step further:

If you only want to dump one process, you can disable Flash player protected mode
by appending the line "ProtectedMode=0" to mms.cfg which is located:
It is explained in:
If you are now playing a flash stream, you only have the process plugin-container.exe to watch out for.
Use this at your own risk and revert it once you are done.