Audio/video stream recording forums (http://stream-recorder.com/forum/index.php)
-   rtmpdump (http://stream-recorder.com/forum/forumdisplay.php?f=54)
-   -  

Key for Secure Token Response in RTMPE

(http://stream-recorder.com/forum/showthread.php?t=16596)

fedex1 08-27-2013 10:34 AM

Key for Secure Token Response in RTMPE


 
Thanks to everyone in this forum. It is truly appreciated.

Chap helped us with a particular public government website and gave us the key for the secure token response. Many thanks to chap! But we want to be able to find the key ourselves.

Can someone point us to a page where it describes how to derive the key for the secure token response?

For example, this works:

Code:

rtmpdump -r "rtmpe://nyc.pegcentral.com/councilnyc/" -a "councilnyc/?doConnect=12345&doPublish=54321" -f "WIN 11,8,800,94" -W "http://councilnyc.pegcentral.com/flash/media_player_798c.swf" -p "http://councilnyc.pegcentral.com/flash/media_player_798c.swf?server=nyc-rtmp.pegcentral.com&account=councilnyc&videoFilename=NYCC-PV-CH-Cha130822-153731.mp4&from=legistar&inTime=&startState=play" -y "mp4:NYCC-PV-CH-Cha130822-153731.mp4" -o "2013-08-26_11-53-22_mp4_NYCC-PV-CH-Cha130822-153731.flv" -T "2JNxehiz"
but how was the -T parameter found?

I suspect it may be different for different cases but what is the general strategy? And it probably is an evolving issue :)

nullacht 08-28-2013 01:35 AM

Re: Key for Secure Token Response in RTMPE


 
The key is stored inside the SWF file.

Code:

http://councilnyc.pegcentral.com/flash/media_player_798c.swf
Code:

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))
Code:

secureTokenCode = "2JNxehiz"

fedex1 08-29-2013 09:08 PM

Re: Key for Secure Token Response in RTMPE


 
Thank you nullacht!

For those using ubuntu, you can use swfmill to decompile the SWF file

For example,

Install:
sudo apt-get install swfmill

Run:
swfmill swf2xml media_player_798c.swf media_player_798c.xml

Then look for the token manually.

makkie_65 01-29-2014 08:36 PM

Re: Key for Secure Token Response in RTMPE


 
Quote:

Originally Posted by nullacht (Post 63319)
The key is stored inside the SWF file.

Code:

http://councilnyc.pegcentral.com/flash/media_player_798c.swf
Code:

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))
Code:

secureTokenCode = "2JNxehiz"

Hello,

Can you walk me through how you got from

Code:

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))
To

Code:

secureTokenCode = "2JNxehiz"
I got to the first part with an swf decompiler (showmycode.com), but for the life of me I have NO clue how you got to the second part. :confused: Please help????

makkie_65 01-31-2014 10:22 AM

Re: Key for Secure Token Response in RTMPE


 
Quote:

Originally Posted by makkie_65 (Post 64435)
Hello,

Can you walk me through how you got from

Code:

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))
To

Code:

secureTokenCode = "2JNxehiz"
I got to the first part with an swf decompiler (showmycode.com), but for the life of me I have NO clue how you got to the second part. :confused: Please help????

Respectfully, bump:)

peterpan 01-31-2014 10:41 AM

Re: Key for Secure Token Response in RTMPE


 
Try this... http://bit.ly/1d5ndHy :)

makkie_65 01-31-2014 03:49 PM

Re: Key for Secure Token Response in RTMPE


 
Quote:

Originally Posted by peterpan (Post 64455)
Try this... http://bit.ly/1d5ndHy :)

Thank you for the response!
So now..... How do I get from

Code:

nc.call("secureTokenResponse", null, TEA.decrypt(_loc_4.secureToken, secureTokenCode))
To

Code:

secureTokenCode = "2JNxehiz"
Using JPEXS?

Thanks again!!!

peterpan 01-31-2014 07:43 PM

Re: Key for Secure Token Response in RTMPE


 
C'mon Bro...Use Your Brain a Little Bit...

Install it
Open the file (swf)
Go to Tools
Select "Search All ActionScripts"
Check "ignore case"
Type token in the search box and click OK
Go up and down til you find it ;)

Note: this works for some swf's, but not all :(

good luck

makkie_65 02-01-2014 12:26 PM

Re: Key for Secure Token Response in RTMPE


 
Quote:

Originally Posted by peterpan (Post 64460)
C'mon Bro...Use Your Brain a Little Bit...

Install it
Open the file (swf)
Go to Tools
Select "Search All ActionScripts"
Check "ignore case"
Type token in the search box and click OK
Go up and down til you find it ;)

Note: this works for some swf's, but not all :(

good luck

Thank you for your response. I already had tried that and I got a BIG ZERO... NADA:p

Here are three files I am using to learn how to do this (I have a whole list of channels I need to get the tokens for)

http://player.longtailvideo.com/player5.3.swf
http://www.zenex.tv/data/scripts/eplayer.swf
http://www.iguide.to/player/secure_p...mbed_token.swf

Which means: what do you do when you cannot get the token using this method?

Thanks

chap 02-01-2014 01:44 PM

Re: Key for Secure Token Response in RTMPE


 
makkie_65
Quote:

I have a whole list of channels I need to get the tokens for
list of channels


All times are GMT -6. The time now is 11:54 AM.