View Single Post
  #27  
Old 01-06-2012, 12:24 PM
Bahman Bahman is offline
t.A.T.u.'s fan forever
 
Join Date: Sep 2011
Location: Tehran, Iran
Posts: 381
Bahman is on a distinguished road
Default

Re: www.playtv.fr/television/ - A serious challenge for livestreming


Quote:
Originally Posted by beowluf View Post
Can you please show me how to find the the token step by step from downloading swf to the token
OK!! This one is a bit hard!!

First find SWF file:
For finding swf path on the site, for example, In FireFox, after browsing web page, go to "Tools", "Page Info", "Media" tab, look for a swf file there!! another way, use Coojah!!

For example path of the swf file that you are looking for, is:
Code:
http://tvplayer.castlemedia.fr/swf/tvplayer.swf?4f072cc19beb24838916332190
Then, Download "flasm" program!!

Then extract all included files in a folder!! Then Like rtmpdump, create a batch file in that folder with this script:
flasm -x tvplayer.swf

Run that batch file!! Then you should have 2 file with these names:
"tvplayer.swf" and "tvplayer.$wf"!!

Open first one (secureplayer.swf) with Wordpad or Notepad!! Look for "ENCRYPTION_KEY"

Code:
ERROR_GEOIPENCRYPTION_KEY
jG4Cp6aG8Ks1
ERROR_CHANNEL
AD_ADSWIZZERROR_CRITICALERROR_NETWORK_FULL
Right now, you have encryption key but it's not enough!!

Open Wireshark and start capturing packets, Browse your fav tv channel on www.playtv.fr, and then between founded packets, look for/ filter for "tcp.stream eq 4"!! You will find sth like this:
Code:
GET /token=d06f8f89878f160876417ec615b99562e77dfadae0a6b8b2a873f9c8d44ff1a15702211e2dfd5df64d7359ba26e1b9f9
Come On!!

Go here!!

Decrypt the string with XXTEA decrypter using "jG4Cp6aG8Ks1" as key (you had found this, look at top).

Just I have to confirm that I were completely wrong at the last section!! KSV should help!!

Last edited by Bahman : 01-06-2012 at 01:25 PM.
Reply With Quote