View Single Post
  #176  
Old 12-11-2012, 05:35 PM
hyc hyc is offline
RTMPdump team
 
Join Date: Dec 2009
Posts: 169
hyc will become famous soon enoughhyc will become famous soon enough
Default

Re: chaturbate.com: SecureToken problems


Quote:
Originally Posted by youzme View Post
What technologies do you need to have knowledge of in order to clearly see how this would be done?

I know C, C++ and Java, but I'm guessing that the methods to achieving what I quoted don't become clear until studying flash to find out how the access controls work on these streaming cam sites, so one could modify something like RTMPdump to grab privs.

Is it just understanding flash and then modifying rtmpdump to bypass access controls? Or do your exploits depend more heavily on general web programming knowledge like html, http(s), etc?

I understand if you prefer to PM a response (if you're willing), and forgive me if these questions sound stupid, but unfortunately nobody has ever written a really elucidated post on the skillset for doing these kinds of exploits, and I'm a curious learner.
Nobody teaches these things, you learn by doing.

You say you know C, C++, and Java. Sounds to me though, like you don't actually know how computers work. There's only one skill you actually need - the ability to look at someone else's code and understand what it does. All else follows from this. It doesn't matter what language you're dealing with. Understanding how software works is the same skill, regardless.
Reply With Quote