View Single Post
  #5  
Old 12-26-2014, 07:14 PM
DefectedToRussia DefectedToRussia is offline
Junior Member
 
Join Date: Dec 2014
Posts: 11
DefectedToRussia is on a distinguished road
Default

Re: rtmp token protection help


Quote:
Originally Posted by troller12 View Post
Hi,
Also you can copy of CMD.exe into same folder and start it from there to have the right path already.
On Win7+ I believe, you can shift + right click and you have the option to "Open Command Window Here"



I used to do a similar thing to what you said before I knew that shortcut. Instead of copying cmd.exe I would create a new blank text file, then rename it a .bat or .cmd and edit it to: "start c:\windows\system32\cmd.exe"

It would basically have the same result as what you mentioned but without having copies of cmd.exe floating around everywhere!

By the way I can confirm it's not a UAC restriction or anything, as yes I'm on win7 but I've been able to rtmp dump into that folder before so it's not an access violation for the directory at least. But yes the error is an access violation, but that could really be anything, that just means an invalid memory address was attempted to be accessed (like address 0, or an address that continued out of range of a buffer)

I'm thinking it's maybe a buffer overflow exploit we've discovered, lol! I'm checking to see which parameter it could be causing it, if that's it anyway! Tried with latest standard rtmp dump and latest KSV version. Which version did you successfully get to work by the way troller12?

EDIT: Okay if I take out the -W parameter, it doesn't crash but it also doesn't work. Is it really needed to SWF Verify in this case? Or perhaps the token is just expired and I have to get my own token for it to work!

EDIT2: Figured it out, you were passing an incomplete url... See since this isnt a direct link to an .swf file, it's a php page that returns an .swf file, but it has to have the right arguments passed after the ?... You missed this part: "o=1&kpublica=29245"

So it's more like: -W "http://privado.streamingfreetv.net/embed/noreproductor.php?o=1&kpublica=29245"

With the full command like:
Code:
rtmpdump -V -v -r "rtmp://94.23.247.151/redirect" -a "redirect?token=FEO6Tb4vM1iLHaCZPBFwExpired=1419545618" -f "WIN  16,0,0,235" -W "http://privado.streamingfreetv.net/embed/noreproductor.php?o=1&kpublica=29245" -p "http://privado.streamingfreetv.net/embed/embed.php?channel=historia&w=650&h=400" -y "historia" -o "historia.flv"
Now it doesn't crash! So that means an improper swf auto verify url is a crash! So knowing that, when you use that parameter you have to make sure the link is correct.

So just get an updated token and it should work spainwomendrinkingparties

Last edited by DefectedToRussia : 12-26-2014 at 07:45 PM.
Reply With Quote