[kwm]

First, find the url of the swf file. Then you can either download it and decode it. Or you could feed that url into an online decoder. Once it's decoded you can look through the code to find a section that looks like: TEA.decrypt(_arg1.info.secureToken, "???????")); the question marks are USUALLY the token. But it is possible that it will be a variable that holds the token. And the code might be a little different depending on the site. So you might have to dig a little.