Spoofing RTMP urls

[hasomaso]

secureToken is the same for all streams from the site

-T "252789c27626cb86de1ddfdff61d75f0"

and please use the latest rtmpdump from KSV
rtmpdump2.4

[anrelou]

Originally Posted by hasomaso

secureToken is the same for all streams from the site

-T "252789c27626cb86de1ddfdff61d75f0"

and please use the latest rtmpdump from KSV
rtmpdump2.4

Oops, sorry for being an idiot. Where did you get this token from?
It means, that /auth_token/ is meaningless, I gather, right?

[killro0000]

Originally Posted by anrelou

Oops, sorry for being an idiot. Where did you get this token from?
It means, that /auth_token/ is meaningless, I gather, right?

He got it from m_player.swf

If you decompile it, take a look at line 2851 in MainTimeline.as. You can find the following code there:

this.nc.call("secureTokenResponse",new Responder(secureResult.onResult),TEA.decrypt(infoO bject.info.secureToken,"252789c27626cb86de1ddfdff61d75f0"));

Here is this token.

BTW Can anybody help me to download video from https://www.lattelecom.tv/arhivs/360...a_academy_2015 ?

I have tried

rtmpdump -v -r "rtmpe://195.13.216.2/records" -a "records/" -W "https://www.lattelecom.tv/static/m_player.swf" -p "https://www.lattelecom.tv/arhivs/360tv_ideja/2015-11-06/1446707965393/tiesraide_techhub_riga_academy_2015" -y "mp4:store1/2015_11_06/1446707965393_360tv_ideja_lv_hq.mp4" -T "252789c27626cb86de1ddfdff61d75f0" -o "output3.flv"

As well as @hasomaso example - it doesn't work anymore, I get

ERROR: rtmp server requested close

after ~7 secs

Here is data from debug before disconnect:

DEBUG2: 0000: 00 02 00 15 6f 6e 4c 74 6b 41 75 74 68 53 74 72 ....onLtkAut
hStr
DEBUG2: 0010: 65 61 6d 53 74 61 74 75 73 00 00 00 00 00 00 00 eamStatus...
....
DEBUG2: 0020: 00 00 05 02 00 09 66 6f 72 62 69 64 64 65 6e ......forbid
den
DEBUG: RTMP_ClientPacket, flex message, size 47 bytes, not fully supported
DEBUG: (object begin)
DEBUG: Property: <Name: no-name, STRING: onLtkAuthStreamStatus>
DEBUG: Property: <Name: no-name, NUMBER: 0.00>
DEBUG: Property: NULL
DEBUG: Property: <Name: no-name, STRING: forbidden>

Seems that I should provide something to rtmp server but what?