Friday, August 31, 2007

Yahoo new-old policy

I dont know when did yahoo start this new (for me) policy, it is regarding yahoo messenger channels, the last time as I remember the channels were riddled with bots,spambots,worms...etc.
Until today I discovered that they have changed the channels a little bit,they put their own bot, "yahoo messenger admin", where it supervise who gets in,so in order to chat in a channel you must verify your account by a link .
Alot of messengers and internet chat servers do that, so I consider it as waking up late from yahoo, it maybe a wise step but a late step they lost alot of costumer confidence in past time.
As I tried to understand the way how the 'new' policy workes I used packetyzer(just like ethereal) it really helped me to see what that verification link is all about.
After your browser launches the link :
GET /go/captchat/?img=http://ab.login.yahoo.com/img/oPzKLOVZFel3pZkmT67Oq329Tsbza6rvU
kVoIPnhURbTiD4FwuiEAMSIKC64X0B4xEuyecptqsUVWs2NfAjAlo5z_Ens1E1U_A--.jpg&.intl=us%20) HTTP/1.1

Reply:
question=http%3A%2F%2Fab.login.yahoo.com%2Fimg%2FoPzKLOVZFel3pZkmT67Oq329Tsbza6rvUkVoIPnhURbTiD4FwuiEAMSIKC64X0B4x
EuyecptqsUVWs2NfAjAlo5z_Ens1E1U_A--.jpg&.intl=us&answer=BV78zl......
After the server checks your word verification, it will send a a link to deferred link:
The document has moved < href="http://captcha.chat.yahoo.com/go/captchat/close?.intl=us">
And there at that link /captchat/close?.intl=us , a page displaying a congratulation sentence of you verified your account.
So that "Messenger Chat Admin" is linked to the servers and get the answer of the verified account from them.
Lastly , will this stop malware programmers ..I might be paranoid but I can sense some bots here and there in some channels, but they are much less than before.

Labels:

Smilar pages

Sunday, March 18, 2007

hi5 Download their flv

It is easy and simple to get hi5.com video clips shared by their users downloaded , here I will introduce simple steps to download that flv file :
-Get to the page where the streaming is about to begin ,duh!!
-Either use 'View page source' or from "Embed:" value in the page .
-Find that part where hi5.XXX.download.videoegg.com/gidXXX/cidXXXX/JV/SN/XXXXX..etc
-Now get that URL add 'http://' in the beginning then add '_high.flv' to the end
-Now you have a downloadabe URL for the v-clip '.flv' codec

I dont know if there is a _small or _low version of the clips...try it by yourself.
To play flv use FLVplayer
To convert flv to mpeg FFmpeg will be helpfull ,especially in linux

Labels: ,

Smilar pages

Wednesday, February 28, 2007

Unprotecting DRM v2-protected WMV files

Some WMV files r protected using a microsoft DRM version 2, however this version is not the only one out there and one must check whether its this version or not before attempting to crack it...

first of all, u have to have the key, since u cannot simply crack any protected content whereever its found...
if u r using WMP version 10 u should switch to 9, this is done by removing it from add/revome progs, u could also download wmp version 9 from microsoft...
if u system comes with wmp 10+ u should use xplite or something similar to strip wmp out of windows...
when u run the movie for the first time it would attempt to connect to the internet, once done it might ask u about the username/password for playing this protected content. upon enetering the correct data, the movie will play even if u disconnect from the internet since a version of the key is stored cached in \Documents and settings\all users\DRM i think...however this need not to concern us now.
download undrm from http://bradleybeast.com/sec/unDRM.zip, it will also explain this stuff in addition to the real prog which we need...Automate unDRM
copy the dlls from step2 in the mentioned zip file to windows\system32, (overwrite if prompted)
automate unDRM didnt work with its script to i had to use the commands separately...ie run
drmdbg.exe from wherever u installed automate undrm. it'll show the wmp, open the encrypted file and obtain the key and put it one ur desktop
copy drm2-i.key from ur desktop to drm2wmv_e\drm2 and drag and drop the protected content to drm2wmv_e.exe it'll extract the unprotected content for u and place it in the same folder where the protected contetn reside...
njoy...

Labels: ,

Smilar pages

Sunday, December 10, 2006

SWF Movie player

Wasting time and nothing else I do these days apart from daily horror living in Iraq ,I decided to post some of the stuff I learned long time ago .
It is about Streaming SWF player ,With my Internet Connection it is impossible to stream any shit,so I made a series of SWF decompiling procedures and found some info that helped me to get the movie downloadable URL. you need flv-player to play the downloaded file [martijndevisser.com]

LiveLeak.com:
To download their .flv file you need to take tha token number and fill it in this link http://www.liveleak.com/mi?token= ,copy paste that URL into address bar and a displayed text begining with media3.liveleak.com and ending with .flv now that link change every %2f with / "forward slash" now you have the URL for direct downloading.

YouTube.com:
To download tha .flv file that is been streamed through a .swf player take the value after video_id and t value from the URL of youtube.com and create this URL out of it http://youtube.com/get_video?video_id=[fill]&t=[fill] ,now just copy paste to downloading software and the file will be between your hands.

porkolt.com:
View page source code and find the ../player.swf?parameters= ,copy the value of parameters and paste it in an address bar then find the value "file" in the displayed test copy the value after "file=" to the "&" then append /movie.flv to it ,now you have a downloadable version of the streamed movie.


----------------------------See this picture :lol:

Labels: ,

Smilar pages

Tuesday, November 28, 2006

dap and loads of crap!!

Using process monitor from sysinternals [MS - property currently ] I found that dap checks specific registry key for its downloading file ,so here is what you can do to backup a dap file [DAP 8 was used in this article] :

-Go to registry editor [run->regedit] and find this key [HKEY_CURRENT_USER\Software\SpeedBit\Download Accelerator\FileList\] here you can find various CLSID key names relevant for every file on download list, each one contains a variety of important information regarding downloading segments ,current downloaded size,file size,file URL address...etc try to find the CLSID relevant to your downaloding file that you want to backup ,by looking for either [Item_ShortFilename] or [Item_MainURL] values [they are string values] ,and then right click on that CLSID key and hit export ,to be saved as .reg ext file .


-Go to your downloading directory [for e.g: My Documents\My Completed Downloads\] and find the name of [wanted to be backuped] with .dap extension copy it [backup it] but you have to remember the exact name of the original file.

And now if anything happened with dap and removed your downloading in progress file you can return the download in progess from the point where you backuped tha file by :

-Shutting down dap

-Copying the file with its authentic name that with .dap extension to the dap downloading folder

-Execute the .reg file you created and by that restoring all information regarding download file

-Run dap again ..

And you will see the downloading in progress file that you wanted to protect from ev0l dap :lol:

I tested the above while downloading a movie file,so I dont know if it will corrupt a binary file ,zip,rar ,etc.. files .To be on the safe side I recommend to follow the steps as above ,that you create the .reg before backuping the .dap file ,so as not to mess up with segments progressing download point.

-------------------------------------------------
There is a story behind it -- ;)

Labels:

Smilar pages

Monday, November 06, 2006

Messing up with YIM

Months ago someone asked me that if the login picture(animated one) of Yahoo Instant Messenger changeable or not ,that time I was not interested indeed ,I thought it is something to do with yahoo binaries or something like that, today I was messing up with yahoo trying to see what is all that buzz about it especially in tmy country see some of yahoo messenger tools that someone interested to build www.zaidrix.com .

So lets get down with the bissiness inorder to change yahoo login picture simply go to yahoo messenger directory
in my pc:
C:\Program Files\Yahoo!\Messengerand backup the login.swf ,and then put any picture of yours like .jpg,.bmp,.gif ,or .swf that you made and rename that file to login.swf ,of course not to mention to shut off yahoo messenger first .

Now Launch the messenger and there should be a picture you have chosen displayed .
[The above tested on yahoo messenger 7]

Labels:

Smilar pages

Tuesday, October 10, 2006

creating my own "desktop.scf"

Today I was trying to restore my old desktop shortcut on taskbar,which I mistakingly removed ,I tried to get it back but all in vaine(I didnt use google till now) I was actually using [start key]+D to get desktop as a short cut,but I wanted that shortcut link back,I saw my other computer to see what was that link cos it is not a usual short cut created by simple right click--->create shortcut thing [as I know till the moment] ,I found that it is not as usual a .lnk file as in every shortcut ,hmm,so it was not a normal shortcut file as I thought so what revealed is that it is a .scf file type and doesnt contain a complicated file contents,so I just created that file followed by dragging it and dropping it into taskbar .The data inside that file was as simple as that :

------------------------------desktop.scf-----------------------
[SHELL]
command=2
iconfile=explorer.exe,3
[Taskbar]
Command=ToggleDesktop
----------------------------------------------------------------

well, after searching windows directory I found that there are other .scf files: explorer.scf and view channels.scf ,and here is the data inside them :
----------------------------explorer.scf------------------------
[Shell]
Command=2
IconFile=explorer.exe,1

[Taskbar]
Command=Explorer
----------------------------------------------------------------


and for view channels.scf
--------------------------view channels.scf--------------------

[Shell]
Command=3
IconFile=shdocvw.dll,-118

[IE]
Command=Channels

---------------------------------------------------------------

I dont know how these things are useful,but it was interesting thing I experienced today...
selam and peace my brother :lol:

Labels:

Smilar pages

Thursday, October 05, 2006

hell0 7h3r3!

This is my first post in here (duh!) and this blog will be dedicated to publish my daily experience in computers ,as you will notice most of the things I discover was just a hobby nothing less nothing more ....you can still find my real me on "??XxxX??" .For people who knows me I say this is the new move from me,I am taking this move so as to pass the rawbinsoft project...and make this a real diary of mine,a computer diary...
So get thrilled cos I am planning to post things varies from security news,asm,c,scripts,OS tweaks...and alot other stuff some of them will be crucially lame others will be 1337 :lol: .

so bye for now ,I am going to do some work for this blog :)

Labels:

Smilar pages