V
V
Vitaliy Semyanchuk2013-12-28 15:58:33
Parsing
Vitaliy Semyanchuk, 2013-12-28 15:58:33

Parser for flash sites

Hi everybody.
I set myself such a task - to parse a flash site. Parsing is not new for me, well, flash sites have not been submitted yet, but since they only give practical advice here, I decided to ask.
In general, what I know about parsing flash sites is that they pull information from xml files, but I don’t understand how to get to them. And that's why I have such a question - what needs to be done in order to find the desired swf file on the page and then find where it pulls from . I understand that I need a site for an example, but I don’t need a ready-made answer, at least push me in the right direction, maybe someone knows where you can look, read, etc.

Answer the question

In order to leave comments, you need to log in

4 answer(s)
S
Stepan, 2013-12-28
@L3n1n

Sniff the network. If the flash pulls data from the server, intercept from where it pulls.

V
Vitaliy Semyanchuk, 2013-12-28
@fix20152

That's what I'm trying, I don't know if I'm doing it wrong. I look at the network through firebug, I see a bunch of swf files, but not one xml. Maybe some other tools to listen to the network.

V
Vitaliy Semyanchuk, 2014-01-06
@fix20152

I tried to sniff the traffic (wireshark), figured out which packets come and go, but there is a problem, the packets come via the TCP protocol, and I can’t figure out what they mean. Who knows how to understand these packages???
63303 6259.531873000 5.226.180.15 192.168.1.2 TCP 242 843 > kdm [PSH, ACK] Seq=213915 Ack=142 Win=14600 Len=188
Frame interface 0
eth
63304 6259.673966000 192.168.1.2 5.226.180.15 TCP 54 kdm > 843 [ACK] Seq=142 Ack=214103 Win=16771 Len=0
Frame 63304: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface 0
frame
And such packets are repeated every couple of seconds.
Who can tell???

V
Vitaliy Semyanchuk, 2014-01-06
@fix20152

Here is copied follow TCP stream array
char peer0_0[] = {
0x00, 0x00, 0x00, 0x38, 0x15, 0x00, 0x49, 0x6e,
0x50, 0x6c, 0x61, 0x79, 0x5f, 0x31, 0x5f, 0x39,
0x2f, 0x4c, 0x43 0x5F, 0x31, 0x38, 0x5f, 0x31,
0x5f, 0x39, 0x2f, 0x4c, 0x32, 0x38, 0x36, 0x38,
0x39, 0x32, 0x33, 0x32, 0x41, 0x5F, 0x31, 0x5F,
0x39, 0x01, 0x55, 0x7c, 0x54, 0x53, 0x3d, 0x34,
0x37, 0x3b, 0x54, 0x44, 0x3d, 0x30, 0x3b, 0x7c };
char peer0_1[] = {
0x00, 0x00, 0x00, 0x52, 0x15, 0x00, 0x49, 0x6e,
0x50, 0x6c, 0x61, 0x79, 0x5f, 0x31, 0x5f,
0x39, 0x2f, 0x43, 0x5, 0x5c, 0x5c 0x5f, 0x31,
0x5f, 0x39, 0x2f, 0x4c, 0x32, 0x38, 0x38, 0x33,
0x33, 0x34, 0x39, 0x31, 0x41, 0x5f, 0x31, 0x5f,
0x39, 0x2F, 0x4c, 0x32, 0x38, 0x38, 0x33, 0x33,
0x36, 0x33, 0x34, 0x41, 0x5F, 0x31, 0x5F, 0x39,
0x2F, 0x4c, 0x32, 0x38, 0x38, 0x33, 0x33, 0x39,
0x36, 0x38, 0x41, 0x5F, 0x31, 0x5F, 0x39, 0x01,
0x55, 0x7c, 0x4F, 0x44, 0x3D, 0x32, 0x2F, 0x37,
0x3b, 0x7c, 0x00, 0x00, 0x00, 0x52, 0x15, 0x00,
0x49, 0x6e, 0x50, 0x6c, 0x61, 0x79, 0x5F, 0x31,
0x5F, 0x39, 0x2F, 0x43, 0x4c, 0x5F, 0x31, 0x35,
0x5F, 0x31, 0x5F, 0x39, 0x2F, 0x4c, 0x32, 0x38,
0x38, 0x33, 0x33, 0x34, 0x39, 0x31, 0x41, 0x5F,
0x31, 0x5F, 0x39, 0x2F, 0x4c, 0x32, 0x38, 0x38,
0x33, 0x33, 0x36, 0x33, 0x34, 0x41, 0x5f, 0x31,
0x5F, 0x39, 0x2f, 0x4c, 0x32, 0x38, 0x38, 0x33,
0x34, 0x30, 0x32, 0x31, 0x41, 0x5F, 0x31, 0x5F,
0x39, 0x01, 0x55, 0x7c, 0x4F, 0x44, 0x3D, 0x35,
0x2F, 0x32, 0x3b, 0x7c};
char peer0_2[] = {
0x00, 0x00, 0x00, 0x52, 0x15, 0x00, 0x49, 0x6e,
0x50, 0x6c, 0x61, 0x79, 0x5f, 0x31, 0x5f, 0x39,
0x2f, 0x41, 0x5, 0x5c, 0x5c, 0x4c 0x31, 0x5F,
0x39, 0x2F, 0x4c, 0x32, 0x38, 0x37, 0x30, 0x30,
0x34, 0x36, 0x32, 0x41, 0x5F, 0x31, 0x5F, 0x39,
0x2F, 0x4c, 0x32, 0x38, 0x38, 0x38, 0x32, 0x35,
0x32, 0x34, 0x41, 0x5f, 0x31, 0x5F, 0x39, 0x2f,
0x4c, 0x32, 0x38, 0x38, 0x38, 0x32, 0x35, 0x32,
0x35, 0x41, 0x5F, 0x31, 0x5F, 0x39, 0x01, 0x55,
0x7c, 0x4f, 0x44, 0x3d, 0x31, 0x36, 0x2F, 0x31,
0x3b, 0x7c, 0x00, 0x00, 0x00, 0x3c, 0x15, 0x00,
0x49, 0x6e, 0x50, 0x6c, 0x61, 0x79, 0x5F, 0x31,
0x5F, 0x39, 0x2F, 0x43, 0x4c, 0x5f, 0x31, 0x38,
0x5f, 0x31, 0x5F, 0x39, 0x2F, 0x4c, 0x32, 0x38,
0x36, 0x36, 0x39, 0x35, 0x32, 0x34, 0x41, 0x5F,
0x31, 0x5F, 0x39, 0x01, 0x55, 0x7c, 0x53, 0x53,
0x3d, 0x38, 0x37, 0x2d, 0x37, 0x37, 0x3b, 0x54,
0x53, 0x3d, 0x35, 0x32, 0x3b, 0x7c, 0x00, 0x00,
0x00, 0x4d, 0x15, 0x00, 0x36, 0x56, 0x32, 0x38,
0x37, 0x30, 0x30, 0x34, 0x36, 0x32, 0x41, 0x5f,
0x31, 0x5F, 0x39, 0x2F, 0x32, 0x38, 0x37, 0x30,
0x31, 0x39, 0x38, 0x38, 0x5f, 0x31, 0x5f, 0x39,
0x2F, 0x32, 0x38, 0x37, 0x30, 0x31, 0x39, 0x38,
0x38, 0x43, 0x32, 0x2d, 0x31, 0x5F, 0x31, 0x5f,
0x39, 0x2F, 0x32, 0x38, 0x37, 0x30, 0x32, 0x34,
0x37, 0x36, 0x2d, 0x31, 0x5F, 0x31, 0x5F, 0x39,
0x01, 0x55, 0x7c, 0x4F, 0x44, 0x3d, 0x31, 0x2F,
0x31, 0x3b, 0x7c, 0x00, 0x00, 0x00, 0x4F, 0x15,
0x00, 0x36, 0x56, 0x32, 0x38, 0x37, 0x30, 0x30,
0x34, 0x36, 0x32, 0x41, 0x5F, 0x31, 0x5F, 0x39,
0x2F, 0x32, 0x38, 0x37, 0x30, 0x31, 0x39, 0x38,
0x38, 0x5F, 0x31, 0x5F, 0x39, 0x2f, 0x32, 0x38,
0x37, 0x30, 0x31, 0x39, 0x38, 0x38, 0x43, 0x32,
0x2d, 0x32, 0x5F, 0x31, 0x5F, 0x39, 0x2F, 0x32,
0x38, 0x37, 0x30, 0x32, 0x34, 0x37, 0x36, 0x2d,
0x32, 0x5F, 0x31, 0x5F, 0x39, 0x01, 0x55, 0x7c,
0x4f, 0x44, 0x3d, 0x31, 0x37, 0x2F, 0x32, 0x30,
0x3b, 0x7c, 0x00, 0x00, 0x00, 0x4d, 0x15, 0x00,
0x36, 0x56, 0x32, 0x38, 0x37, 0x30, 0x30, 0x34,
0x36, 0x32, 0x41, 0x5F, 0x31, 0x5F, 0x39, 0x2F,
0x32, 0x38, 0x37, 0x30, 0x31, 0x39, 0x38, 0x36,
0x5F, 0x31, 0x5F, 0x39, 0x2f, 0x32, 0x38, 0x37,
0x30, 0x31, 0x39, 0x38, 0x36, 0x43, 0x32, 0x2d,
0x31, 0x5F, 0x31, 0x5F, 0x39, 0x2F, 0x32, 0x38,
0x38, 0x38, 0x32, 0x34, 0x35, 0x33, 0x2d, 0x31,
0x5f, 0x31, 0x5F, 0x39, 0x01, 0x55, 0x7c, 0x4F,
0x44, 0x3d, 0x32, 0x2F, 0x31, 0x3b, 0x7c, 0x00,
0x00, 0x00, 0x4e, 0x15, 0x00, 0x36, 0x56, 0x32,
0x38, 0x37, 0x30, 0x30, 0x34, 0x36, 0x32, 0x41,
0x5f, 0x31, 0x5F, 0x39, 0x2F, 0x32, 0x38, 0x37,
0x30, 0x31, 0x39, 0x38, 0x36, 0x5F, 0x31, 0x5F,
0x39, 0x2F, 0x32, 0x38, 0x37, 0x30, 0x31, 0x39,
0x38, 0x36, 0x43, 0x32, 0x2d, 0x32, 0x5F, 0x31,
0x5F, 0x39, 0x2F, 0x32, 0x38, 0x38, 0x38, 0x32,
0x34, 0x35, 0x33, 0x2d, 0x32, 0x5f, 0x31, 0x5F,
0x39, 0x01, 0x55, 0x7c, 0x4F, 0x44, 0x3d, 0x34,
0x2F, 0x31, 0x31, 0x3b, 0x7c, 0x00, 0x00, 0x00,
0x4e, 0x15, 0x00, 0x36, 0x56, 0x32, 0x38, 0x37,
0x30, 0x30, 0x34, 0x36, 0x32, 0x41, 0x5F, 0x31,
0x5F, 0x39, 0x2F, 0x32, 0x38, 0x37, 0x30, 0x31,
0x39, 0x38, 0x36, 0x5F, 0x31, 0x5f, 0x39, 0x2f,
0x32, 0x38, 0x37, 0x30, 0x31, 0x39, 0x38, 0x36,
0x43, 0x32, 0x2d, 0x31, 0x5F, 0x31, 0x5F, 0x39,
0x2F, 0x32, 0x38, 0x38, 0x37, 0x36, 0x31, 0x32,
0x34, 0x2d, 0x31, 0x5f, 0x31, 0x5f, 0x39, 0x01,
0x55, 0x7c, 0x4F, 0x44, 0x3d, 0x32, 0x30, 0x2F,
0x31, 0x3b, 0x7c, 0x00, 0x00, 0x00, 0x4e, 0x15,
0x00, 0x36, 0x56, 0x32, 0x38, 0x37, 0x30, 0x30,
0x34, 0x36, 0x32, 0x41, 0x5F, 0x31, 0x5F, 0x39,
0x2F, 0x32, 0x38, 0x37, 0x30, 0x31, 0x39, 0x38,
0x36, 0x5F, 0x31, 0x5F, 0x39, 0x2F, 0x32, 0x38,
0x37, 0x30, 0x31, 0x39, 0x38, 0x36, 0x43, 0x32,
0x2d, 0x32, 0x5F, 0x31, 0x5F, 0x39, 0x2F, 0x32,
0x38, 0x38, 0x37, 0x36, 0x31, 0x32, 0x34, 0x2d,
0x32, 0x5F, 0x31, 0x5F, 0x39, 0x01, 0x55, 0x7c,
0x4f, 0x44, 0x3d, 0x31, 0x2F, 0x36, 0x36, 0x3b,
0x7c, 0x00, 0x00, 0x00, 0x49, 0x15, 0x00, 0x36,
0x56, 0x32, 0x38, 0x37, 0x30, 0x30, 0x34, 0x36,
0x32, 0x41, 0x5f, 0x31, 0x5F, 0x39, 0x2F, 0x32,
0x38, 0x37, 0x30, 0x32, 0x31, 0x36, 0x38, 0x47,
0x5F, 0x31, 0x5F, 0x39, 0x2f, 0x32, 0x38, 0x37,
0x30, 0x32, 0x31, 0x36, 0x38, 0x5F, 0x31, 0x5F,
0x39, 0x2F, 0x32, 0x38, 0x38, 0x37, 0x35, 0x38,
0x37, 0x35, 0x5F, 0x31, 0x5f, 0x39, 0x01, 0x55,
0x7c, 0x4f, 0x44, 0x3d, 0x31, 0x36, 0x2F, 0x31,
0x3b, 0x7c, 0x00, 0x00, 0x00, 0x47, 0x15, 0x00,
0x36, 0x56, 0x32, 0x38, 0x37, 0x30, 0x30, 0x34,
0x36, 0x32, 0x31, 0x5f, 0x31, 0x5f, 0x39, 0x2F,
0x32, 0x38, 0x37, 0x30, 0x31, 0x39, 0x38, 0x33,
0x5F, 0x31, 0x5F, 0x39, 0x2F, 0x32, 0x38, 0x37,
0x30, 0x33, 0x31, 0x31, 0x36, 0x5f, 0x31, 0x5f,
0x39, 0x2F, 0x32, 0x38, 0x38, 0x37, 0x35, 0x39,
0x32, 0x31, 0x5F, 0x31, 0x5F, 0x39, 0x01, 0x55,
0x7c, 0x4F, 0x44, 0x3d 0x33, 0x2f, 0x31, 0x3b,
0x7c, 0x00, 0x00, 0x00, 0x47, 0x15, 0x00, 0x36,
0x56, 0x32, 0x38, 0x37, 0x30, 0x30, 0x34, 0x36,
0x32, 0x41, 0x5F, 0x31, 0x5F, 0x39, 0x2f, 0x32,
0x38, 0x37, 0x30, 0x31, 0x39, 0x38, 0x33, 0x5F,
0x31, 0x5F, 0x39, 0x2F, 0x32, 0x38, 0x37, 0x30,
0x33, 0x31, 0x31, 0x36, 0x5f, 0x31, 0x5f, 0x39,
0x2F, 0x32, 0x38, 0x38, 0x37, 0x35, 0x39, 0x33,
0x36, 0x5F, 0x31, 0x5F, 0x39, 0x01, 0x55, 0x7c,
0x4F, 0x44, 0x3d, 0x32, 0x2F, 0x39, 0x3b, 0x7c,
0x00, 0x00, 0x00, 0x49, 0x15, 0x00, 0x36, 0x56,
0x32, 0x38, 0x37, 0x30, 0x30, 0x34, 0x36, 0x32,
0x41, 0x5F, 0x31, 0x5F, 0x39, 0x2F, 0x32, 0x38,
0x37, 0x30, 0x31, 0x39, 0x38, 0x33, 0x5f, 0x31,
0x5f, 0x39, 0x2F, 0x32, 0x38, 0x37, 0x30, 0x32,
0x36, 0x32, 0x30, 0x5F, 0x31, 0x5F, 0x39, 0x2F,
0x32, 0x38, 0x38, 0x37, 0x35, 0x39, 0x32, 0x38,
0x5F, 0x31, 0x5F, 0x39, 0x01, 0x55, 0x7c, 0x4F,
0x44, 0x3d, 0x31, 0x31, 0x2F, 0x31, 0x30, 0x3b,
0x7c, 0x00, 0x00, 0x00, 0x47, 0x15, 0x00, 0x36,
0x56, 0x32, 0x38, 0x37, 0x30, 0x30, 0x34, 0x36,
0x32, 0x41, 0x5f, 0x31, 0x5F, 0x39, 0x2F, 0x32,
0x38, 0x37, 0x30, 0x31, 0x39, 0x38, 0x33, 0x5F,
0x31, 0x5F, 0x39, 0x2f, 0x32, 0x38, 0x37, 0x30,
0x32, 0x36, 0x32, 0x30, 0x5F, 0x31, 0x5F, 0x39,
0x2F, 0x32, 0x38, 0x38, 0x37, 0x35, 0x39, 0x34,
0x30, 0x5F, 0x31, 0x5f, 0x39, 0x01, 0x55, 0x7c,
0x4f, 0x44, 0x3d, 0x34, 0x2f, 0x36, 0x3b, 0x7c,
0x00, 0x00, 0x00, 0x40, 0x15, 0x00, 0x36, 0x56,
0x32, 0x38, 0x37, 0x30, 0x30, 0x34, 0x36, 0x32,
0x41, 0x5f, 0x31, 0x5F, 0x39, 0x2F, 0x32, 0x38,
0x37, 0x30, 0x31, 0x39, 0x38, 0x31, 0x5F, 0x31,
0x5F, 0x39, 0x2F, 0x32, 0x38, 0x37, 0x30, 0x32,
0x30, 0x30, 0x39, 0x5f, 0x31, 0x5f, 0x39, 0x2f,
0x32, 0x38, 0x37, 0x30, 0x35, 0x39, 0x37, 0x32 };
char peer0_3[] = {
0x5f, 0x31, 0x5f, 0x39, 0x01, 0x44, 0x7c, 0x7c };

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question