search

ash47 / OmegleMiddleMan

Lets you connect strangers to each other, and intercept messages AKA Man in the Middle Attack
234 stars 60 forks source link

Suggestion - Video MTIM #5

Closed TheDarkFlame closed 7 years ago

TheDarkFlame commented 8 years ago

Instead of having video streams being routed from the MITM, instead redirect the video stream from one user to the next. Perhaps this is easier said than done, I don't have any javascript experience, so I'm unsure

ash47 commented 8 years ago

I spent a lot of time on this, I couldn't find any way to read / write to the video streams using flash, all I can do is basically say "use this webcam and stream it to the internet" or "take this stream and display it here", there isn't a low level API to do mitm with

TheDarkFlame commented 8 years ago

I think one would have to do some packet sniffing into the RTMP protocol if you wanted to do that, which would likely extend beyond the expertise of javascript... I remember reading somewhere that omegle uses a form of encryption in their packets, so that may be an issue... I suppose the best alternative would then be to use another program to stream that section of your screen

ash47 commented 8 years ago

Yes, I tried to find a nodejs module for that protocol a while back but didn't really have any luck because it's a flash specific protocol. On 12 Jul 2016 6:28 AM, "David Parker" notifications@github.com wrote:

I think one would have to do some packet sniffing into the RTMP protocol if you wanted to do that, which would likely extend beyond the expertise of javascript... I remember reading somewhere that omegle uses a form of encryption in their packets, so that may be an issue... I suppose the best alternative would then be to use another program to stream that section of your screen

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/ash47/OmegleMiddleMan/issues/5#issuecomment-231854418, or mute the thread https://github.com/notifications/unsubscribe/ADlKDmI_n0cCz8MXoOBde-fUDfn1YOnzks5qUqdkgaJpZM4JJvOA .

ash47 commented 8 years ago

I guess I'm a lot more experienced now vs when I last tried, in theory I can use the nodejs rtmp server module, then have my omegle client stream video to that, then have the server stream the data to omegle, in theory that should work, also means I can capture the webcam data of all users and push that back to another stream, aka man in the middle On 12 Jul 2016 9:01 AM, "Ash Fourtyseven" ash.fourtyseven@gmail.com wrote:

Yes, I tried to find a nodejs module for that protocol a while back but didn't really have any luck because it's a flash specific protocol. On 12 Jul 2016 6:28 AM, "David Parker" notifications@github.com wrote:

I think one would have to do some packet sniffing into the RTMP protocol if you wanted to do that, which would likely extend beyond the expertise of javascript... I remember reading somewhere that omegle uses a form of encryption in their packets, so that may be an issue... I suppose the best alternative would then be to use another program to stream that section of your screen

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/ash47/OmegleMiddleMan/issues/5#issuecomment-231854418, or mute the thread https://github.com/notifications/unsubscribe/ADlKDmI_n0cCz8MXoOBde-fUDfn1YOnzks5qUqdkgaJpZM4JJvOA .

ash47 commented 8 years ago

I had a deeper look, they are using the RTMFP, and not RTMP. There isn't any implementations of RTMFP clients in nodejs, so, without spending a huge amount of time reverse engineering, I can't really do this :/ big difference between RTMP and RTMFP :/

ash47 commented 8 years ago

So, here's the API I am dealing with:

http://help.adobe.com/en_US/FlashPlatform/reference/actionscript/3/flash/net/NetStream.html

appendBytes(bytes:ByteArray):void Passes a ByteArray into a NetStream for playout.

Is exactly what I need to push data, however, I can't see anything to read data from the netstream :/

TheDarkFlame commented 8 years ago

just going to dump these links here so they don't get lost...

ash47 commented 8 years ago

opps, hit enter by mistake XD none of those links were of much use :/

ash47 commented 7 years ago

Tried this, failed, the APIs simply are not there to perform this kind of attack, sad face.