No passwd in the GET request but passed in the json in hexadecimal

erkexzcx / stalkerhek

Stalker portal proxy server that allows sharing account on multiple STB boxes and play on VLC.

GNU General Public License v3.0

82 stars 52 forks source link

No passwd in the GET request but passed in the json in hexadecimal #27

Open mwahal opened 3 years ago

mwahal commented 3 years ago

I am using stbemu on firetv stick. I don't see any login/passwd being passed to the server in the GET request from the stbemu. I do see it in the response to get_profile GET request in form of json. The login name is in clear text but the passwd is in hexadecimal. Any idea how its getting decoded? I tried using the hex string as passwd but I get "User not exist or login-password mismatch".

Thanks Mudit