simsong / tcpflow

TCP/IP packet demultiplexer. Download from:
http://downloads.digitalcorpora.org/downloads/tcpflow/
GNU General Public License v3.0
1.68k stars 237 forks source link

Is there a way to find media file's HTTP link of non web browser app? #248

Open abdulbadii opened 2 years ago

abdulbadii commented 2 years ago

Is there a way and how to find media source file's HTTP link of non web browser application, esp. Telegram? Tried in Json format but only get so many decimal numbers after source & destination ip - port. Is there definitive steps to acquire that link, although if it will require extra utilitiy & work itd be fine. Thanks much

simsong commented 2 years ago

Hi. I do not understand what you mean by "media source file's HTTP link." Do you mean that you want to do a forensic analysis of a phone's memory and learn something about where it came from?

abdulbadii commented 2 years ago

media source file's HTTP link

that is media source file's link in HTTP URL format

To acquire non web browser application's sourcing to a media file in web backend/server

The real case appliation is: Telegram, how do we succesfully obtain its media source URL

simsong commented 2 years ago

I'm sorry. What do you mean by "media source file" ? Where is this file? How are you getting the IP packets? Could you please be more descriptive? Specifically:

  1. What data are you analyzing?
  2. How are you getting this data?
  3. What are you trying to extract?
  4. How are you trying to extract it?