My Random Blog

So I idle a lot and help out on a IRC channel called #linux-noob on Efnet when someone asked if they could grab all the mp3's from Puscifer. Me being a giant Maynard fan myself I decided to do it. So here are the steps I took to get the music.

From what I know the two tracks he has released.. He released for free. There is some live Tool and A Perfect Circle tracks there also that are pretty good so I took on the challenge.
So I use Linux but the way I figured out where the mp3s are you could do the similar thing in windows. So my first thought was to run a command called strings on the flash file. So I downloaded the file the following way

wget http://store.puscifer.com/puscifer.swf

Then I ran strings on the swf file

strings puscifer.swf

That basically returned nothing.. It wasn't like running strings on a compiled C/C++ file.. it got a ton of data like this

=YWAxhN
.q5{
cWl_
uR.k#k
}^x$D
}@uw\b
JT5e
`O]R
5'2z
?AGm
H?v
-F?CAg
C?En7
loTl
ECGm
cvHb
g^!1
$Nz$*

So nothing there you can get anything useful out of. So it got me thinking that Adobe just released a stand alone player for flash9. So I downloaded that and ran the flash file with that. I was using Wireshark to sniff the http traffic to see what URL it got the playlist from. So when I loaded up the flash file I got nothing on the sniffer and the playlist never loaded. So I guess there is some security check in there that it has to be on that same host that its grabbing the playlist for.

So then I got the good idea of setting up a vhost for store.puscifer.com. So first I added a entry in my /etc/hosts file that looks like this

127.0.0.1 store.puscifer.com

Then I created a vhost entry in apache that had something like this. I will not go into getting vhosts working in apache.. If you can't do it.. learn something

<VirtualHost *>
ServerAdmin webmaster@localhost
DocumentRoot /var/www/
ServerName store.puscifer.com
CustomLog /var/log/httpd/access.log combined
</VirtualHost>

So I put the flash file in /var/www/ and then I restarted firefox to make sure the dns cache is regenerated. Then I hit the following URL again

http://store.puscifer.com/puscifer.swf

Then in the /var/log/httpd/access.log I saw the following

127.0.0.1 - - [30/Oct/2006:16:03:19 -0500] "GET /music/playlist9.xspf HTTP/1.1" 404 344 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0" 127.0.0.1 - - [30/Oct/2006:16:03:19 -0500] "GET /puscifer1.flv HTTP/1.1" 404 337 "-" "Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"

BINGO! I got the playlist file. So then I removed the store.puscifer.com in my hosts file and then restarted firefox again and hit the following URL

http://store.puscifer.com/music/playlist9.xspf

There it is.. a XML file with paths to mp3 files.

I am pretty sure you can do this to almost any flash file that doesn't embed the music in the flash file itself. I'd like to hear of any other sites people may find that you could do this to

UPDATE
So its 11/2 and thanks for the comments.. You know I never figured to try liveheaders even though I had it loaded right in my browser.

For those with firefox2 you can find a version at http://phaistonian.pblogs.gr/files/3408-livehttpheaders-0.12.xpi

So I loaded liveheaders and there is was after some viewing

https://store.puscifer.com/music/playlist9.xspf

GET /music/playlist9.xspf HTTP/1.1
Host: store.puscifer.com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Cookie: cookie_test=please_accept_for_session

HTTP/1.x 200 OK
Date: Thu, 02 Nov 2006 14:30:27 GMT
Server: Apache/1.3.34 (Debian) mod_gzip/1.3.26.1a PHP/4.3.10-16 mod_ssl/2.8.25 OpenSSL/0.9.8a
Last-Modified: Sat, 28 Oct 2006 20:36:11 GMT

An even simpler method then I used.

So I was a long time Counterstrike player who broke the habit around 3 years ago. A few weeks ago people at my office were saying how we should setup a gaming server and Counterstrike got mentioned. We decided to play 1.6 since none of us have the video cards to play CS:S.

So I have setup a server in the 1.3 days for Counterstrike and it was easy to get around connecting in using an invalid CD key. You just removed the auth servers from the cfg file. I forget the filename but no one plays 1.3 anyway.

So this little howto will get you to setup a LAN type environment and not worry about having people use steam to auth. You can find on various places a NoSteam version of Counterstrike. This is great for office environments or if you are setting up a LAN event. You could do this and place the server on the Internet but there are so many cheaters they almost destroy the experience.

So first lets download all the needed files.

wget http://www.steampowered.com/download/hldsupdatetool.bin
wget http://www.cstrike.ro/cstrike_files/engine.v15.tgz

Now lets extract and use the update tool

chmod +x hldsupdatetool.bin
./hldsupdatetool.bin

Now lets run the download and update tool. You will probably have to run this command twice till you see a HLDS installation up to date

./steam -command update -game valve -dir .

Now lets install the counterstrike mod

./steam -command update -game cstrike -dir .

Ok now that the server is installed, lets install the cracked engine files

rm -rf engine_amd.so
rm -rf engine_i486.so
rm -rf engine_i686.so
tar xfvz engine.v15.tgz

Now in the same directory you are in you want to edit the following file ./cstrike/server.cfg and put the following contents in. Change what you feel needed

hostname "Server Name"
mp_autokick 0
mp_autocrosshair 0
mp_autoteambalance 0
mp_buytime 2
mp_consistency 1
mp_c4timer 35
mp_fadetoblack 0
mp_falldamage 0
mp_flashlight 1
mp_forcecamera 3
mp_forcechasecam 2
mp_friendlyfire 1
mp_freezetime 3
mp_fraglimit 0
mp_hostagepenalty 0
mp_limitteams 6
mp_logfile 1
mp_logmessages 1
mp_logdetail 3
mp_maxrounds 0
mp_playerid 0
mp_roundtime 3
mp_startmoney 800
mp_timelimit 35
mp_tkpunish 0
mp_winlimit 0
sv_aim 0
sv_airaccelerate 10
sv_airmove 1
sv_allowdownload 1
sv_clienttrace 1.0
sv_clipmode 0
sv_allowupload 1
sv_cheats 0
sv_gravity 800
sv_lan 1
sv_maxrate 7000
sv_maxspeed 320
sv_maxupdaterate 101
sys_ticrate 10000
decalfrequency 60
pausable 0
log on
decalfrequency 60
edgefriction 2
host_framerate 0
exec listip.cfg
exec banned.cfg
rcon_password yourpassword

Now we need to put it in unsecure mode. So edit ./cstrike/liblist.gam and change the the secure from a 1 to a 0

Now you can run the server

./hlds_run -game cstrike +ip you.ip.here +sv_lan 1 -nomaster +maxplayers 18 +map de_dust2

You should now be able to connect to it and have fun playing

So this little video I made will describe on how to use Cain & Abel to ARP poison a wireless network. It will then show you how you can get all the passwords from clients on the network. So watch and learn. This is one of the rare times I will do something like this in windows. This is the first part in the series and I hope to do more advanced stuff.

Learn to ARP poison

Here is a Xvid of the video to for the people that don't have flash8 installed

Learn to ARP poison (xvid version)