I am not good at writing scripts so I dont know if this is possible but it would be nice if someone could write a script to download the movies on www.surfthechannel.com

I sure hope that someone will do this.

Sorry for my english, it isnt so good

There are extensions / programs to extract embedded flash videos.

orbit downloader
http://www.orbitdownloader.com/Download-All-in-...

magic's downloader
https://addons.mozilla.org/en-US/firefox/addon/...

haven't tested these, use at your own will

thx i will take a look at them

the where good on other sites but unfortunately the didnt work on surfthechannel.com

Though I really hate low quality video, that site isn't too bad, nice that way they have everything organized. I was able to find Dexter with no trouble.

Using LiveHTTPHeaders I was able to get the URL of the video and download it with my download manager, however I had to enter a file name to save the file as. And the video was 16/9 and the only flv player that would let me change the aspect ratio was Video Lan.

With the above info a scriptwright should be able to figure out how to create a link, or there may already be one that works. Not really interested myself, more interested in HD.

If someone is interested to create a script here some other informations:

First, using wireshark I found the url used from the flash player to download the video, here an example:

http://www5.surfthechannel.com/flv/ODk4NDY1NDY1...

Second in the flashvars of the embed tag you will find a base64 encoded parameter named input_str, here an example

input_str=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

decoding it with a base64 decoder you get the following string:

645776324157890234578092347081235708923147809123789afds789035278903217844783flv1282318123823454657362132475677354412348970as78979fdas7890789014327890a7890sdfa7089as70df70flv132741209384123894aHR0cDovL3d3dzUuc3VyZnRoZWNoYW5uZWwuY29tL2Zsdi9PRGs0TkRZMU5EWTFOREV6TVRjNU9EUTJOVFF4TmpVME5qVTBPVGczT1RnME5qVTBNVFk0TkRrNE56UTVPRGM154675644536345789043789053467089523478901234789454678342324flv3874123902arsdf34127839041234TnprMk5EWTFOREUyTlRReE5qVTBPVGczWVVoU01HTkViM1pNTWpGc1dqSkdNbUZYVW14aWVUVnFNalkxTmpRMk5UUXhOVEUyTlRRMk5UUTBOalV4TmpVeE5qZzNORGcwTmpV645776324157890234578092347081235708923147809123789afds789035278903217844783flv128231812382345eE1UWTFORGs0TkRjNU9EUXpNakV6WWpJd2RsQXpXVGxWYkd0M1RsVktXRko2V2xSU1ZrSnZPRFF4TWpNNU1EWTBOalUwTmpVME5UWTBPVGczT1RnMk5ERTBNVGczTkRrNE5E4657362132475677354412348970as78979fdas7890789014327890a7890sdfa7089as70df70flv132741209384123894WTFNVFl4TkRZME9EZ3dPVGd3T1Rnd09USXpPR1JJVW5kUGFUaDJZbGRXYmxsWVduQmFSMVoyVEcxT2RtSlRPQzlrYWpGVFYxUkJNVkZzWkVoT2JFNUdWVUU5UFE9PS5mbHY=

Now if you split it as follow:

645776324157890234578092347081235708923147809123789afds789035278903217844783flv1282318123823454657362132475677354412348970as78979fdas7890789014327890a7890sdfa7089as70df70flv132741209384123894

aHR0cDovL3d3dzUuc3VyZnRoZWNoYW5uZWwuY29tL2Zsdi9PRGs0TkRZMU5EWTFOREV6TVRjNU9EUTJOVFF4TmpVME5qVTBPVGczT1RnME5qVTBNVFk0TkRrNE56UTVPRGM1

54675644536345789043789053467089523478901234789454678342324flv3874123902arsdf34127839041234

TnprMk5EWTFOREUyTlRReE5qVTBPVGczWVVoU01HTkViM1pNTWpGc1dqSkdNbUZYVW14aWVUVnFNalkxTmpRMk5UUXhOVEUyTlRRMk5UUTBOalV4TmpVeE5qZzNORGcwTmpV

645776324157890234578092347081235708923147809123789afds789035278903217844783flv128231812382345

eE1UWTFORGs0TkRjNU9EUXpNakV6WWpJd2RsQXpXVGxWYkd0M1RsVktXRko2V2xSU1ZrSnZPRFF4TWpNNU1EWTBOalUwTmpVME5UWTBPVGczT1RnMk5ERTBNVGczTkRrNE5E

4657362132475677354412348970as78979fdas7890789014327890a7890sdfa7089as70df70flv132741209384123894

WTFNVFl4TkRZME9EZ3dPVGd3T1Rnd09USXpPR1JJVW5kUGFUaDJZbGRXYmxsWVduQmFSMVoyVEcxT2RtSlRPQzlrYWpGVFYxUkJNVkZzWkVoT2JFNUdWVUU5UFE9PS5mbHY=

and join the parts with almost only chars into the following string:

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

and you decode it once again with a base64 decoder you get the following url:

http://www5.surfthechannel.com/flv/ODk4NDY1NDY1...

Wow is done, oh but you can continue too, decode once again with base 64 the filename:

ODk4NDY1NDY1NDEzMTc5ODQ2NTQxNjU0NjU0OTg3OTg0NjU0MTY4NDk4NzQ5ODc5Nzk2NDY1NDE2NTQxNjU0OTg3YUhSMGNEb3ZMMjFsWjJGMmFXUmxieTVqMjY1NjQ2NTQxNTE2NTQ2NTQ0NjUxNjUxNjg3NDg0NjUxMTY1NDk4NDc5ODQzMjEzYjIwdlAzWTlVbGt3TlVKWFJ6WlRSVkJvODQxMjM5MDY0NjU0NjU0NTY0OTg3OTg2NDE0MTg3NDk4NDY1MTYxNDY0ODgwOTgwOTgwOTIzOGRIUndPaTh2YldWbllYWnBaR1Z2TG1OdmJTOC9kajFTV1RBMVFsZEhObE5GVUE9PQ==

and you will get the following string:

898465465413179846541654654987984654168498749879796465416541654987aHR0cDovL21lZ2F2aWRlby5j265646541516546544651651687484651165498479843213b20vP3Y9UlkwNUJXRzZTRVBo8412390646546545649879864141874984651614648809809809238dHRwOi8vbWVnYXZpZGVvLmNvbS8/dj1SWTA1QldHNlNFUA==

split it as follow:

898465465413179846541654654987984654168498749879796465416541654987

aHR0cDovL21lZ2F2aWRlby5j

265646541516546544651651687484651165498479843213

b20vP3Y9UlkwNUJXRzZTRVBo

8412390646546545649879864141874984651614648809809809238

dHRwOi8vbWVnYXZpZGVvLmNvbS8/dj1SWTA1QldHNlNFUA==

join again only the parts with almost only chars in the following string:

aHR0cDovL21lZ2F2aWRlby5jb20vP3Y9UlkwNUJXRzZTRVBodHRwOi8vbWVnYXZpZGVvLmNvbS8/dj1SWTA1QldHNlNFUA==

and decode it for the last time with the base64 decoder, and you get this:

http://megavideo.com/?v=RY05BWG6SEPhttp://megav...

but this last link doesn't work, but is not very important the first link is used from the flash player to download the video and it works very good also in the location bar.

The rule to split the string? I don't know it, if someone want to write a script must find it out.

OMFG!!! You, sir, are teh winnar!

Aquilax, I think they're using some kind of proprietary (probably crappy) encryption. Something homebrewed. I notice that there are three important variables in the flash_vars: input_str, uidpass, and uidpass2. All three are generated per-request.

I think that uidpass and uidpass2 are used to decode input_str, and the result is passed to getlink.surfthechannel.com for a final decoding and redirect to the terminal resource. That resource link looks something like this: http://player0002.tudou.com/flv/003/453/129/345...

Some parts of the base64-decoded string are invariant across requests, meaning the cipher they are using is quite weak. Most likely they are generated a string using the uidpass(2) strings and XORing it against the input_str, probably in binary form.

As it stands, however, it's easier for me to use Firebug's Net tab to catch the FLV link than to bother breaking their crappy decryption.

Hi McCormak, saying that a base64 encoding is an encryption it's exaggerating, surely who has wrote that system has no idea of cryptography and has tought that a base64 encoding was a sure way to hide informations, I was only a little bit surprise that that genius has had the idea of cutting the base 64 encoded string in pieces and add some "noisy" between.

Try this java function out. It works great! enjoy.

/*
 * PLASE REFENCE http://www.source-code.biz/snippets/java/Base64Coder.java.txt FOR Base64Coder
 */
	public static String decodeSurfTheChannel(String input_str)
	{
		String s = "";
		String output_str = "";
		boolean validLine = false;

		input_str = Base64Coder.decodeString(input_str);

		for (int i=0; i<=(input_str.length()-152); i++)
		{
			s = input_str.substring(i, (i+152));
			s = Base64Coder.decodeString(s);

			validLine = true;
			for (int x=0; x<s.length(); x++)
			{
				int y = s.charAt(x);
				if ((y<45)||(y>122))
				{
					validLine = false;
				}
			}

			if (validLine)
			{
				output_str += s;
			}
		}

		return output_str;
	}

Hi Bob, nice job, I haven't test your function, but to convert to and from base64 you have two native function on the window object: window.atob, window.btoa
So you don't need to use references :)

Aquilax: I downloaded and decompiled their SWF. There are three "pass" keys. Here's the algorithm:

d = input_str;
d = atob(d);
d = d.split(pass1).join('');
d = d.split(pass2).join('');
d = d.split(pass3).join('');
d = atob(d);

and then d is the download URL.

Edit 1: I've created a script, and it works... but only on that video. I think they might be generating the .swf files per-request?

Edit 2: It's the playerXX.swf. My script only works for player10, not player14. They have different keys, and I think that the uidpass variables are used to choose between them.

Edit 3: I can't find where uidpass and uidpass2 are being read.

Edit 4: Nope, the player number is determined in flashvars, specifically, the value of xmlnum in the config key.

Edit 5: My script knows the keys for 10, 14, and 15. Here's the current version: http://lab.brainonfire.net/drop/surfthechannel-...

Edit 6: I've filled out the key database to include players 1-15. Uploaded here: http://userscripts.org/scripts/show/28065

Great job Tim, I have only two suggestions: first I would not remove the player, normally one decide after viewing the video if download it or not, second I would not use an alert message if it doesn't find the keys but just add an warning message instead of the download link.

Aquilax: Yeah, that's why it's only at version 0.5. :-P I'll work up something with a decent user interface.

By the way, got any ideas on how to make the script more generalized? I suppose I could set up a server that automatically decompiles and caches player keys upon request... :-)

Edit: New version is up. Haven't tested it on unknown player IDs yet, but it should put a link in the sidebar that points to the userscript page, along with an error message.

Edit 2: If anyone else wants to use the Flare swf decompiler to grab the keys for IDs greater than 16, be my guest. :-)

@Tim, where is it in the actionscript that shows this? I used Flare and Sothink SWF Decompiler and wasn't able to find it.

Specifically this:
d = input_str;
d = atob(d);
d = d.split(pass1).join('');
d = d.split(pass2).join('');
d = d.split(pass3).join('');
d = atob(d);

I'd like to help, but can you point me to which line in the .flr file you saw that.

Edit:
This is what I got from Flare:
http://pastebin.com/mf1041c9

Sorry about that, PegasusX -- that was just some semi-pseudocode I wrote. (It's almost functional Javascript.)

Actually, what you need to decompile are the playerX.swf files. (I've done player1 through player15 -- I don't know how far up it goes.) Inside, you'll find that split and join stuff. I don't have a decompiled file on hand, though.

Sorry to sound like a newbie again, but I did a Live HTTP Headers on a video on Surfthechannel and it didn't show any other swf file besides flvplayer_elite.swf.
Whats the URLs like for the playerX.swf?

It's probably already cached. For it to show up in LiveHTTPHeaders you'd need to clear the cache.

I *highly* recommend using FireBug instead, and clicking on its Net tab, then the Flash filter.

Unfortunately Firebug is FF3 compatible, but I found HttpFox and its better, it detected it without clearing the cache. Firebug looks like exactly what I need though, it would replace like 5 of my other plugins, I'll definitely be installing that in the near future.
Thanks

Yes a keys-serve can be a solution but if you do it for all the keys you generate only a big useless traffic.
Now look at this mechanic: If a script doesn't know the key it posts the link to a server that download the flw, decompiles it, extracts the key, generates a new surfthechannel script file with the missing key and publish it on us.org, and all this in few seconds, the script on the other side tells the user that a new version is available and to install it.

I like the way you think, Aquilax. :-)

However, I don't know how to programmatically post a script to userscripts.org -- is there an API I don't know about? The rest I know how to do, and I have the resources to do it.

cURL is one option. /scripts/edit_src/xxx 's action is /scripts/update_src/xxx

Is not very difficult to programmatically post a new script, first you need a function to do some networking, an http post request, than use it to do two post, the first to login into us.org and the second to post the new script, the urls are fixed and hopefully the form input names won't change for a while. In which language do you want to code the server?

The hard way, huh? *sigh* I suppose I could do that, too. (I was hoping for an API.)

I'm most comfortable with PHP, but I need to learn Python. That could be fun!

Hey Tim was you expecting an API for us.org? It isn't google ;)
But perhaps you can ask for a webservice, I don't know how much they are supported in scripting languages like php, because it is at least 10 years that I don't use it any more and I never used python, but they are very good supported in other languages like java, c++ and .net.
But if you search the web you will find at least 100 examples of functions to make a post request, you have only to copy paste one of them and get the parameters of the login form and of the script submitting form.