that sounds like a very useful tip, and whilst you've got wireshark open you can check if the flash file does any extra data transfers like Daniel suggested could be the case. but even more interesting is that if you have the capture running when you browse to the website and load the flash file, through whatever brower you prefer, you can actually extract the files straight from the capture - in wireshark go
file ->export->objects->http and you should get a list of files that you can save to disk.. haven't tried it with flash files, but have pulled others from captures handy as well if you have a pcap file from some other application (like tcpdump) but want to extract files from it.. just load it in wireshark and the job is more than half done :) On Wed, Jun 10, 2009 at 9:25 PM, Morgan Storey <m...@morganstorey.com> wrote: > My tip is to fire up wireshark, filter on 80 then wget the flv if it is > flash video or swf... That way the obfuscated js has already run and > de-obfuscated and your browser does a http-get of the raw file and you can > simply wget away. > > > On Wed, Jun 10, 2009 at 8:52 PM, Daniel Pittman <dan...@rimspace.net> > wrote: > > > "Voytek Eymont" <li...@sbt.net.au> writes: > > > > > is there a way to wget an entire flash site ? > > > wget -m only gets me index and a .js > > > > No; flash is rich enough that it can obtain data from calculated URIs, > > making > > it impossible to know what all the data it uses is. > > > > Regards, > > Daniel > > -- > > SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ > > Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html > > > -- > SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ > Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html > -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
