Tunify.com web flash player

Hello, i've got a question :

Tunify.com is a website that provides a library of music to bar's club's that kind of thing that mixes them into each other fading into the next song etc etc.

NOW :

they feature a 7 day trail and after that you either  buy a license or make another account with different e-mail.

But :

when you login with a account that has done it's 7 day's trail , you can still see it logs in for a split second (you see the standard GUI etc ) but then show a message that my trail is over.

there must be a function just calling if i had my 7 day's , so if that could be disabled ?

or is that just bad programming and is the login controlled by server and grants access.

swf path : http://www.tunify.com/tunify/AristoPlayer_2010_07_27.swf (07/28/10)

trail over - account login :
name: tunifycation
pass : 502728

trail not ended account login :
name: 0051075
pass : 614061

i hope someone can find something on it (broken image removed)

,Greetz

Xtremegamer

That's the weirdest request we had in a while.. I have a look.

or is that just bad programming and is the login controlled by server and grants access.

That's not bad programming. Actually, I'm sure that it's controlled by server, since you need an Internet connection in order to log-in. And if you enter an invalid Username, it tells you that, which can't be defined in the .swf. There is no function like "Username XY = invalid".

Edit: I tried a douzen of things but nothing seems to work. Probably everything is controlled by the server.

This post was imported from an account that no longer exists!
Previous Name: phreneticus

ok , thanks for clearing that up (broken image removed)

,greetz

Xtremegamer

Hello all

here i am again with "great" news (broken image removed)

i've managed to find out most about tunify service :

the flash uses SOAP protocol to communicate to the axis2 server

because of some lazy admin i have access to the web admin of the axis server and can upload/stop/start services.

Available services
tunify_logging
Service EPR :
Service Description : tunify_logging
Service Status : Active
Available Operations

    * logClientLogging

Aristo-WS
Service EPR :
Service Description : Aristo-WS
Service Status : Active
Available Operations

    * createUser
    * getSubscriptionStatus
    * getSubscriptionStatusV1_1
    * getSongsOfPlaylist
    * userExists
    * resetSubscription
    * createUser2
    * getChangeableParameters
    * getSongsOfPlaylist2
    * getAllCategoriesV1_1
    * getMusicCollectionsByCategoryV1_1
    * loginViaCode
    * getAllPlaylists
    * getAllContexts
    * resetSubscriptionV1_1
    * getChangeableParametersV1_1
    * getAllPlaylistsV1_1
    * getAllContextsV1_1
    * getMusicCollectionsByCategory
    * getSongsOfContextV1_1
    * getSongsOfContext
    * getAllCategories
    * getSongsOfPlaylist2V1_1

Version
Service EPR :
Service Description : Version
Service Status : Active
Available Operations

    * getVersion

Aristo-Log
Service EPR :
Service Description : Aristo-Log
Service Status : Active
Available Operations

    * logSongActionV2_0
    * logSongPlayed
    * logSongAction

tunify2
Service EPR :
Service Description : tunify2
Service Status : Active
Available Operations

    * setPlayerLocked
    * getAudioFilesForCalendarItem
    * sendPassword
    * getCalendars
    * getUserCreatedMusicCollections
    * getAudioFileRemarks
    * savePlaylist
    * saveCalendar
    * getCalendarTemplates
    * changeAudioFileRemarkProperties
    * getMusicCollectionsByCategory
    * getMusicCollection
    * addAudioFilesToPlaylist
    * setUserPlaylistsSaveProperties
    * loginUser
    * getMusicCollectionsWithoutCategory
    * setLanguage
    * getUserInformation
    * getCalendar
    * getHttpUrlForAudioFile
    * addCategoryToMusicCollection
    * deleteCalendarItem
    * getAllCategories
    * setPopUpInfo
    * setListDuration
    * logoutUser
    * searchAudioFilesByValue
    * logAudioFileAction
    * setConfiguration
    * removeCategoryFromMusicCollection
    * getSongRequests
    * searchAudioFilesByAudioFile
    * saveCalendarTemplate
    * getCalendarTemplate
    * setStartMode
    * deleteCalendarTemplate
    * logAudioFileActions
    * setSelectionFields
    * setMusicCollectionProperties
    * setKeyboardMode
    * getAudioFilesForMusicCollection
    * getSuggestionsForAudioFiles
    * saveSongRequest
    * getSubscriptionInfo
    * getAudioFilesForContext
    * saveCalendarItem
    * saveAudioFileRemark
    * getMusicCollectionsWithoutPlaylistDetails
    * changeSongRequestProperties
    * getMusicCollections
    * deleteMusicCollection

i removed the server-adress to prevent abuse

so you see getHttpUrlForAudioFile , resetSubscriptionV1_1 look interesting

i don't need a lifetime of tunify (altho could be nice) i just need a way so get authenticate and can download the mp3's it streams.

so i've read a bit about SOAP and it seems you can manipulate what command the client sends to the server so instead of tun:getMusicCollections you can tell it to tun:CreateUser.

i do not care about all this all i want is how to let the flash player think to not play the mp3 but just fetch and give it to me.

as i go to the mp3 location itself i get an WSDL error what could mean i'm not authenticated.

so if any smart dev could find me a soap client that allows me to just connect to the server and send the command myself , i would be 1000x thankful !

also the client get's a response with an interesting parameter

<isAdmin>false</isAdmin>
i did not succeed to get this to work so anyone that can be sure to report back please !

tools i've used :
firefox
charles debugger proxy
sothink decompiler
brains

,Greetz

xtremegamer

i've also downloaded the service's source themselfs (broken image removed) so if anyone want to look on how it operate's in order to get the files just pm me

,Greetz

Xtremegamer

Holy bat shits necro man!

Wed Jul 28, 2010 12:36 pm
Wed Jan 26, 2011 7:06 am

2 days shy of 6 months...

Anyway, please don't double post.  There is an EDIT button for a reason.  (broken image removed)