YouTube encrypted video there are multiple universal password can bypass the limit(wonderful vulnerability)-vulnerability warning-the black bar safety net

2017-02-28T00:00:00
ID MYHACK58:62201783850
Type myhack58
Reporter 佚名
Modified 2017-02-28T00:00:00

Description

YouTube encrypted Video, a plurality of universal password

Detailed description: As long as the Password box, enter the two English double quotation marks. For example: "" press the OK button to play all the encrypted videos.

Management added:

"" \ { } <> %% or a=a And other characters can bypass video password

Vulnerability to prove: http://v.youku.com/v_show/id_XMTMzMTI2OTUzNg==.html

http://v.youku.com/v_show/id_XMTM0NTcwODg1Ng==.html

http://v.youku.com/v_show/id_XMTM0NTM2NTk3Mg==.html

http://v.youku.com/v_show/id_XMTM0NTM2NTg4MA==.html

Repair solutions: There is a place to capture is the http://play. youku. com/play/get. the json? vid=XMTM0NTM2NTg4MA==&ct=10&ran=437

Manually fill in the pwd http://play.youku.com/play/get.json?vid=XMTM0NTM2NTg4MA==&ct=10&pwd=%22%22&ran=437

You can get a value stream_fileid this value is used to calculate ep.

These values do not speak, the key place is the pwd you can use the""Universal password.

The whole network of VIP video online free watch<http://tv.myhack58.com/>