[GhostyTongue]

Download: 

Hidden Content

You must register or login to view this content.

Thanks to a Hisense TV Vulnerability that you can just straight up using fiddler on and open any app and see the network by sniffing it.

[Not all but a portion of it]

And boom.

Samples Down Below:

Dictionaries.json

{     "data": {         "Dictionaries": [             {                 "createdDate": "2023-10-19T17:48:00.682607Z",                 "version": "267.0",                 "resourceKey": "accessibility",                 "entries_json": {                     "acceptable_credit_cards": "The following credit cards are accepted: {cards}",                     "account_informationbubble": "Information",                     "account_pageload": "On the Account screen.",                     "account_settings_email": "Change email. Your email is currently set to {current_email}.",                     "account_settings_password": "Change password",                     "addprofile_pageload": "On the Add profile screen. Add up to seven profiles to personalize your experience or select Done if finished.",

pod.json:

{     "application": {         "id": "",         "name": ""     },     "commonHeaders": {         "X-Application-Version": "{applicationVersion}",         "X-BAMSDK-Client-ID": "disney-svod-3d9324fc",         "X-BAMSDK-Platform": "{SDKPlatform}",         "X-BAMSDK-Version": "{SDKVersion}",         "X-DSS-Edge-Accept": "vnd.dss.edge+json; version=2"     },     "commonValues": {         "platformId": "hisense"     },     "logger": {},     "services": {         "account": {             "client": {                 "baseUrl": "https://disney.api.edge.bamgrid.com",                 "endpoints": {                     "createAccount": {                         "headers": {                             "Accept": "application/json; charset=utf-8",                             "Authorization": "Bearer {accessToken}",                             "Content-Type": "application/json; charset=utf-8"

graphql.json:

{     "data": {         "refreshToken": {             "activeSession": {                 "sessionId": "fc304a50-777b-11ee-8319-0242ac110009"             }         }     },     "extensions": {         "operation": {             "operationType": "mutation",             "operations": [                 {                     "operation": "refreshToken",                     "errorCode": null                 }             ]         },         "sdk": {             "token": {                 "accessToken": "there is one but won't share it in the sample"

pod2.json:

{     "mediaPlayer": {         "liveCompletePlaylists": {             "maxLiveRuntimeMs": 10800000         }     },     "oneTimePasscode": {         "showKeyboardOnLoad": false     },     "env": "prod",     "analytics": {         "adobe": {             "appMeasurement": {                 "rsid": "wdgdsvodbbd",                 "rsidName": "Disney SVOD - BBD Prod"             }         },         "sentry": {             "errorsToIgnore": {                 "StateStore#update": true,                 "Cannot read property 'currentInterstitial' of undefined": true,                 "Failed to execute 'getComputedStyle' on 'Window': parameter 1": true             },             "featureFlags": {                 "isSessionTrackingEnabled": true             },             "maxBreadcrumbs": 100,             "tracesSampleRate": 0.05,             "useUiFocusBreadcrumbs": true         }     },

paywall.json:

{     "skus": [         {             "campaign": {                 "voucherCode": "DISNEY_PURCHASE_VOCHR",                 "campaignCode": "DISNEY_PURCHASE_CMPGN"             },             "entitlements": [                 "DISNEY_PLUS",                 "disney_plus_sub:base"             ],             "groups": [                 "billed_monthly",                 "disney_monthly",                 "disneyplus_submgmt_products",                 "has_ads"             ],             "name": "Disney Plus Monthly - US - Web - With Ads",             "productType": "D2C",             "sku": "disney_plus_monthly_us_web_with_ads",             "offerId": "cd52b21c-6403-4de1-975c-b2609ae7b11e",             "subscription": {                 "sourceType": "D2C",                 "sourceProvider": "BAMTECH",                 "subscriptionPeriod": "MONTH"             },

[NetworkingWink]

I do not understand how this works but I will want to learn . Question dose anyone have a hacking course made for fiddler ?

[tidefan13]

Definitely very cool to see some internal files from Disney. Thanks for the leak