[GhostyTongue]

Download: 

Hidden Content

You must register or login to view this content.

Thanks to a Hisense TV Vulnerability that you can just straight up using fiddler on and open any app and see the network by sniffing it.

[Not all but a portion of it]

And boom.

Samples Down Below:

Dictionaries.json

{
    "data": {
        "Dictionaries": [
            {
                "createdDate": "2023-10-19T17:48:00.682607Z",
                "version": "267.0",
                "resourceKey": "accessibility",
                "entries_json": {
                    "acceptable_credit_cards": "The following credit cards are accepted: {cards}",
                    "account_informationbubble": "Information",
                    "account_pageload": "On the Account screen.",
                    "account_settings_email": "Change email. Your email is currently set to {current_email}.",
                    "account_settings_password": "Change password",
                    "addprofile_pageload": "On the Add profile screen. Add up to seven profiles to personalize your experience or select Done if finished.",

pod.json:

{
    "application": {
        "id": "",
        "name": ""
    },
    "commonHeaders": {
        "X-Application-Version": "{applicationVersion}",
        "X-BAMSDK-Client-ID": "disney-svod-3d9324fc",
        "X-BAMSDK-Platform": "{SDKPlatform}",
        "X-BAMSDK-Version": "{SDKVersion}",
        "X-DSS-Edge-Accept": "vnd.dss.edge+json; version=2"
    },
    "commonValues": {
        "platformId": "hisense"
    },
    "logger": {},
    "services": {
        "account": {
            "client": {
                "baseUrl": "https://disney.api.edge.bamgrid.com",
                "endpoints": {
                    "createAccount": {
                        "headers": {
                            "Accept": "application/json; charset=utf-8",
                            "Authorization": "Bearer {accessToken}",
                            "Content-Type": "application/json; charset=utf-8"

graphql.json:

{
    "data": {
        "refreshToken": {
            "activeSession": {
                "sessionId": "fc304a50-777b-11ee-8319-0242ac110009"
            }
        }
    },
    "extensions": {
        "operation": {
            "operationType": "mutation",
            "operations": [
                {
                    "operation": "refreshToken",
                    "errorCode": null
                }
            ]
        },
        "sdk": {
            "token": {
                "accessToken": "there is one but won't share it in the sample"

pod2.json:

{
    "mediaPlayer": {
        "liveCompletePlaylists": {
            "maxLiveRuntimeMs": 10800000
        }
    },
    "oneTimePasscode": {
        "showKeyboardOnLoad": false
    },
    "env": "prod",
    "analytics": {
        "adobe": {
            "appMeasurement": {
                "rsid": "wdgdsvodbbd",
                "rsidName": "Disney SVOD - BBD Prod"
            }
        },
        "sentry": {
            "errorsToIgnore": {
                "StateStore#update": true,
                "Cannot read property 'currentInterstitial' of undefined": true,
                "Failed to execute 'getComputedStyle' on 'Window': parameter 1": true
            },
            "featureFlags": {
                "isSessionTrackingEnabled": true
            },
            "maxBreadcrumbs": 100,
            "tracesSampleRate": 0.05,
            "useUiFocusBreadcrumbs": true
        }
    },

paywall.json:

{
    "skus": [
        {
            "campaign": {
                "voucherCode": "DISNEY_PURCHASE_VOCHR",
                "campaignCode": "DISNEY_PURCHASE_CMPGN"
            },
            "entitlements": [
                "DISNEY_PLUS",
                "disney_plus_sub:base"
            ],
            "groups": [
                "billed_monthly",
                "disney_monthly",
                "disneyplus_submgmt_products",
                "has_ads"
            ],
            "name": "Disney Plus Monthly - US - Web - With Ads",
            "productType": "D2C",
            "sku": "disney_plus_monthly_us_web_with_ads",
            "offerId": "cd52b21c-6403-4de1-975c-b2609ae7b11e",
            "subscription": {
                "sourceType": "D2C",
                "sourceProvider": "BAMTECH",
                "subscriptionPeriod": "MONTH"
            },

[NetworkingWink]

I do not understand how this works but I will want to learn . Question dose anyone have a hacking course made for fiddler ?

[tidefan13]

Definitely very cool to see some internal files from Disney. Thanks for the leak