saving a flash ebook from website

**nanotube** · January 8th, 2010

first: don't enter http/1.1 at the end into the url bar - that's just an indication of the protocol in wireshark. in the browser, that's taken care of by the initial http://.

second: there are possibly several little flash crapplets floating around in the page, so you have to figure out which one it is.

also, as i mentioned before, as far as hunting for the swf, it may easier to do that by examining the source. select the region of the webpage which contains the swf, right click -> view selection source, and see if you can figure it out. then if any other resources are used by the swf, that's when wireshark comes in handy.

**WaNaBePi** · January 9th, 2010

Ok no http/1.1

Section appears to be disabled on the page with the flash object so I can't use right click to view the source. When I right click after hitting control+a or shift and arrow keys or click and drag (to select all, or any thing) the right click context menu I get is "settings..." and "about adobe flash player 10...". No view source or anything like it, is there a way to enable this even though the page does not allow this?

There seems to be .xml and .swf working together to make the page. can I make them combine some how to see the page ex:
/ebooks/zumintro6/data/xml/zumdahl/0091.xml
/ebooks/zumintro6/data/swf/zumdahl_rects/0091.swf

Both of those above lines(packets) show up.

Once I did manage to get the search feature from the page to show up, but it did not work, and did not look the way is was supposed to. I have not been able to repeat that again though.

Code:

This XML file does not appear to have any style information associated with it. The document tree is shown below.
      
−
<page id="">
<map name="Map" id="Map"/>
</page>

I get he above if I put in "http://img.webassign.net/ebooks/zumintro6/data/xml/zumdahl/0091.xml" in firefox.

Code:

1320	726.756744	192.168.1.66	128.109.135.22	HTTP	GET /ebooks/zumintro6/data/xml/zumdahl/0094.xml HTTP/1.1 

1321	726.762204	128.109.135.22	192.168.1.66	TCP	http > 55942 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=3 TSV=356186225 TSER=1698506

1322	726.762237	192.168.1.66	128.109.135.22	TCP	55942 > http [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=1698531 TSER=356186225

1323	726.762307	192.168.1.66	128.109.135.22	HTTP	GET /ebooks/zumintro6/data/swf/zumdahl_rects/0094.swf HTTP/1.1 

1324	726.906202	128.109.135.22	192.168.1.66	TCP	[TCP Previous segment lost] http > 55941 [FIN, ACK] Seq=385 Ack=528 Win=66608 Len=0 TSV=2603375534 TSER=1698530

1325	726.906244	192.168.1.66	128.109.135.22	TCP	[TCP Dup ACK 1320#1] 55941 > http [ACK] Seq=528 Ack=1 Win=5888 Len=0 TSV=1698567 TSER=2603375385 SLE=385 SRE=386

1326	726.912099	128.109.135.22	192.168.1.66	HTTP/XML	[TCP Retransmission] HTTP/1.1 200 OK

The above is a string mentioning what I think is the useful info maybe you can inform me as to how packets 1326, 1325, 1324, 1322, 1321 are of some use, if at all. Should I look for other things besides flash or .swf? what are some key things to look for in wireshark?

Code:

1450	1284.589670	192.168.1.66	209.190.164.116	HTTP	POST /ebooksearch/cengage_calsearch HTTP/1.1  (application/x-www-form-urlencoded)

The last word in that string is "urlencoded" is there a way to decode? seems like that may be necessary.

Thank you.

**nanotube** · January 10th, 2010

Originally Posted by WaNaBePi

Section appears to be disabled on the page with the flash object so I can't use right click to view the source. When I right click after hitting control+a or shift and arrow keys or click and drag (to select all, or any thing) the right click context menu I get is "settings..." and "about adobe flash player 10...". No view source or anything like it, is there a way to enable this even though the page does not allow this?

you have to click outside of the flash object to see the usual firefox menu. if the whole page is one big flash object... then you can't get the context menu. you can do page -> view page source from the menu, though...

There seems to be .xml and .swf working together to make the page. can I make them combine some how to see the page ex:
/ebooks/zumintro6/data/xml/zumdahl/0091.xml
/ebooks/zumintro6/data/swf/zumdahl_rects/0091.swf

Both of those above lines(packets) show up.

that's encouraging...

Code:

This XML file does not appear to have any style information associated with it. The document tree is shown below.
      
−
<page id="">
<map name="Map" id="Map"/>
</page>

I get he above if I put in "http://img.webassign.net/ebooks/zumintro6/data/xml/zumdahl/0091.xml" in firefox.

hrm, just about empty...

Code:

1320	726.756744	192.168.1.66	128.109.135.22	HTTP	GET /ebooks/zumintro6/data/xml/zumdahl/0094.xml HTTP/1.1 

1321	726.762204	128.109.135.22	192.168.1.66	TCP	http > 55942 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 WS=3 TSV=356186225 TSER=1698506

1322	726.762237	192.168.1.66	128.109.135.22	TCP	55942 > http [ACK] Seq=1 Ack=1 Win=5888 Len=0 TSV=1698531 TSER=356186225

1323	726.762307	192.168.1.66	128.109.135.22	HTTP	GET /ebooks/zumintro6/data/swf/zumdahl_rects/0094.swf HTTP/1.1 

1324	726.906202	128.109.135.22	192.168.1.66	TCP	[TCP Previous segment lost] http > 55941 [FIN, ACK] Seq=385 Ack=528 Win=66608 Len=0 TSV=2603375534 TSER=1698530

1325	726.906244	192.168.1.66	128.109.135.22	TCP	[TCP Dup ACK 1320#1] 55941 > http [ACK] Seq=528 Ack=1 Win=5888 Len=0 TSV=1698567 TSER=2603375385 SLE=385 SRE=386

1326	726.912099	128.109.135.22	192.168.1.66	HTTP/XML	[TCP Retransmission] HTTP/1.1 200 OK

The above is a string mentioning what I think is the useful info maybe you can inform me as to how packets 1326, 1325, 1324, 1322, 1321 are of some use, if at all.

no those other packets are useless for your purposes...

Should I look for other things besides flash or .swf? what are some key things to look for in wireshark?

well the swf object may be getting info from any type of file... so it's hard to say specifically. usually there's an xml, which further specifies the resources like jpgs etc... but it could use them directly as well...

Code:

1450	1284.589670	192.168.1.66	209.190.164.116	HTTP	POST /ebooksearch/cengage_calsearch HTTP/1.1  (application/x-www-form-urlencoded)

The last word in that string is "urlencoded" is there a way to decode? seems like that may be necessary.

that's just the mime type... don't worry about it.

**WaNaBePi** · January 12th, 2010

Sorry for being a newb.

Code:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html dir="ltr">
<head>
<title>Introductory Chemistry: A Foundation</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
    html, body, div, iframe { margin:0; padding:0; height:100%; }
    iframe { display:block; width:100%; border:none; }
</style>
<script type='text/javascript' src='/wastatic/lib/js/mootools-1.2.2.js'></script>
<script type='text/javascript' src='/wastatic/common/js/ebookcontent.js'></script>
</head>
<body>
<iframe src="http://img.webassign.net/ebooks/zumintro6/toc.html?page="></iframe>
</body>

</html>

So that is the page source info... It's written in java?

So can I get the java layout some how?...When you said it would be a "custom job"...I'm basically writing(creating) a web page the quick and dirty way... it just hit me...?

Thank you so much for helping, ha well teaching me, thank you.

**nanotube** · January 12th, 2010

Originally Posted by WaNaBePi

Sorry for being a newb.

Code:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html dir="ltr">
<head>
<title>Introductory Chemistry: A Foundation</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css">
    html, body, div, iframe { margin:0; padding:0; height:100%; }
    iframe { display:block; width:100%; border:none; }
</style>
<script type='text/javascript' src='/wastatic/lib/js/mootools-1.2.2.js'></script>
<script type='text/javascript' src='/wastatic/common/js/ebookcontent.js'></script>
</head>
<body>
<iframe src="http://img.webassign.net/ebooks/zumintro6/toc.html?page="></iframe>
</body>

</html>

So that is the page source info... It's written in java?

So can I get the java layout some how?...When you said it would be a "custom job"...I'm basically writing(creating) a web page the quick and dirty way... it just hit me...?

Thank you so much for helping, ha well teaching me, thank you.

well, a large portion of it is probably written in javascript (not java - different language!). mootools is a javascript toolkit - won't find anything useful there. but ebookcontent.js looks like it could be helpful.

also look at the content of the iframe (by viewing 'view frame source' if you can find a place to right-click, or by going to the frame target directly then viewing source)

**WaNaBePi** · January 15th, 2010

http://img.webassign.net/ebooks/zumi...oc.html?page=7

http://img.webassign.net/ebooks/zumi...a9465d9e643496

(with unique cookies included, that seems to genertate a new string like:"..UserPass=d35d3ac41177376469a9465d9e643496" for each login)

Yields me page 7 of my book with full functionality! As long as im logged in

...logging in and out acts as an on/off switch. I can "save page as" in this form but I get a folder containing ebook_.js, flashobject.js, main_ceng.swf, and the file toc.html..how do i combine them?

I have what I need I think, I just need a way to make it think its connected, or do i simply have to navigate to every page, then save cause the pages I go to(in the ebook) stick with even if logged out(which i would take a lot of pleasure in doing at this point)?

So I guess wire shark wasn't needed?

**WaNaBePi** · January 18th, 2010

nanotube, anybody???

**WaNaBePi** · January 19th, 2010

Please someone help me. I'm so close I can feel it, I just need some confirmations.

**WaNaBePi** · January 24th, 2010

Can someone help me solve this, please?

**nanotube** · January 25th, 2010

hey, sorry, i'm just leaving this for you to poke around in by yourself.

without having the site and the code in front of me, it's like trying to perform surgery while blindfolded.

i've given you all the 'generic tips' i had, now it's up to you to see if you can figure it out....