wireshark cat package to download music

一、music for free

1.qq music

step1:use cmd(ipconfig) to get your computer's ip.

step2:open wireshark, select the net; then input in the selector:ip.addr == "your ip" and http.Begin to catch the packages.Then open qq music and play s song for free.Now you can see in the wireshark window that your operation has aroused something interesting.

step3:As we all know, the format of music includes mp3,mp4,flv,m4a.So one way to find where music file is is to search the file extension in the mode of "byte stream". You will soon find something like that:(Full request URI) 

http://wspeed.qq.com/w.cgi?appid=xxxxxx&releaseversion=xxxxxx&commandid=xxxxxx&resultcode=xxxxxx&touin=xxxxxx&tmcost=xxxxxx&frequency=xxxxxx&detail=xxxxxx,songid=xxxxxx.%20&rmd=xxxxxx. 

What is that?Your application for playing music!

You can either trace the TCP/HTTP stream.Then you'll find this:([Full request URI)

 http://dl.stream.qqmusic.qq.com/C400000fCzhV29mdvP.m4a?vkey=105F6377DD696D42CD27BBAEEE1CE88AFD68BC1D9E4DE342AC6A9B489F8A508FFDEB1777411439CD3B2A6AC08FCDF8D11C740CCEEE3593F6&guid=xxxxxx&uin=xxxxxx&fromtag=xxxxxx])

What is that?The music file(.m4a) that your PC have downloaded from the website!You can download it by simplying clicking it!(Actually, this is the very url for downloading music, so you can copy it to your browser to download it as well.)

Unluckily, it seems we cannot download paid music.The way you get access to paid music differs from that of music for free.To get paid music, maybe you send a request to a database storing user information to check whether you have the authority to listen to the music.So it's something quite difficult to solve the problem.Maybe I need to buy some of them first... 

2.wangyi cloud music

This time we go straight to paid music.

According to blog http://blog.csdn.net/real_neu/article/details/69663244, I use his/ker method and unforturnately, I failed.I met the same problem as qq music.However,when I use the website left in the blog, it still could be used.Note its format:

http://m8.music.126.net/20170407233726/7bcb1a38c8e959f677b58519ac8a2958/ymusic/9c2b/57dd/26dc/df6def971d6cdd160d347dcb6a1c18f4.mp3

Then I got an idea:I played an MV, hoping to catching something from it.This time,I caught this:

All right.It seems that something I tried above was useless.

Anyway,I find that you can use this to get music(for free):the token(?) you've used before + the music "IP"

For example, the "token" for JayZhou's fa_ru_xue(m8.music.126.net/20170407233726/7bcb1a38c8e959f677b58519ac8a2958) can be used to download gao_bai_qi_qiu as well!!(Actually, its true "token" is:m10.music.126.net/20170111192350/c18562ed0c8a15c318703e92ad12b5e7)

So it seems that the music "IP" is very important.

Then I did another experiment:I changed the singer to JJ, and I chose zui_chi_bi as the target song.Luckily, I successfully downloaded the music via the "token" of JayZhou's.

3.Using browser to download music

I use Google Chrome to do this.Open the website and press "F12", and you will see something like this:

Click the file and you'll see the player.

Download it please.

The methods mentioned above require that the URI are available to users.However, for the majority of time, hardly can you get access to it.

So there might be two ways to get them_(:з」∠)_.

One is to see how the website works via Brower's "F12".Sometimes maybe you'd better find the bugs in the website to get access to resources.

The other is to analyze the package you've got when visiting the webiste.WireShark is one of the tools that can be used to make it possible.

Maybe you will use gcc(linux) to join some packages which construct the mp3/mp4/flv file.

Besides, for some music that can't be seen or analyzed simply by the approaches mentioned above, try some software to record the music in real time.