https://github.com/lorenzodifuccia/youtubeprotobuf

BlackboxProtobuf x YouTube
https://github.com/lorenzodifuccia/youtubeprotobuf

Last synced: 21 days ago
JSON representation

BlackboxProtobuf x YouTube

• Host: GitHub
• URL: https://github.com/lorenzodifuccia/youtubeprotobuf
• Owner: lorenzodifuccia
• Created: 2024-12-04T00:16:23.000Z (23 days ago)
• Default Branch: main
• Last Pushed: 2024-12-04T14:18:37.000Z (22 days ago)
• Last Synced: 2024-12-04T15:23:31.783Z (22 days ago)
• Language: Python
• Homepage:
• Size: 3.91 KB
• Stars: 1
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# BlackboxProtobuf x YouTube

Network communications between YouTube{,Music,Creator} mobile apps and Google's backend are made using Protobuf, which increases the difficulty of analyzing them.  




However, apparently, appending `?alt=json` to the query string changes the API response encoding from Protobuf to JSON.  




This Burp extension uses [NCC Group's Blackbox Protobuf](https://github.com/nccgroup/blackboxprotobuf) library to decode Protobuf payloads, issues a `alt=json` request, and then map the JSON <-> Protobuf responses to derive type definition.  






## Installation

1. `git clone https://github.com/lorenzodifuccia/YoutubeProtobuf && cd YoutubeProtobuf`

2. `git submodule update --init --recursive`

3. Configure Jython and add `extender.py` in Burp Extensions.

## Usage

Right-click on a YouTube request > `Extensions` > `BlackboxProtobuf x YouTube` > `Send 'alt=json' request`  

If successful, a new Issue will be generated with the type definition to import in BlackboxProtobuf: