[binisce]

Hi security community,

I'm conducting a red team assessment for a video streaming platform and have reached a point where I need some community insights. Here's the situation:

What We've Achieved
Network Access: Successfully established TURN relay access to internal network infrastructure using legitimate credentials found during reconnaissance.

Network Mapping: Mapped internal sub net and identified ~20 nodes running standard services

Credential Leaks: Extracted multiple credentials from configuration files including:

Database passwords
AWS access keys (limited S3-only permissions)
Streaming server signing keys
L a r a v el application keys
Infrastructure Identification: Confirmed Ant Media Server deployment for Web R TC streaming with REST API at /rest/v2/.

The Objective
Access p.re - broadcast video content or stream metadata before public broadcast. The target uses a Web R TC - based streaming infrastructure with the following characteristics:

Ant Media Server for stream processing
DRM protection on output streams