1080p on cine.ar

[abacaxi]

Hi everyone,
With some help from here, we got an easy way to download from cine.ar. And with this we get the supposed best resolution 720p.
(through convert.php/...m3u8) and thousand thanks for that.


[Attachment 81702 - Click to enlarge]

But apparently, the stream in 1080p is existing even if it's not visible by the online player.
(Because at least 2 videos have been found from them in 1080p and not streamcast, proper download confirmed)

Does someone see a way to get it please ? Can anyone confirm it ?

example :

https://play.cine.ar/INCAA/produccion/5169

just need free account.

[LZAA]

Just need access.

[2nHxWW6GkN1l916N3ayz8HQoi]

(Because at least 2 videos have been found from them in 1080p and not streamcast, proper download confirmed)

Were those found videos available in 1080p in browser?

Edit: I think I may have found a possible formula based on OP's video

NAME="240p (100k)",RESOLUTION=428x240,BANDWIDTH=260000
b260000_t64MjQwcCAoMTAwayk
NAME="240p (200k)",RESOLUTION=428x240,BANDWIDTH=360000
b360000_t64MjQwcCAoMjAwayk
NAME="270p (350k)",RESOLUTION=480x270,BANDWIDTH=510000
b510000_t64MjcwcCAoMzUwayk
NAME="360p (650k)",RESOLUTION=640x360,BANDWIDTH=810000
b810000_t64MzYwcCAoNjUwayk
NAME="480p (1050k)",RESOLUTION=854x480,BANDWIDTH=1242000
b1242000_t64NDgwcCAoMTA1MGsp
NAME="600p (1600k)",RESOLUTION=1068x600,BANDWIDTH=1792000
b1792000_t64NjAwcCAoMTYwMGsp
NAME="720p (2350k)",RESOLUTION=1280x720,BANDWIDTH=2542000
b2542000_t64NzIwcCAoMjM1MGsp
NAME="???",RESOLUTION=1920x1080,BANDWIDTH=???
b???_t64???

b<bandwitdh value>_t64<name value base64 encoded>

I took the m3u8 with all the resolutions, 240p -> 720p. For each of them I took the link of the first fragment. They are all identical, across all resolutions, except for a small section. That section is based on bandwidth and some base64 encoding of a name value. If you could deduce those for 1080p, you could attempt to download it.

No idea if it's possible though. Maybe there's a smarter trick around.

[aqzs]

Just need access.

Create an account


[Attachment 81708 - Click to enlarge]
Debugger doesn't even block you

The manifest url come from this function embeded in 'https://player.cine.ar/odeon/?' :

function _manifestUri_() {
    x = '8bexXPN2BQvbt2GMKvRLpM8uTsaZ8GkyEw0o7Dz9AZiP3VpNf_LPslHQyOs3tk91ZVn7bxJa9SP3qzvHghnUmKQ0W8536zrCpyz8ekD0sFVoe8bPjVLS1eGbJzsG80UKkzlgFYaWJsdqv3xCb4GcpPSO5AUeis1is9rFqAdG71JmF0Vr4S3PVNe_WPoGXK-_sJggk-i=H_Z3NLe3aXOwZWZ3jSceQ2-dj&3fcV5O6GYTAMQdYNfVAZ0fnjviKfx7GyBwu2oh5A6xJYNlpRKfMa4Akk3CShKq2TKEk6NUMecnc-wvb-feL1gUJIPopDD_cWo4-kpJpeeEumj/soSXb7F7ml7tS2oIIULQBJwWMj0xtunwUfMLX_kGRuHCIqtomWllAwwVFfzS33hHQEayjFTipTkX5Xdi7cPRLhIiti7Ssk0naRQX-DivsqBgXsQKOas1y0J_6j=mzAYcy10sKWU_FgeOqFLuTTrZTBcc3wDPSYjhpxP-QSrU8F9RoMPIWqi0U9UISboWbf2XbNxo23IzjZq6gYfhtqMSRuaZeQ8VeXqkKC21i4cDlbIaAOBsQQljCAVqKjzP7txB0fyKGK3_EWTeMTtSvNaARtbQKLUjtef7VfUfAxKS45HPAUnaJu2xIS8kb8a2m9JTphi9X1QMGGbNXwT56zSBEV4MJ0qxR8zYGnRgilkKK_dAeawc_wlAISEn_7yg-3OdRMqOPEkvCSMc?-jMvf6Wod_J7TyprhAqnkXETX';
    return '' + x[298] + x[383] + x[248] + x[727] + x[603] + x[748] + x[424] + x[335] + x[732] + x[11] + x[458] + x[329] + x[268] + x[259] + x[677] + x[257] + x[637] + x[104] + x[695] + x[131] + x[561] + x[699] + x[516] + x[485] + x[414] + x[707] + x[698] + x[100] + x[115] + x[25] + x[746] + x[87] + x[212] + x[325] + x[125] + x[71] + x[606] + x[313] + x[739] + x[267] + x[43] + x[548] + x[405] + x[753] + x[328] + x[599] + x[422] + x[12] + x[717] + x[301] + x[251] + x[370] + x[586] + x[34] + x[413] + x[28] + x[62] + x[663] + x[204] + x[352] + x[312] + x[486] + x[633] + x[749] + x[429] + x[53] + x[408] + x[273] + x[88] + x[522] + x[145] + x[507] + x[475] + x[307] + x[444] + x[247] + x[21] + x[128] + x[613] + x[141] + x[189] + x[570] + x[348] + x[337] + x[592] + x[624] + x[381] + x[172] + x[217] + x[341] + x[520] + x[652] + x[512] + x[656] + x[82] + x[657] + x[169] + x[412] + x[729] + x[609] + x[751] + x[466] + x[755] + x[614] + x[510] + x[620] + x[139] + x[308] + x[108] + x[501] + x[176] + x[432] + x[356] + x[284] + x[584] + x[594] + x[462] + x[60] + x[704] + x[109] + x[165] + x[688] + x[7] + x[138] + x[643] + x[363] + x[147] + x[225] + x[20] + x[199] + x[182] + x[327] + x[669] + x[589] + x[404] + x[451] + x[549] + x[587] + x[508] + x[410] + x[581] + x[434] + x[398] + x[757] + x[99] + x[690] + x[291] + x[653] + x[52] + x[359] + x[196] + x[644] + x[525] + x[181] + x[285] + x[107] + x[575] + x[715] + x[607] + x[597] + x[735] + x[95] + x[37] + x[602] + x[238] + x[736] + x[675] + x[454] + x[574] + x[354] + x[553] + x[683] + x[529] + x[433] + x[618] + x[274] + x[521] + x[264] + x[517] + x[117] + x[347] + x[679] + x[39] + x[365] + x[167] + x[559] + x[30] + x[734] + x[96] + x[242] + x[689] + x[228] + x[35] + x[483] + x[184] + x[218] + x[565] + x[64] + x[752] + x[621] + x[701] + x[303] + x[40] + x[569] + x[426] + x[288] + x[393] + x[324] + x[703] + x[319] + x[472] + x[188] + x[275] + x[26] + x[33] + x[159] + x[502] + x[316] + x[459] + x[756] + x[531] + x[8] + x[4] + x[171] + x[533] + x[195] + x[626] + x[518] + x[369] + x[90] + x[305] + x[42] + x[77] + x[435] + x[279] + x[280] + x[571] + x[731] + x[528] + x[498] + x[79] + x[634] + x[83] + x[118] + x[333] + x[572] + x[376] + x[155] + x[723] + x[560] + x[490] + x[659] + x[235] + x[174] + x[45] + x[126] + x[558] + x[310] + x[394] + x[456] + x[250] + x[636] + x[271] + x[344] + x[98] + x[223] + x[173] + x[655] + x[143] + x[465] + x[46] + x[124] + x[685] + x[600] + x[474] + x[209] + x[93] + x[72] + x[152] + x[144] + x[702] + x[377] + x[744] + x[119] + x[69] + x[391] + x[660] + x[582] + x[318] + x[493] + x[194] + x[686] + x[480] + x[428] + x[708] + x[24] + x[478] + x[390] + x[278] + x[706] + x[101] + x[573] + x[743] + x[338] + x[375] + x[14] + x[214] + x[567] + x[523] + x[27] + x[406] + x[551] + x[227] + x[29] + x[378] + x[538] + x[170] + x[166] + x[441] + x[557] + x[712] + x[479] + x[457] + x[615] + x[47] + x[331] + x[59] + x[372] + x[106] + x[505] + x[54] + x[576] + x[666] + x[380] + x[353] + x[163] + x[436] + x[206] + x[453] + x[487] + x[258] + x[129] + x[13] + x[74] + x[49] + x[281] + x[175] + x[542] + x[471] + x[460] + x[611] + x[265] + x[287] + x[120] + x[190] + x[179] + x[718] + x[121] + x[544] + x[342] + x[692] + x[418] + x[205] + x[202] + x[210] + x[409] + x[596] + x[136] + x[367] + x[191] + x[234] + x[299] + x[537] + x[215] + x[1] + x[733] + x[56] + x[57] + x[340] + x[509] + x[345] + x[449] + x[50] + x[160] + x[407] + x[705] + x[635] + x[661] + x[389] + x[494] + x[292] + x[10] + x[514] + x[266] + x[577] + x[243] + x[226] + x[470] + x[496] + x[334] + x[256] + x[728] + x[366] + x[726] + x[668] + x[710] + x[203] + x[464] + x[193] + x[610] + x[233] + x[346] + x[80] + x[31] + x[691] + x[135] + x[650] + x[103] + x[294] + x[67] + x[473] + x[3] + x[168] + x[207] + x[400] + x[540] + x[358] + x[111] + x[737] + x[197] + x[66] + x[511] + x[51] + x[430] + x[355] + x[272] + x[612] + x[534] + x[402] + x[719] + x[349] + x[260] + x[513] + x[237] + x[556] + x[437] + x[491] + x[317] + x[306] + x[156] + x[15] + x[477] + x[693] + x[321] + x[450] + x[192] + x[222] + x[724] + x[627] + x[276] + x[539] + x[552] + x[246] + x[65] + x[140] + x[411] + x[396] + x[382] + x[283] + x[630] + x[213] + x[595] + x[309] + x[419] + x[85] + x[151] + x[187] + x[714] + x[127] + x[229] + x[230] + x[38] + x[114] + x[629] + x[467] + x[70] + x[102] + x[22] + x[91] + x[711] + x[198] + x[239] + x[19] + x[545] + x[468] + x[241] + x[385] + x[591] + x[78] + x[63] + x[61] + x[665] + x[566] + x[395] + x[130] + x[332] + x[161] + x[649] + x[745] + x[18] + x[658] + x[323] + x[684] + x[154] + x[252] + x[339] + x[640] + x[463] + x[438] + x[289] + x[221] + x[484] + x[590] + x[674] + x[0] + x[387] + x[357] + x[619] + x[388] + x[632] + x[425] + x[244] + x[730] + x[427] + x[270] + x[384] + x[532] + x[440] + x[713] + x[696] + x[527] + x[16] + x[392] + x[452] + x[2] + x[133] + x[336] + x[158] + x[314] + x[55] + x[9] + x[362] + x[297] + x[667] + x[605] + x[178] + x[580] + x[664] + x[709] + x[216] + x[350] + x[442] + x[694] + x[137] + x[364] + x[94] + x[6] + x[322] + x[421] + x[506] + x[315] + x[236] + x[374] + x[116] + x[439] + x[601] + x[269] + x[500] + x[295] + x[286] + x[720] + x[578] + x[231] + x[44] + x[682] + x[373] + x[504] + x[738] + x[263] + x[92] + x[290] + x[123] + x[379] + x[646] + x[616] + x[547] + x[639] + x[183] + x[546] + x[420] + x[211] + x[105] + x[232] + x[604] + x[224] + x[741] + x[68] + x[489] + x[23] + x[134] + x[628] + x[368] + x[343] + x[415] + x[495] + x[326] + x[648] + x[625] + x[676] + x[254] + x[448] + x[81] + x[492] + x[148] + x[86] + x[524] + x[670] + x[481] + x[515] + x[261] + x[585] + x[208] + x[185] + x[673] + x[535] + x[360] + x[680] + x[296] + x[249] + x[36] + x[180] + x[651] + x[593] + x[200] + x[153] + x[543] + x[563] + x[681] + x[401] + x[220] + x[399] + x[550] + x[562] + x[32] + x[97] + x[132] + x[351] + x[445] + x[149] + x[431] + x[311] + x[697] + x[488] + x[443] + x[747] + x[75] + x[583] + x[555] + x[17] + x[526] + x[503] + x[150] + x[671] + x[262] + x[455] + x[146] + x[530] + x[157] + x[622] + x[446] + x[416] + x[330] + x[164] + x[631] + x[564] + x[89] + x[579] + x[386] + x[721] + x[654] + x[201] + x[253] + x[461] + x[122] + x[598] + x[255] + x[750] + x[482] + x[5] + x[403] + x[678] + x[186] + x[397] + x[623] + x[497] + x[541] + x[476] + x[76] + x[293] + x[361] + x[58] + x[617] + x[641] + x[722] + x[645] + x[112] + x[48] + x[469] + x[423] + x[113] + x[725] + x[647] + x[300] + x[282] + x[642] + x[371] + x[219] + x[162] + x[754] + x[41] + x[672] + x[519] + x[447] + x[177] + x[84] + x[740] + x[499] + x[638] + x[568] + x[716] + x[302] + x[73] + x[687] + x[554] + x[142] + x[417] + x[608] + x[240] + x[245] + x[320] + x[742] + x[662] + x[700] + x[304] + x[536] + x[110] + x[588] + x[277];
}
console.log(_manifestUri_());

> convert/?b=eJwVyUsKgCAUBdAdeSsy0Zk0atIWxPRFkp_It3-iMz0X89MNIJc5hklpRWo4ROeXfMkt3KISo0VqFS7SmWpnh15SNq0EbPtqLeS4aBSKyYt_8AG2dxxc&p=eJwtj1uPokAQhX8RE9sWkIfNhosgSKMCDTQvBJBLQxNRUKb59etM9uGkkjpfncoZWc4ZneavAb72f-c_FXfawirpmToBXm3gUUf5-izXAkacbPHHUGmAReOKD9TVVUqgz6vAlmzd0TC1p88EeXz95bwu7bxVXVDYgzTsITLw4lkOJSGGZDWZTZfGHqJdqX_ujQNE3XVFHQbIUF-e0cBz2P_krf_zAAqJ-POztFiPLZOTGJw_YnZ3b-yObMlaLsiwP1wjkvi6QV3UpjGCnkXE3yJaG7gygWa0N7gx73QgwPf-nIP0QpRIad2uqMeDPDfiMFlWss-PfM6e0VvX3tCKWK1RKOGyKV5zLxsJD83nidLqKNWBv1kGcSlu98TRi4RUKXJciT2TxS8lJjA4iAMSNm2s7KXKFyeYs1PQQ0eNT3CGSjoBkstrNoh9oAk1vWYQUKRlO3q_86h6KGC8KSa_MLwF6MjdbwuaAU7ihpbfExOhSpQbTT02jaPzzMJMj7V2fHAh10EQHa2EyFIsPnU_3gp3qVv2US5o_GxsfQ7eqSi8jlMJ_fAs37ArPy4o37xYqq6jsLuqSjfWiVEkc32LerXZ6IKSmo-nl-wSY8xcvYZc_Qebjb7a

As pepe said each resolution have his id like :

media_w1416110396_b2542000_t64NzIwcCAoMjM1MGsp (720p) (2350k)
media_w1416110396_b1792000_t64NjAwcCAoMTYwMGsp (600p) (1600k)

We could guess the id (even though +2M possibilities) but without the last part 't64NzIwcCAoMjM1MGsp' it's impossible..

The only way I see would be to legitimately get the 1080p _manifestUri_ from there API.

[2nHxWW6GkN1l916N3ayz8HQoi]

We could guess the id (even though +2M possibilities) but without the last part 't64NzIwcCAoMjM1MGsp' it's impossible..

You can lower down the number by seeing the bandwidth is a multiple of 50 or 2000. After a fast calculation for 20000 possibilities, you would have to spam request for 16 hours in a script (~3 seconds per request). Doable, but who would be crazy to do that. You could lower down that number even more, but I think it's useless.

[aqzs]

but I think it's useless.

Useless without knowing how to get the last part

[2nHxWW6GkN1l916N3ayz8HQoi]

Useless without knowing how to get the last part

What do you mean, I just explained the formula in post #3. It's a trivial base64

[larley]

Actually, it's a URL and not Base64 in the App. The master playlist is also a URL, just like every other master playlist.

[2nHxWW6GkN1l916N3ayz8HQoi]

Yes. I know. I was talking about the unique section from the URL of the first fragment. They are all the same, except a section. That section contains a base64 that could be bruteforced in < 1 day for 1080p

[larley]

So what about the bitrate?

[aqzs]

What do you mean, I just explained the formula in post #3. It's a trivial base64

By last part I mean 't64NzIwcCAoMjM1MGsp' in 'media_w1416110396_b2542000_t64NzIwcCAoMjM1MGsp'.

Here is a junky script to get manifest url :

import requests
from bs4 import BeautifulSoup

TOKEN = 'TRUNCATED'
USERID = 'TRUNCATED'
VIDEOID = '5169'
params = (('i', VIDEOID),('p', USERID),('s', 'INCAA'),('t', TOKEN),)

response = requests.get('https://player.cine.ar/odeon/', params=params)

soup = BeautifulSoup(response.content, 'html.parser')
script_content = soup.findAll('script', type='text/javascript')[1].string
script_content = script_content.split("'; return")
script_content[0] = script_content[0].replace("function _manifestUri_(){x='", '')
script_content[1] = script_content[1].replace(";}", '')
script_content[1] = script_content[1].replace("''", ']')
nums = script_content[1].split(']+x[')
string = ''
for n in nums:
    if n != ' ':
        if len(n) <= 3:
            string += script_content[0][int(n)]
        elif len(n) > 3:
            string += script_content[0][int(n[:3])]
        else:
            print('error', n)

manifest_url = 'https://player.cine.ar/odeon/' + string + '&c=1'
print('manifest_url: ', manifest_url)

[2nHxWW6GkN1l916N3ayz8HQoi]

I don't think I understand your question. The bitrate is tied to the base64. I explained it in #3. It's useless anyway, even if feasible. Should wait for a proper trick to be found.

@aqzs, that string "t64NzIwcCAoMjM1MGsp", remove t64. You will get "NzIwcCAoMjM1MGsp". Decode that content since it's base64

So in short, guess both bitrates, the k value and the normal one, and you'll get 1080p, in theory

[aqzs]

@aqzs, that string "t64NzIwcCAoMjM1MGsp", remove t64. You will get "NzIwcCAoMjM1MGsp". Decode that content since it's base64

Sorry I decoded that part too fast and did't removed 't64' my fault

[larley]

I don't think I understand your question.

If you want to get the link to the 1080p manifest, you not only need the video bitrate (aka. the base64 value) but also the bandwidth:
(Yes, I know I said bitrate, but meant the following value)

chunklist_w1972170616_b2542000_t64NzIwcCAoMjM1MGsp.m3u8
                      ^^^^^^^^

[2nHxWW6GkN1l916N3ayz8HQoi]

Yes. That fact was stated as well in post #3

[larley]

My question was based on post #9, where you said that we only had to bruteforce the base64. But my question lead to confusion because I accidentally called it bitrate instead bandwidth. The reason for my confusion was just that you didn't mention the bandwidth in post #9.

[2nHxWW6GkN1l916N3ayz8HQoi]

Oh. My bad. I meant bruteforced, as in bruteforcing the entire section, not just the bandwidth/bitrate. Poor choice of words on my side.

[abacaxi]

(Because at least 2 videos have been found from them in 1080p and not streamcast, proper download confirmed)

Were those found videos available in 1080p in browser?

this is what interrogate me in the first place :
in some downlad forum, i saw this release :

Los.Paranoicos.2008.1080p.CINEAR.WEB-DL.H.264.AAC.2.0

and i was really puzzeled to understand how it was done because 720p was supposed to be the best resolution...

[2nHxWW6GkN1l916N3ayz8HQoi]

and i was really puzzeled to understand how it was done because 720p was supposed to be the best resolution...

Best resolution for this video, or best resolution for this website? Also is there by any chance a paid tier for this site?

[abacaxi]

Best resolution for this video, or best resolution for this website?

best resolution for this video or any other video but always from this website...
Just confirmation that 1080p is existing on the videos from that website and if possible to get it.

Also is there by any chance a paid tier for this site?

no, this website is totally free. you just can pay if you want to get the latest latest videos, all the rest is totally free.

[2nHxWW6GkN1l916N3ayz8HQoi]

Just confirmation that 1080p is existing on the videos from that website and if possible to get it.

From what I've seen, unless there's a magic device like Samsung TV, etc whatever, that can play 1080p content from them or from their app (non-browser), then I don't think there's even 1080p available. If someone has another idea, feel free to correct me

If you find a device like that, you could take their headers/endpoints and reproduce the API call flow.