How are you going to respond to widevine l3 decryptor's death at May 31st?

[momo26]

I want to solve this problem I can never withdraw

[Attachment 62646 - Click to enlarge]

I see the same with all providers (plus sometimes accountid error with ITV).

I'm using the "widevine_keys" script, can anyone help/recommend an alternative?

hello, make sure that you entred the correct header in headers.py

[badr]

I want to solve this problem I can never withdraw

[Attachment 62646 - Click to enlarge]

I see the same with all providers (plus sometimes accountid error with ITV).

I'm using the "widevine_keys" script, can anyone help/recommend an alternative?

hello, make sure that you entred the correct header in headers.py

Hello, I have used the site :https://curlconverter.com/
It came as a result

[Attachment 62647 - Click to enlarge]

[therain]

Hello, I have used the site :https://curlconverter.com/
It came as a result

wrong headers and lic url

[badr]

Hello, I have used the site :https://curlconverter.com/
It came as a result

wrong headers and lic url

I'm sure it's true
Can you private message me?
I have an idea, you go to my desktop and you understand the problem

[codehound]

Netflix downgrade resolution on system id 4445, now i can't downloading 720p and 1080p. only sd

and we wonder why ?

[T33V33]

Netflix downgrade resolution on system id 4445, now i can't downloading 720p and 1080p. only sd

and we wonder why ?

Its almost as if Netflix are aware of whats going on

[darkw4v3]

Seriously, somebody kill this thread.

[noikz]

Seriously, somebody kill this thread.

Instead of whining about it, why don't you just not read it?

[thatsnothowthisworks]

No problem

No problem isn't right reply.

you need learn how work Quote

this thread have 41 pages because many users like you use Quote without a sense

The software that runs this forum shows 30 posts per page, period. Thirty posts. A post includes all quotes and new statements/questions from a poster. Quoting does NOT make this thread 41 pages. It makes the scroll on a single page longer, but it does not add a single post or page. This thread has 41 pages, because many users like you (and me, with this post) post off topic crap "without a sense."

[Bonde]

Things are heating up


[Attachment 62657 - Click to enlarge]

[naim2007]

Things are heating up


[Attachment 62657 - Click to enlarge]

lol just vmp blob
useless anyway

[Bonde]

Apparently not if Anystream isn't paying up (The rest may be released)
I was absolutely sure they had switched to Android CDM. But guess not

[Anonymous84]

Things are heating up


[Attachment 62657 - Click to enlarge]

Leaks like this will only force github to change its policy and ban all tools circumventing encryptions.
Because it's like someone posted keygen to Windows 11.

[PescaGialla]

Can anyone please help me get keys for this video? I get the error ' unable to parse license - check protobufs '

MPD: https://privatebin.net/?85397e9884177e00#HPKoAc7d1ArA7EgPKAY1U9jhf4QhLBYuLYUhc1MhPy5

headers.py: https://privatebin.net/?f817e31f7c83f539#5GGPP6mViw4mmCnoq8K3Wh1jMU72v1w63mRxSw3SCSVs

Probable PSSH:

AAAAMnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAABISEDYME266z0GMlTdJmb6qOtU=

EME Logger logs (may be useful if PSSH is incorrect): https://privatebin.net/?448324b2c737293f#qbsHNrr5XB542D6EKqpTwQb73iUppwBVSWy1EKDX9eS

License request: https://lic.drmtoday.com/license-proxy-widevine/cenc/

[filipino]

all the series of a web have the same kid and key
How do I modify this BAT so as not to manually place the kid and key?

@ echo off

set path=C:\Widevine

echo.

set /p folder= Video Name to be Saved as (No spaces - use underscore between words '-'):

echo.

set /p key=Input key (1st 'bit'):

echo.

set /p id=Input id (2nd 'bit'):

mkdir C:\Widevine\Downloads\%folder%

set /p stream=Input MPD from stream detector:

N_m3u8DL-CLI_v2.9.7.exe "%stream%" --workDir C:\Widevine\Downloads\%folder% --saveName "stream" --enableDelAfterDone --enableMuxFastStart

ren C:\Widevine\Downloads\%folder%\stream(Audio).* stream(Audio).aac

ren C:\Widevine\Downloads\%folder%\stream.* stream.mp4

echo.

echo Video being created.........

mp4decrypt.exe --key %id%:%key% C:\Widevine\Downloads\%folder%\stream(Audio).aac C:\Widevine\Downloads\%folder%\decrypted-audio.aac

mp4decrypt.exe --key %id%:%key% C:\Widevine\Downloads\%folder%\stream.mp4 C:\Widevine\Downloads\%folder%\decrypted-video.mp4

ffmpeg -hide_banner -i C:\Widevine\Downloads\%folder%\decrypted-video.mp4 -i C:\Widevine\Downloads\%folder%\decrypted-audio.aac -acodec copy -vcodec copy C:\Widevine\Downloads\%folder%.mp4

rmdir /s /q C:\Widevine\Downloads\%folder%

cls

[darkw4v3]

lol just vmp blob
useless anyway

Not necessarily. I'm not a VMP expert, but as far as I can tell they aren't always device specific. It looks like all you need is a valid one for sites requiring VMP.

If you know what you're doing you can generate it from chrome's CDM .sig file. I've not been successful yet - but this one seems to work - for now.

[EatThis]

lol just vmp blob
useless anyway

Not necessarily. I'm not a VMP expert, but as far as I can tell they aren't always device specific. It looks like all you need is a valid one for sites requiring VMP.

If you know what you're doing you can generate it from chrome's CDM .sig file. I've not been successful yet - but this one seems to work - for now.

I am curious on what you mean that it works?

[dale]

Things are heating up


[Attachment 62657 - Click to enlarge]

Can you please give a working link to it. Seems that guy already took it donw.

[darkw4v3]

It was forked. Just search GH for the repo name.

[darkw4v3]

I am curious on what you mean that it works?

*seems* to work. I'm still testing. I'll advise if totally successful. The real test will be if a "certain site" accepts the VMP file hashes.

[EatThis]

I am curious on what you mean that it works?

*seems* to work. I'm still testing. I'll advise if totally successful. The real test will be if a "certain site" accepts the VMP file hashes.

That would be interesting to see plays out. Specially Amazon, I'd highly recommend using a throw away CDM.

[PanMarSag]

Things are heating up


[Attachment 62657 - Click to enlarge]

How do i use this vmp_blob file?

[naim2007]

Can anyone please help me get keys for this video? I get the error ' unable to parse license - check protobufs '

MPD: https://privatebin.net/?85397e9884177e00#HPKoAc7d1ArA7EgPKAY1U9jhf4QhLBYuLYUhc1MhPy5

headers.py: https://privatebin.net/?f817e31f7c83f539#5GGPP6mViw4mmCnoq8K3Wh1jMU72v1w63mRxSw3SCSVs

Probable PSSH:

AAAAMnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAABISEDYME266z0GMlTdJmb6qOtU=

EME Logger logs (may be useful if PSSH is incorrect): https://privatebin.net/?448324b2c737293f#qbsHNrr5XB542D6EKqpTwQb73iUppwBVSWy1EKDX9eS

License request: https://lic.drmtoday.com/license-proxy-widevine/cenc/

need "dt-custom-data"=token fresh one.
the tk u posted is expired

[darkw4v3]

That would be interesting to see plays out. Specially Amazon, I'd highly recommend using a throw away CDM.

I chickened out. I don't have an extra working CDM to try with. I'm not going to risk my private one.

[Keller501]

Hello,

I'm trying to understand how is form some widevine requests, and as "Hall" posted earlier in this thread, some data you need to send is bytes. Other sites it's just pssh in the payload, or other kind of string data, you can generate or find..

Does anyone know how to generate this byte payload?

here's Hall's message with the "data" var content as an exemple

import requests

headers = {
    'authority': 'prod-kami.wuaki.tv',
    'sec-ch-ua': '" Not A;Brand";v="99", "Chromium";v="96", "Google Chrome";v="96"',
    'dnt': '1',
    'sec-ch-ua-mobile': '?0',
    'user-agent': 'Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36',
    'sec-ch-ua-platform': '"Windows"',
    'accept': '*/*',
    'origin': 'https://rakuten.tv',
    'sec-fetch-site': 'cross-site',
    'sec-fetch-mode': 'cors',
    'sec-fetch-dest': 'empty',
    'referer': 'https://rakuten.tv/',
    'accept-language': 'es,es-ES;q=0.9,en;q=0.8,ru;q=0.7',
}

params = (
    ('uuid', '1a6ab6fb-8a68-4032-ab9d-3c1cac3abc98'),
)

data = {
  '\b\x01\x12\xFD\x1F\x12h\nf\nP\b\x01\x12\x10\xF4\xE1\xCEQ\xCCHS\x1F{~\xBD\xB7-\xAC\0\x03\x1A\x05wuaki"-f4e1ce51cc48531f7b7ebdb72dac0003-mc-0-143-0-0H\xE3\xDC\x95\x9B\x06\x10\x01\x1A\x10\xF7S\x15\xBE%\x1E': '',
  '\xB4M\xDBm\x96\xA6\x03\xD9p\x18\x01 \xDA\xC6\xBE\x8E\x060\x158\xA5\x97\xE9\xE4\x06B\x80\x1F\n\x14license.widevine.com\x12\x10\x17\x05\xB9\x17\xCC\x12\x04\x86\x8B\x063:/w*\x8C\x1A\xC0\x1C\xC5\xEF|\x83\x89g\xA7!\x03\xC5\x93\xF1\xE6y\x98~\x07\x05\x0B \xD95{f\xD8\x8C\xA0\xCA\xD4d\xBE,\x97m\xEA\xB3\x94\xDBr\x8CL\xF6#\x9FT8\xD7\xF9G\x97\xDC|\xA2\0\xD7\xF5\x89\xACKb$B\xD4\xCD8\0\x1F\xD6\xB5GU\x8B\x87\x8B\xCC\xE5\xEE\x7F\x0B\x14D\x96\x1C\xBC\x86\xAF\xB8\xC9I\xE9J!\x1D\xFA\xE2\'\x9B\xC8\xCFu\x1Cg\x07\xFD\xAC\x9A_k\x96\x89\xC8\xA3Rt\x90\xC6\xA1\xAE\x0FJ\x89\xD0j\x9C9<\xBC\xC3\x1B\x10S\x83K\xF5\x0F\x9E\xAE\x97b\xF6\x1F(c\x81jR\x91F\xCB\xB5y\x9D\xA9\xE6\xA6\x9A\x8F\xD6\x90|L\x91S,\xD4\x18\xDD\xC6\\\xA7)\xE7H\xA0N\xAB]\xC3h9\x93|\xB7x\xB9x\xD6y-\xD4S\x98\xF1\x8C\x1E\xD15\xF9\b\xAB^)q}\xD8N\xEF\xB1N)\fk\xDA\xB7oD.1o\x1A\xE2%\xD2\x97\x9C\xAA]\x9By\x19n"\xB0\x0E{\xA0M\xE4\x14\x1F/g\x04\xFD': '\x17\xD3\'\xE3\x9B\xB5G\na\x96',
  'IU\xC1!@g\x06Y\xF2"\x97a\xFF\xF2\xC2\xCC^\xC0\xD4SI\xEF\xCF\xBA\xFD\xAF\xF5\x06\xEE': '',
  '\xC9\xAF\xE5EE2S\x81w\x14\xDC[\xF5\x90m\xBB@\x82p$\xA5y0\xD1\xCA~\x8EC\xDE\xA6\x1C\x8B\xEBQWWD\xCB\xD5\xD10\xF2\xFA8\x88\xFEkh\x99\x17,\x020\x1C\xE99V\x8BD\xC3\xE8\xC0\x9Ew\xC9{\x143\x9B\xB0\x13p\t \x95\\9>\t/I;\x10d\xF9>.\x7Fm\xEB3\x9F\xAC\xA2\xD9I\x85\x85\xAF\x04\xCA\xC7f\x86\xCB}~4\x89\x82\xF3\xA8\xB1ZLg`\xB2*\xDE\xF2K\xC1MF\x82\x16\xB2~\xB07\xE4_\xFE\'\xC5\xDE\n': '',
  'TC\xA6.\r[d\b7"\xE9i\x05\x80\xC3\xE31\xD5p\xEC}\xDE\xB8\x06\x85\xC3\xAE0d\x84\xDAk\xB3\xAF\x1F\xBE~\x8B>.\xFD\xDB\x8A|\xC5\x1B\xD3O7{\xBE).\xC5e\xA4#\x19\x90\x87W\x93\xE5d;\x0E\xDE\x04\x80\x1A\xB1N\xEFh48\x9E\xA0\0\x07\x02\x10\xC4\xA7u\xC2\xCB\xD4@\xE5\xB5\x89h\xB0\xBA\x96\x92\n2\xF6\xAC\xDE\xABg)C\xB7TzpCd\x05_-,\xDC\x0F(\xFB\xE1\xD0\x19j\xCD\f\xAC\x8E{\x83r\xE3\xDDQ#6\xB6\xCC\xAA\x9A\xBC\xCBb\x9E\xEE\xEBT\xB22\x19C\xC3\x96c\xDC\x10@*#\x8E!\x15\xE1\xC9\xC2\x96\x86B\xA3?\x86p\xEE\x9D\xE4\xA3\x90\xF5\xA8\x96!qlh\x98\x03\x1FNDs5': 'v\xAA\x7F\xB7\xF9\xE6e\x06C\xF0\x99e\xAF8\xFBe |5\x89\xDE\x7F\xABe\bq\xE2\b\xF5\xC2\x06\x84;\'\x9C\xF0\x87v=`\xF7\x81\x9C\xACf\x95[\f\xC10G\xC5\xEA\xB1\x19\x8Aw\xED\x03\x9Cxy\xA0\xF7*g\'\x82\xDB\xB8\x02\x87\xB1 \xFF\x8E\x89\xC9\xEB\xD1\x11BM\xAEv\xC7\x023\xF4Y\xBAuFR1\xEA \xD7\x1A\xFE\x96(\xE0\x178\xCCI\xB9c\xDA\xFB\x87\xA6/\x8B\xF0>\x12\xDFJ\x012\xCF\xB8\xA4\xAF\x86\xFC\x9330\xAAc\xE1\xD5\n\x89r\xF6w{8\xAA\'\xA8\xBB\x8E\x12#MBv>\x13\x8B\x95\0\x01o\xBC\xBE\x15H\xD6\x9C\xEA\x9A\'\xAA\x1B$\xC1A\xDC\xD6\x83\xCAT\0x\xFB\0m\xA2\xB4\xE8V\xBBLV\xDF\x02\xC2\xAD\x86\xD3f\x7F\x1E\x95\x15\xEA8\x9A ',
  '\xCBQy1\xF0Br\xBEt<\x8B\xCD\x01\xC3\xB6\x833\x1D\x0B': '',
  'YFhG\x1A\xC3t\x8Fd\xA8\x1D\xDB\xE8\x11\xABg\xBD\xF1\x1A\x10_\x84\xBA\xD3\x06\xD4\x1D': '\x1F7\xC8\xACA\xF8\xD0d\xA4C\x9F\x869\xFB\xAA9\x04\x87\xD5\x88\xD74\x89\xD4f\xF2\xA0\x99\xC4\x95\xFF\xD5|\x18\x93\x98\xB2oy\xB7\xE1\x17\b(-!\0\xD1\x84)G>\xCD\x82a\xF8\xBC\xE3\x9E]\x88\x9D\xC66\xA6wi-E\x0F\x92\xABp\xA3\xA9\f\xB8\ra\xD1BgWO\x05\x99S\x8A\x85[\xE1!\r\xE1sQ\xAC\xE2 \x14\xE3\xFBh\x17\xE3!g\xCF\x9B\xC6\x8FU\x81\0\x11Y\xE9t\x9D\x9Cr\xFBV\x03\x12\xFD1\x9D\xEERh\xA9WAh\x88\xE1q\x14\x1F\xF6\x0F\xAE5#\x8FB\x8A\xEC\x8E`\xF4\x06M\xEE\xD4\xE8\x8E\x17ty\xBC\xDE\xDB(\xCD\x99\xB8.\xE8K\x92\xC7S\x7F\xF8\xFAq1*K\xFB\x8F\xE7\b-\xDE\x9BT1\x8E\x1B\xB8\xF9\x9F\xBC\xC3\x07!\x91\xDA\xCE\x15x\xD0\xF0\xD4q\xFD\x7FS\x0Bd\xBE\xF7\x1F\x8Al\xC9[\xBD\xE2\x82``\x82^0\x87!>\xFC\xC1O\xB2R\xDC\xB6\xC8:\xF4\xF1\xA4\xA0\x13\x1Ck\xAD\xF4\x8Du\xC7\x11\xBE',
  '\xAC\xA9%\x9A\x96M\xE5\xFC\xBF\x06\xAB)1I\xA9Z5@v]z\xDB\x1AI\'\x15\x97N\x8E8\xC2\x98x\xBA\x9E\xAC\xFF\xE1\x9E\x8E\xAAO[f\f\x10i\xCAi:\xDD)\x9B\x8A\xC1Q\xFF\xEBg6\xF7\x13\x11\xE6\xC3yw\xEEf\xC6Q\x14\xD3S3\x82\xE7\xF8\x17G.}/\xE1[\xCE\xB4\xA2\x89\xEDn\xEF\x82\xEBpt\xB2\xD2n\xA5\x8C\\5\xEE\x94\xDF\xDB\xA2\xE8*XK\xB6\\\xE3\xEE\x91\xCC\xF0-\xD5|\xEFW\x03\xA2,\x94o6\t\x92\x1BDQ\x07r\x85d\x1C\x80y\xD6\xF9\xC3\xF9\xBB~\t\xF2\x01\x86#5\xAC\x98\xE6\x9F\xCA': '',
  'x\xA5T,\xE8\xC3\xFF\xF19\xE5\x96\xE3\xF5\xE5 \xF8\xA7\x9D\xFE\x8A\xA1kn\x8B\xB7\xA4': '\xAA\xAC\xBC\xD7W\x91\x7F`\x90\xC2\x99\xFB\t\xF1\xF1\xAA\xF13\xF3\x10\xA55\x10K\x84\xAFM\x8C\xE3L\x98<\x01\xB6\xDE\x04 \x1C\xFD?\xA8\fJ\xFDN4\x1D,\x0BF\xE7\xFAj\x16\xE2\x02\xA1n\xA7U#\xD4\x8C#\xA1h\xFF\xC4\x032\x86\xBF\x04\xA0\x8F\x1D\x7Fo\x9EY\xFF\x8A\xDF\x91J\x0F\x948eN\xE4Q5B \xD8\x80\x88\x8A\x06\xCC\'\xE3\x13b\xB9h\xABCD<\x8F`\xA3\xF6\xD3\x05de\xF7%\xDE\xCD\xFB\xEC\xFBm/\xF9\x95q\xCE\x93\x95.\x8A\xE6W\xB1\xF5S\x8D\xBF\xB3\xF7%d',
  '\x9D\x93\x0Fk\x18\xF74Zv[\xCE\xBD\xE45z\xF8h\xC8\xA2<\x93\xC4\x8E\x8C\xF8G\xEC-L\xCEp\xE5\xE5q\xE7G\xBC\x87\x1F\xAB\xC2\xD9K?\b\xCF\xC0k\x17B\xB5\xDF\xAF\xAC\x19Z\xA2\x1F\xA4\x1D\x1E\x0F\x8E\xCAy:\xD7\xC5Q\x10\xBF \x90(Gl\x9E\x8EL\xE5l`\xA2hot\xDB@.\xF2pn\xD0:\x15\x13njY\xE4Z\x01\xBB\xA92\xDB\xEB7iW\x86\xFA\xAD@\0\xD7\xA4IkM\xB0^\b\xB2\x7F\xAA/\x86\x9Cl\xF2\xAF\xA6c\xAB\xDAG#\xB7\xF2\xE3\xA8vW\x0E"Z\xC8\xED\x89>"\x9C\x183\xDF\x9A\x04\n\xD4Y6\x93\xF4s\xF4T{\xDB\xE3\xB5\xE9a\x15,\x8C|K\xB4\xCA\xCDJ\x8C\x9F7i \xB3Xk\x05T\xB3\xFD\xE5y\f\x90\xE8J\x80sq\xDE\xF9\xD4\xC8\xE5\x88\xDE_\x9E\xE2\t\xB3@8d-M\x12\xCE@\xD8l\x1D\xC0yb\xC3idv\x8E\xD8\xBC\xC7y\xA8\xE0\xD8?\x03\xA3\x86\xD32\xE3*\xF2\xD4\x03Z\xA6k\xCE\x0E\xDE\xED\xE7BQ\x80c\xE0X\xBF\0q9\xD3e\x96u\xA7tD\xA7\xEF\xB5\xB8\xFDRiP0c\x9F\xFAw\xE9\xB5\xD1\xFE\xF7\x9F\xBD\xE2$\xF0%\xFC\xAD\x1B\xF4\xE5m\xED-!\xEC\x83\x8A\x1A\x95\xC2\xA0m\xE9\x14\xAD\xE0s\x10\\\xB3\x02\x19\x11\xBAB\x9Cr\x9F\xE0\xBE\xD2\xF1': '\x8E\xA9\xAF\xEC/}\xA3\x04\xF73\xA7\xB16X\xDBN\xA6\x9EJ,\xD5\x14\x82U\xE0$\xE9n\x0B\xD7^\x12\xFC\x9C\x0E\x7F\xC8\b\x83\xDA)\x88(\xCF\x97\x9A\xB9\xFAd2b\x90\\.`\x80\xF2\xAC\xB1L3\xD0\x1F"A\xB5\xA9\xC0\xD5\xCER5\fS\x9B\x7F\x8C\x8Cy\x02\xDE\x06K/\x99Y\xBEFQtm\xC3j\xDDU\0!^`\x19\xB5b\xF0q\x06\xFD\xEE\x04\x0E\xCB\x07>8f1\xD8\x90\xF9-\x91\x1A#\x02-\xEB\xBD\xFC\xA5\x1D1`\x7F\xB4\xE0\x15u[\xFB\x8F\xBC\x06\x8F\xB6j\xB0\xEE-\x1C\xE5\xC4\x8D\'\x17\x1A1\xB9\xD8\x0B \xCE\x1DjJ\x1B~\x95\xDA\xFF\xE4\x93\x12%Xw\x18|\xA4\xE1\xE7\xC5\xC4)Z\xC6\xD0\x9D\xD4\xB9\x1DT1Y\x80\xDD(r\x80\xD7\xCCQ\xB2r<\xA1\x97\xF9\xE5R \xA6]//\xB3\xF5\x81\xE4c\x1F4\'*l\xD1\x811\xC9j\xBC>\x90\xBCE\xD1/P\xE0/\xC8kb\xF2\xC5\xCA)3\xEF\xE4{JD\x0F\x82<<\x88o\xD2O\t\x91\x88\xCF\xBB`\x92\xF2\x9D\x10\x06\xC9\x07!l\x17f\x14\xD2\xCB\xF0\xF2Bxn\x87\xA2\x97\x94\xA8eN\xCF\xF1\xEE\x8Fo\xAA\xD1:9\xB2 `R\x88\x16\xE7\x03\xAB\xB4\x0F-b\xB2}w\x85\x02\xCF\xDA\x83\xB1\x8EI\xA2=\xC5m\xED\x8D\x95\x1C\xA50\xEA\x9B\xC5\xC2\xAA\x0E2\x8E\xCB)5n#I\xEC\xBD\x98\xA3\xB1\xDF{x\xF8\x18_\x83\xB5\x95\x19\xDDN\xB6\x13s\x1D\x9F\xC9\xB0\x7F\xDD(\x8D\xE7R!\x8A\xBCe\x10\xD7\xA0g\xAA\xF3\xC6\x94R\x10\xC4\xE9N{\x9E\x01\x1B\xB7-\xA7\x9F\xA2Zs\xFEj\xD3"\xF5\xD9\xC6\x83\xFAd\x80\xB4\xB4\x83\xCB!u\x97\x03i\x1E\xF94\xA4\x1A\xC7\xE0\x9F\xF7(\xF4\xFCQ,\x18\xC4\xA9\xFD]\xE8\xAC@\x96\xCA~\xF6\x9B\xFD\xF6\xE1b\x07\xC8\x99\xD8>.?\x9E\xD8\x92\xF6J\xB1\xDF~\x9F%\x90\x9F\x16\x84H\xA7i\x8E\xB5\xC1}\xECon\xED\xB7}\xC7>h\xD5\x87c\x88M;\x18@X\x0ES\xFBEf\x112\x9E\xB94\x18)I\xC5\xE4\xEF\x92\xB8\xB8!\xB4\xCB\xF3\x85\ta\x1B\x10\xF4\x88\x89\x15\xE67\n\x03B\xCE\n\xEA\xF2U\x99\xE60\xC7^\x1C\xAF\x8D)!\x83\x1E{^\xEFB%\xCA\'\xBF\xC2\t\x1F\x80\x93\x05U\x1F\xB0\x87K=\x05\xC4\xB6\xA8\xA5\xE69q\x95\xADR*\xA7\r\xECN\xCD2\0\xB0\xCAO\x17\x88\x96\x02\bM\xCA\xC1/@\x14\xC5-\xA7\xD49\x91\x80|\xCB\xF4\x14|\xC8e!\xAA\x1B\xAE\xE9P?_l\xE8\fE\xFD\x030\x9B\xF6\xABU\xA3\xB7\xCC\xD7kx\x02C\x9D9\x9C\xFC\x7F\x02p\xB8\x9D\xC8\x84\xBC\x8F\xB4\xDDl\x12\x93\xAF\xFC^Lc\xCA\x91_\xA3\xD8\xD9=\x9F\xB0\x13\x9F-p\x92n\x1B\xCF\x8Am\x86\xF0\xF4\x81\xCE\x0F\x07 \xFC\x84N\xF5\xA5\xF9T\x8D$\xDE\xEE\x18\x81\x94D\xB8\x83\xFAp\t\xC9\xEF=\xE2\xCA\x93\xF4\x1Do\xFD\xF3\xFD\xC0{^\x90\x95\xA6<\xBD\x0B\x83\xE32\xB6\x84u\xE0q\xB2\xC0\xAA\xFD\x15\xFD@^V\b\xEFP\x86z\x81\x0B\xE1\xE93\x0E\xE6$\xE7gd\xF2\x8D\x13\xCCu\x92\xB1\x95\xDB\xDC\x04\xB1\x8E,\x9Bu\x19\xAB\x87S\x15/:\xC9;\xF6|\x83\xC2\xEE\xB1U\x13\xBEuz\x8E\xCF\x1E\xBC$\xEC\\\xC2\x04\xE1I$(:.\xFB\xBC)\xD7Wuc^\xF2\x0F\x19A^\xDE\xA4?\xE1\xF1\x94\xDC8DBqS2\xDC*m<\f\xB8lJ\xC49?\xE0\xB6\xBB\x1F\xCC\xC4y\xED\xBA\xEDo\xC5\x8A;\xD7\xBF\x1C\xFA?\xFE\x8D\xFF4OS\rbb0Ah\bm:\xAF[\xDBE\x12\xF9\xF3\\\x97.~\x904\x0F<I\xFD\x04RH\xDA\x8F\x023qt\xDD\x86\xDA"\x9E\xA5\x89\xCE\xCEc\nTKk\xD5Hw\x86}\x86\xEFW\x9C~\xCA>\x12\xC7\x84Q\x01\xF0\xFB\xE5\xEBs\xC1\xFD\xF72e\x7F\xC9\xA3L\x98\x82\xFC\x1DUj\x1B\xF5\x14\xD0}@\xA0\xBF>:\xBEr\xF7\xEEb\xEC\x80\\=\xC1\x8F?\xC1\x1D\x1E\xF3\xE7\xD0eN\x8C\n\x1F\xA6%\x03\xCC\x14\xEFW\xB5#\xCD\xD2m\xE0js\x9A\xA8\xF0\x89\xA6^\xA3\xF2C\xF0\x802\xBBe\xDD\xAC\x82\xBEG\x06\x8A\xC4\xB0\x86J\x9D\x97\x9Fu/\x9A0\x864\x8B)\x89PIz\xF0\xD4\xB0~\x06\xCC\xBBpt\x8A\x96\xD4\xBCo\x97\x17\xDCm\x99\x05\xC6Z\xC8x\xFF\xB3\x85\xE2v \x9E\x81]\x9D)B,\xB3\xFA\x8EWwD\x81Fo\xD2\xE4_K\x89\xECk\xB2\xCE|o\xCE\xE5]\xD0\x0B\bS\xCBAZS\xA0\x90\xE7a\x98{M\xF2\x19\x90$\x9E\x94\xA8\xE6s\xED\x9EtbY\x99\xC6_(y\xD9K\xDAX\x9B\xAC\xBEp#\xA7\xCD.\x84\xD6\xDB\x12\xD3\x12m.{\xECz\xDF\xA7\xB2\xE2%\x03\xDE\xF7\x8B\xE1\r\x160\xCF\x97\x0E\x97rrF=\t\xFA\xB7\xD4\xEF0\xFA\xFF\x04C\xD5;\xD5\x1Er\xAD\x02\xAB\x92\x04FL\xE8\x83\x9AH\xBE\xEB\xB6\xCD\x82\xE8\x02y\xBC\xE3\x8F\xFFD%\x17\b\x01\xE8\xFF;\x80\x02\xEAE\x85\x0B7oG\x91\xE0\xED\x0FW\xD9=\'/!\x9B\x9FvY8pu>\xD4\xD5\x92\x12\x88\n\xE8\x88\xA9,;\xB3\xF8c\xA2\x019o6#\x81.\xC9?\x8B\x9D#T\xBC{S\xA3q\xC5\xE2\x9C#k\xBC/c\xC1\x06Q\xD3\x9F\b\xCA\xAC\x97\x94\xD2\xB3]\x03\xCB\xBB)\xC3\xA9\xFCCz\x9E\xBDx\x8F\xAD\x85\x8E\xB33\x1E\xAB\xE7\x04\xDA\xE2\x91W|kZ\xE7\xCD\xC5\xE6\xA2\x985\x03Y\xD9\xD8\x8B\xEA~i\xA2\xDE\xF3\xED#\xB9)\x05FF2Js@!O\xB4\xA3\x15:\tcD\xA5m\x18\x03\x10\xD9\xB8\x01\xB0i~\x0E\xF0\tz\xFD\x94p\xD9#\xDE\x1E1\xC1\x8E\xCEI\xBB\xF9$H \xAE\x97Oh\x86[yD\x95\x1B\x87c\x7Fq\xCE\xEBC\xFE?TJ\x8A\xD3\x0B\xEA\x1F\xDB\xFC\x86\xF2G\x9BQ\x9A\x05\xDD\x8A\xDF!\xD2}\x16\xCEL\xBD\xD1\x0F\xBC]\x92\xB76y\xB3\xA0\xF7\x86\x12VVtB\x93',
  '\x1A.{\xE0\xBB\x98\xD2\xDF\x99\xEE\x8Ad\x1El\x04\xC4{b\td\xBA\x97\x13\0@\f\x98': '@A\x91(C\'Ii\x88v\xB6\xCE\x88\\\\V\xAEk\x9Ca\x7FW\xF5\x9C\x93\xB1\x15\x87\x94\xE0\xD2\x9A\xAF \xCD\xA5  <\xE7{\xB2\xEE\x7F\xFDE\xBC\xCE(=!\x8C\xEB9-A:P:\xE8BB\n\x9E\x89b\x10\xDF\xEC\xCCD\xD5\x14$B\x14\x8F\xDF:\xFBaj\x95\xE1\x124\t\xF9i\x19\xFE@)Pr\x1C\xE4C\xD9\xF8\xA9\xED(\xA1\xB0=\xDB\x9A\xC6\xA4\x1FZ\xEEF\x97\xF4\xD8\xFE\fy\x92\x0B\f\xE3',
  '\xCD\xF37\xFD\x9F\x9D\x11B\x19\x1F\x1A\xFC\xD3\x94\xEB\x9E\x16d\xF3u\x896-Er\x8F\x8B\\\xEE}\xD8\xA16': 'T\xAE2\t.\x8E\xA3\x8D?\x16\x01,\xD9\fH\xA0\xCB>\x1BN\xC6\xD8\xD8,?\x1D\\\xBD;\xFB\x189\xF9\xE6r\xE6;Iw\xA3\x98\x1Bno%4\xED\x11m_\x89\x88\x98G\x04;s\x1BH\x8A@O\x92W\x9E\x19;\x83e\x92\x02\xD1\x87!yC\\\x97\xA5\b\xD2\xE3\xA4P\xE5\x9D\xF9\x8DYu\xF6\x93\x9B)G[X\xC0N\xA9\x83\x7F\xB2b%\xEE\xC7M\xEA\xDE\xF9x\x86wT\xD07\xB9\xF7Qx\xC1\xAC\xB4\x0F\xDB\xD4\x12d\x14#\xFF\x9Bb\x9Ba\xC5\xC96\xB0\x06\x8Cb#\0\x8Bz\xC0\xDEz\xDD*\x89\xE5F\0\xB2\xE8\x80"\xC2\xA8\xC0\x97\xE6q\x0E\xBED\xB8!"\x10K\xA8\xD0\xF7\xF2\xE0|\xEC/3\xBD\xC4\xEB\xC7#%*\x80\x02>\xC9P.\xE9\x01\xEB\xFC\x12\xC6\x8E\xE8t\xB6fG"\x18\x83d\xCB:N\x97\xBE\xA3\xEB\xF7\xCC\x9Ak\x03\xFA\x02\x04v\xD9v\xF3Wl0e\xA4',
  '\xA7\x1Bq)\xADT\x1A\xB9\x95U)\x8Eb\xC6x\x94\x8C`B\xB4,O\x10\x84\xE6\xF3U\xBBE]\x15\xB9\xAA\xB8\xDD\xE0\xBF\xA5"%\xDEH\xDA\x83\xBB,m\xF5\xE47\xB1\xB8\x95}\xB9W\x82\xE9G3u\x82\x18S~\x8C\xD6%\xCE\xB1\r\xB7zh\x95(\xD4\x06\xF3\xF6j\x015\x98\xCF\xFA-\xA6%(m\xAF\x8F\xCB >\x05\xC7c\xD1\x9D\xB4|S\xD5\xB7\x191\xFC\x94\x0BA\x81\xEB\x13d`\r\xE9\xDB\xACfx\x96G\xFC\xE7I\b\x04\xD3M\xB2\x9C|])\xB8\x16\x81\x81G\xD0!\x8A7\xBC\xA4z\xFCZ\xB7b\x8A(\xC8\xCA\xCENm_\xA9n\x11\xE1#\x04d\x94\xD3\x01\xAF': 'oq\xF1\xE9\\\xF5,\xCDQ\x82\x0F\xDEt]\xF7D\xD3\xE3L30~\x84\xB3\xEE\f\x92\x94\xC8\xAE\xA48z5\xE0\x89X',
  '\x1A\x80\x01\'0\xA7\x8A\xA3Mh\xFA\xBB\x1BS\x04\xDF\xEE\xC3u\xE3y\xC3\x04?\x18\x1F\xAF\xAB\x7F\b\xBD\x93\xBF\x9B\x0B\xA4\xAB"A\xA2L\x89M\x1A;\x1D)q2\xE3\xB8\xAF>lr\x9E\xF96rH\x8ABsc\x87\x11x8%Zi\xB6\xA7\x86h\xE5Y\x8D\xCA\xD4\xEFrQIy$e\x03\xFDY\xBA\x939\x97Q\xD6\x87\xE0\xD5\x1F\xD9\x1F\xA6\xF9\xD8V\x17\x99\xE8\xE9\xF6\xC9c\x89V\xD8Z\x04\xE5\xF57x\xE0t\x04,a\x10\x81\xDB\x93J\x14\0\0\0\x01\0\0\0\x14\0\x05\0\x10l\x9AK\xA5\x9C^(\x19': ''
}

response = requests.post('https://prod-kami.wuaki.tv/v1/licensing/wvm/1a6ab6fb-8a68-4032-ab9d-3c1cac3abc98', headers=headers, params=params, data=data)

#NB. Original query string below. It seems impossible to parse and
#reproduce query strings 100% accurately so the one below is given
#in case the reproduced version is not "correct".
# response = requests.post('https://prod-kami.wuaki.tv/v1/licensing/wvm/1a6ab6fb-8a68-4032-ab9d-3c1cac3abc98?uuid=1a6ab6fb-8a68-4032-ab9d-3c1cac3abc98', headers=headers, data=data)

[[ss]vegeta]

Does anyone know how to generate this byte payload?

With Rakuten, something else is the problem I think. It's not "byte payload". But I couldn't figure it out 10 days ago when I tried, nor could a more experienced friend.

[Keller501]

Does anyone know how to generate this byte payload?

With Rakuten, something else is the problem I think. It's not "byte payload". But I couldn't figure it out 10 days ago when I tried, nor could a more experienced friend.

From what I tried to do, it seems to be the license.bin file, I've seen it a while back on some sites. I think Disney+, but they have an API so you don't actually need that..

So either a file that identify the device to grab the playlist for the browser but i can't find in the network tab the request that could remotely be that
In france there is Salto service that uses the same scheme

[EatThis]

That would be interesting to see plays out. Specially Amazon, I'd highly recommend using a throw away CDM.

I chickened out. I don't have an extra working CDM to try with. I'm not going to risk my private one.

Is definitely a good idea. The only place I thought where a VMP would be used along with a L3 Android CDM would be using Google Chrome for Android and interacting with the Amazon Prime website. I used an actual L1 device, it playback content just fine from the browser whereas using the same setup on an L3 Android device the Amazon website shows an error asking to enable protected content, didn't bother to check what was the actual internal web response. Adding this to what I've said earlier, is evidently clear that Amazon does not trust the L3 CDM, not recently but a long time ago.

Word of advise, to all of you, if you don't know this already. Always check the website interaction before blindly sending license request with the streaming provider, test on a real setup that it works before bothering to do anything. While there is no proof of this, treat this as if the provider is always watching for any mistakes you make, specially the big and old ones like Netflix, Amazon, Hulu... ect. These services have the resources and have built their own infrastructure, so It would not be impossible at all that they may have the resources in place to analyze user interaction with the service and be able to figure out when It could be the a real user or a moron attempting to run a script, making it easier for them to pull the trigger on your CDM.

Hello,

I'm trying to understand how is form some widevine requests, and as "Hall" posted earlier in this thread, some data you need to send is bytes. Other sites it's just pssh in the payload, or other kind of string data, you can generate or find..

Does anyone know how to generate this byte payload?

here's Hall's message with the "data" var content as an exemple

This data is the actual license requests in bytes, I am not sure what your setup is but you need to generate the license request with any of these tools revealed here already, is prepared with your device information and the pssh of the content. I mean, this is essential to be generated every time and allow you to get license with decryption keys. If you cannot generate this you're at best getting the streaming service certificate.

On a side note, this person appears to be having a meltdown. https://github.com/widevinedump, from what I gather it seems like he/she is part of those private discord groups where the majority are like starved hyenas waiting for a piece of bone to be thrown at them, sharing other people's work. No wonder they have little regard or care for the people that do the work. I bet this person haven't wrote a single line of code all what they've shared. Maybe serves a lesson to stay away from these places and keep the work you've done to yourself.

[codehound]

He isn't part of the discord group he is at odds with, thats the issue. He is putting the whole shooting match at risk now, especially as he has now had a public row on the redfox forum.

Please also be aware Youtube now logs all WV server licence requests for their WV content - IP (and maybe other info we are not aware of). And NF have for years logged the ESN of your device when making any request.

[Keller501]

Hello,

I'm trying to understand how is form some widevine requests, and as "Hall" posted earlier in this thread, some data you need to send is bytes. Other sites it's just pssh in the payload, or other kind of string data, you can generate or find..

Does anyone know how to generate this byte payload?

here's Hall's message with the "data" var content as an exemple

This data is the actual license requests in bytes, I am not sure what your setup is but you need to generate the license request with any of these tools revealed here already, is prepared with your device information and the pssh of the content. I mean, this is essential to be generated every time and allow you to get license with decryption keys. If you cannot generate this you're at best getting the streaming service certificate.

Oh yeah right, so the data var is just the get_challenge function basically lol, I feel dumb