Decryption and the Temple of Doom

[kenyard]

pip install protobuf==3.20.*

[A_n_g_e_l_a]

pip install protobuf==3.20.*

Thank you kind Sir! I've added that wrinkle to the initial post now that protobuf 4 kills WKS_KEYS.

[andrez4zv]

That's one of the most incredible replies I've ever read, along with some of Jack's.

Hello Mr. Vegeta. Sorry if this is not the right time for this comment, but could I send you a message? It is an affirmation question.

[[ss]vegeta]

Hello Mr. Vegeta. Sorry if this is not the right time for this comment, but could I send you a message? It is an affirmation question.

Why can't you ask the public?

[portalme]

I already did almost everything in this thread, but in the Dumper part, I have a problem. I get an error:
line 4, in <module>
import frida
ModuleNotFoundError: No module named 'frida'.

When I'm getting to this point: /data/local/tmp/frida-server-16.0.6-android-x86, and I have to open dumper_keys_py, it doesn't open anything (window opens and closes in seconds).

What am I doing wrong?

Have you installed frida to your PC?

python pip install frida

should do it.

It's already installed... Maybe that was the problem, many thanks!

Now the problem is different:


[Attachment 67943 - Click to enlarge]

I am an absolute newbie, and I have been 6 continuous days without success, trying everything to download from Vdocip***...
I'm about to give up.

pip install protobuf==3.19.3

you should use protobuf version <= 3.20.0

[A_n_g_e_l_a]

you should use protobuf version <= 3.20.0

The latest install, before 4 dropped. is

protobuf==3.20.3

and works just fine.

[andrez4zv]

you should use protobuf version <= 3.20.0

The latest install, before 4 dropped. is

protobuf==3.20.3

and works just fine.

Oh my God!!!!! I'm getting it... I already have "device_private_key" and "device_client_id_blob" but I got lost here.
I got the PSSH from Vegeta's script.
I put the license, but it didn't work. Did I do something wrong?

What else do I have to do? :/


[Attachment 67971 - Click to enlarge]

[cedric8528]

You have to fill the file "headers.py"

look at these post #33

https://forum.videohelp.com/threads/407635-Crash-course-on-downloading-ITVx-hub-please...e2#post2673701

[A_n_g_e_l_a]

Oh my God!!!!! I'm getting it...

I called that 'a nearly falling off a chair' moment! Welcome to the club.

Cedric gives very good advice.

But it looks like you are testing against the bitmovin site and they don't use headers as I recall. The problem is l3.py is set up to read headers in all cases.
So, for many sites, simply provide a simple headers file called headers.py. And when that doesn't work you'll know to use Cedrics cURL copy at curlconverter.com

headers = {
    'Accept': '*/*',
    'Accept-Language': 'en-GB,en;q=0.9',
    'Connection': 'keep-alive',
}

[Quint]

Or just remove the

, headers=headers.headers

from the

widevine_license = requests.post...

line.

[A_n_g_e_l_a]

Or just remove the

, headers=headers.headers

from the

widevine_license = requests.post...

line.

Mmm, the way I work it is never a good idea to alter a program so fundamental as l3.py, especially for a newbie. So they remove it and when they actually need headers.py, on a more complex site they will be wondering why it doesn't work. And then python error reporting won't be help much either. Stick with l3.py as writ.

There is a case for cloning l3.py, while learning the rudiments, naming it with the site you want keys for and perhaps declaring any fixed headers inside the program at the top under imports

headers = {
    '''whatever'''
}

Remove 'import headers'; and make suitable alteration to the code calling headers. ie headers = headers rather than headers = headers.headers.

[andrez4zv]

You have to fill the file "headers.py"

look at these post #33

https://forum.videohelp.com/threads/407635-Crash-course-on-downloading-ITVx-hub-please...e2#post2673701

Thanks, Cedric.

I understand. I will do the tests on another website. For example this:


[Attachment 67972 - Click to enlarge]

It does not work.

Is it for using a mobile?

[lomero]

vdocipher is a world apart ... quickly burns many cdm ...

[Quint]

Or just remove the

, headers=headers.headers

from the

widevine_license = requests.post...

line.

Mmm, the way I work it is never a good idea to alter a program so fundamental as l3.py, especially for a newbie.

Yes, yes, you are right generally. But especially this line is also to be altered if you want to pass some json, so it's in a way an "editable" line anyway.
Also newbies are careful enough to backup the whole thing they edit and go back to the copy after experimenting.

[andrez4zv]

vdocipher is a world apart ... quickly burns many cdm ...

You have to fill the file "headers.py"

look at these post #33

https://forum.videohelp.com/threads/407635-Crash-course-on-downloading-ITVx-hub-please...e2#post2673701

you should use protobuf version <= 3.20.0

The latest install, before 4 dropped. is

protobuf==3.20.3

and works just fine.

I think I'll give up, my intention was to download from vdo***her.

However, thank you very much to everyone who contributes to this forum... I give up, but I learned new things.

(sorry for my english)


Grettings.

[codehound]

VDO are on here

[mypride]

I used a 6 year-old phone and obtained my own CDM.
I tested it with https://bitmovin.com/demos/drm and another site that I am targeting.
Thank you very much.
However, I have one question.
For the lic url, I was just trying to filter with keywords in the DevTools in Chrome. Is there a better way to find the lic url? What if a site does not use these keywords?

[A_n_g_e_l_a]

I used a 6 year-old phone and obtained my own CDM.
I tested it with https://bitmovin.com/demos/drm and another site that I am targeting.
Thank you very much.
However, I have one question.
For the lic url, I was just trying to filter with keywords in the DevTools in Chrome. Is there a better way to find the lic url? What if a site does not use these keywords?

Well done and thanks for a good question.

Putting 'method: POST' in the filter box will likely show the license POST among others. Selecting by clicking on a POST and looking at its Request and Response will confirm which is which as far as a license is concerned. Then inspect the url and look for a keyword you can use next time. I have 'widevine', 'cassie', 'acquire' and simple old 'lice' in my filters.

You also may find licence urls are formulaic and only change with the addition of a video-id or some-such so you can avoid the licence lookup; and make a script that works; all just by knowing the mpd.

[mypride]

I used a 6 year-old phone and obtained my own CDM.
I tested it with https://bitmovin.com/demos/drm and another site that I am targeting.
Thank you very much.
However, I have one question.
For the lic url, I was just trying to filter with keywords in the DevTools in Chrome. Is there a better way to find the lic url? What if a site does not use these keywords?

Well done and thanks for a good question.

Putting 'method: POST' in the filter box will likely show the license POST among others. Selecting by clicking on a POST and looking at its Request and Response will confirm which is which as far as a license is concerned. Then inspect the url and look for a keyword you can use next time. I have 'widevine', 'cassie', 'acquire' and simple old 'lice' in my filters.

You also may find licence urls are formulaic and only change with the addition of a video-id or some-such so you can avoid the licence lookup; and make a script that works; all just by knowing the mpd.

Thank you for replying.
I see. That's the idea I was getting from reading up on "Decryption: The Dungeon of Despair". I hope I won't meet sites that are way too convoluted in hiding things.

[Starxx]

hello.

I'm trying to get the key with reference to the writing here, but I'm stuck on the way.
I've finished rooting my old Android, but I get an error when starting the frida server.
Looking up the error code and error message doesn't give much information, does anyone know?


[Attachment 68139 - Click to enlarge]

Thank you

[A_n_g_e_l_a]

... I get an error when starting the frida server.
Looking up the error code and error message doesn't give much information

That looks troublesome. Looking statvfs up on t'Internet it appears statvfs is part of Google's Bionic C++ library which would be system installed as part of the OS. You appear not to have it on your device. Or if it is there, the system cannot find it. Only you can know how you rooted the phone, but somehow part of the OS appears missing.

I think you are on your own on this one. Is it possible to completely do a re-install of an Official Google Android OS and root it? Failing that, I suggest you take your issue of missing statvfs to xda-developers.com, and ask on your phone's forum.

[Starxx]

... I get an error when starting the frida server.
Looking up the error code and error message doesn't give much information

That looks troublesome. Looking statvfs up on t'Internet it appears statvfs is part of Google's Bionic C++ library which would be system installed as part of the OS. You appear not to have it on your device. Or if it is there, the system cannot find it. Only you can know how you rooted the phone, but somehow part of the OS appears missing.

I think you are on your own on this one. Is it possible to completely do a re-install of an Official Google Android OS and root it? Failing that, I suggest you take your issue of missing statvfs to xda-developers.com, and ask on your phone's forum.

Thank you for your reply.

That seems like very bad news.
At first glance, I thought that rooting went well, but that may not be the case.
I'll try reinstalling the OS first, and if that doesn't work, I'll ask on the forum you gave me.

[Quint]

Why does it have to link an executable when starting Frida? Is that normal in Android, which I don't know at all?

[A_n_g_e_l_a]

Why does it have to link an executable when starting Frida? Is that normal in Android, which I don't know at all?

in no operating system can a program be run entirely on its on. It needs space reserved in memory at the very least and to be loaded into memory ready to be run. The program cannot do this itself. These are just the normal housekeeping duties any OS does; statvfs would appear to to be part of housekeeping.

We program at a level far removed from the machine language and it is easy to forget that the processor operates on a limited instruction set that loads data and operation commands into registers of bits. Our scripts are eventually changed into an assembly language for the machine to run. And it also worth remembering that the electronic circuits that underlie everything are simply flip-flops (a couple of transistors configured to hold an output at 5v or 0v), shift registers (a cascade of flip-flops) and comparators (bitwise logic).

So something has to intervene to get from Frida code to meaningful data outputs. Even the task of displaying a single pixel on the screen is not something any programmer codes for. The OS does all of that. Anti-aliasing (removing jaggies from screen text) took years to get right and no one thinks about it these days; it is just something the operating system does.

[Quint]

I am a programmer since 1984, when I "invented a lot of wheels" - that means I know all the things you mentioned. But you said it so nice and true, so thanks for this.
What is a bit hard to understand for me is just, that a complete ready server "app" needs to be linked before it starts, that's new to me, but as I said - my knowledge of Android is very low.

[Diazole]

hello.

I'm trying to get the key with reference to the writing here, but I'm stuck on the way.
I've finished rooting my old Android, but I get an error when starting the frida server.
Looking up the error code and error message doesn't give much information, does anyone know?


[Attachment 68139 - Click to enlarge]

Thank you

What android version are you running?

[Starxx]

hello.

I'm trying to get the key with reference to the writing here, but I'm stuck on the way.
I've finished rooting my old Android, but I get an error when starting the frida server.
Looking up the error code and error message doesn't give much information, does anyone know?


[Attachment 68139 - Click to enlarge]

Thank you

What android version are you running?

hello.

The Android version I'm running is "4.1.2".

[Diazole]

hello.

The Android version I'm running is "4.1.2".

Your android version is too old, upgrade to a newer version or install a custom ROM.

[Starxx]

hello.

The Android version I'm running is "4.1.2".

Your android version is too old, upgrade to a newer version or install a custom ROM.

I was able to get the key thanks to your advice.
thanks so much!

I had success by putting a custom rom (7.1.2) on my sleeping Nexus7.

Thanks to all who have helped on this forum

[iamghost]

what i done wrong? got T95 S1 here