Teach me How to correctly put Headers! Please

[user10thousand]

I really hate to create more topics and bother you asking for more decryption keys, so i'm back at it again trying to do it myself but i just can't seem to figure out the headers, i will give an example of the two videos i'm trying to decrypt right now and will show you everything that i know, hopefully that i get some help as to what is wrong with what i'm doing and why i can't get the keys,

1- I download the stream URL as "N_m3u8DL-RE"
2- I go to this website: https://cdrm-project.com/
3- Back to the video right click -> inspect -> refresh the page & hit play
4- with Tampermonkey installed, i find the PSSH in Console, copy & paste in the mentioned website
5- for the License URL, network -> filter search "wide" (or "wv") -> copy "Request URL" -> past it in cdrm site
6- for headers, network -> filter search "wide" (or "wv") -> I copy everything in "request headers" and paste it in the mentioned site

but the results are errors that i don't know what they mean, i'm just a newbie and these method i have it saved in a txt file so i won't forget it

Now i'm trying to decrypt these two videos:
https://www.6play.fr/timeline-p_25445/s1-e1-tale-of-two-cities-1-2-c_13054680
https://www.6play.fr/timeline-p_25445/s1-e2-tale-of-two-cities-2-2-c_13054681

------------------------------------------------------------------------------------
The headers i get when filter searching "WV" looks like this
accept:
*/*
accept-encoding:
gzip, deflate, br, zstd
accept-language:
en-US,en;q=0.9
connection:
keep-alive
dnt:
1
host:
mon.6cloud.fr
origin:
https://www.6play.fr
referer:
https://www.6play.fr/
sec-ch-ua:
"Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"
sec-ch-ua-mobile:
?0
sec-ch-ua-platform:
"Windows"
sec-fetch-dest:
empty
sec-fetch-mode:
cors
sec-fetch-site:
cross-site
sec-gpc:
1
user-agent:
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36

-------------------------------------------------------------------------------------
The headers i get when filter searching "wide" looks like this:
accept:
*/*
accept-encoding:
gzip, deflate, br, zstd
accept-language:
en-US,en;q=0.9
connection:
keep-alive
content-length:
4282
dnt:
1
host:
lic.drmtoday.com
origin:
https://www.6play.fr
referer:
https://www.6play.fr/
sec-ch-ua:
"Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"
sec-ch-ua-mobile:
?0
sec-ch-ua-platform:
"Windows"
sec-fetch-dest:
empty
sec-fetch-mode:
cors
sec-fetch-site:
cross-site
sec-gpc:
1
user-agent:
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
x-dt-auth-token:
eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.eyJvcHREYXRhI joie1wibWVyY2hhbnRcIjpcIm02XCIsXCJzZXNzaW9uSWRcIjp cInc5cmVwbGF5XCIsXCJ1c2VySWRcIjpcIm02Z3JvdXBfd2Vif F9sdWlkXzI0NDUxNGFjLTlhYjMtNDNiNS1hNWIxLTIwY2ZlMWJ kOTlmZFwifSIsImNydCI6Ilt7XCJhY2NvdW50aW5nSWRcIjpcI lwiLFwiYXNzZXRJZFwiOlwiY2xpcF8xMzA1NDY4MVwiLFwib3B cIjp7XCJjb25maWdcIjp7XCJIRFwiOntcIlBsYXlSZWFkeVwiO ntcImFuYWxvZ1ZpZGVvT1BMXCI6MTUwLFwiY29tcHJlc3NlZER pZ2l0YWxWaWRlb09QTFwiOjUwMCxcIm1pblNMXCI6MzAwMCxcI nVuY29tcHJlc3NlZERpZ2l0YWxWaWRlb09QTFwiOjMwMH0sXCJ XaWRldmluZU1cIjp7XCJtaW5TTFwiOjUsXCJyZXF1aXJlSERDU FwiOlwiSERDUF9WMVwifX0sXCJTRFwiOntcIlBsYXlSZWFkeVw iOntcImFuYWxvZ1ZpZGVvT1BMXCI6MTAwLFwiY29tcHJlc3NlZ ERpZ2l0YWxWaWRlb09QTFwiOjUwMCxcIm1pblNMXCI6MjAwMCx cInVuY29tcHJlc3NlZERpZ2l0YWxWaWRlb09QTFwiOjI1MH0sX CJXaWRldmluZU1cIjp7XCJtaW5TTFwiOjEsXCJyZXF1aXJlSER DUFwiOlwiSERDUF9OT05FXCJ9fSxcIlZJREVPX0FVRElPXCI6e 1wiUGxheVJlYWR5XCI6e1wiYW5hbG9nVmlkZW9PUExcIjoxMDA sXCJjb21wcmVzc2VkRGlnaXRhbFZpZGVvT1BMXCI6NTAwLFwib WluU0xcIjoyMDAwLFwidW5jb21wcmVzc2VkRGlnaXRhbFZpZGV vT1BMXCI6MjUwfSxcIldpZGV2aW5lTVwiOntcIm1pblNMXCI6M SxcInJlcXVpcmVIRENQXCI6XCJIRENQX05PTkVcIn19fX0sXCJ vdXRwdXRQcm90ZWN0aW9uXCI6e1wiYW5hbG9ndWVcIjpmYWxzZ SxcImRpZ2l0YWxcIjpmYWxzZSxcImVuZm9yY2VcIjpmYWxzZX0 sXCJwcm9maWxlXCI6e1wicHVyY2hhc2VcIjp7fX19XSIsImlhd CI6MTcyNzIxNDg3NiwianRpIjoiR3pMMEV6UzVhaW5lakpINFJ 5VkppQT09In0.5Au2csCwdqBPIr0zs2KY-lzz9TlZwybVuG-K0DsQh6FgHNp2UM1w0szOo6HqeLqarot24D84ZmY40srDb5iwe A

----------------------------------------------------------------------------------------------------------------------
should some lines/words of the headers be deleted? if so which ones and how to exactly know which part of Header to put and which part not to put, i know the problem is in the Header because i decrypt from other sites with only using the URL & PSSH, but with this site it didn't work so i need to figure out this Headers thing, some time back ago it used to work with just copy paste everything now it doesn't, and sorry if my post looks messy, any help is appreciated.

[shellcmd]

pssh: your pssh

lic: https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true

headers:

x-dt-auth-token: eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.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.5Au2csCwdqBPIr0zs2KY-lzz9TlZwybVuG-K0DsQh6FgHNp2UM1w0szOo6HqeLqarot24D84ZmY40srDb5iweA

some sites dont accept the parameters in lic, if so you need parse json response.

[2nHxWW6GkN1l916N3ayz8HQoi]

Here's the entire season 1. You gotta get a fresh MPD for each episode

N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/6/2/1/62162ec895c7fc74429c2c3fd5f036d8b1ecabdd/static/13054680_e205eba5c3fe3dcf19c09ed3b808c51d_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key f676827a53a410fff9af841b2135b4df:96743185e7ba0e4cd8af8f393bf31158 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_1_S1_E1_-_Tale_of_two_cities_12" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/8/a/3/8a3f63f3da203599ee5b687db63c70aef0c9f6cd/static/13054681_66871704b338da8101bf42baf2ba0a3f_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281186&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key a0c60253d37c83fd1a2b8dd9e7e49078:ae6d02acd1f9ed37c043adf1648d97ff --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_2_S1_E2_-_Tale_of_two_cities_22" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/0/f/d/0fde6a0b074f8795c17940ced8df86e988910aad/static/13054685_f002a74c43dfaf64156e0894d6543b42_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key 76675798400fb86ec6187794f96a1cd2:a78a2857d764a6bc5bb4aabd11998671 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_3_S1_E3_-_The_Ice_Bowl" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/d/2/3/d230cf43ce18ab470dc73b81504ca19d908371f1/static/13054682_bb72eca7b1b6ba9bdac2a9e3a8eb1700_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key a8fe97fb3a9b8450838bb614a7ddc523:01466d63d8f429767959b2f043feba42 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_4_S1_E4_-_The_Helmet_Catch" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/3/f/f/3ff05a1a6bc8387617402f527f3cf347c54c07d4/static/13054683_ac5f8f7973542eaa7a2d963b9cda60fc_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key 87b54fd23b34813bb35671885a6304bc:2b2c6ddbd30de7dda5e1842e4d499e43 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_5_S1_E5_-_Tuck_Rule" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/f/6/b/f6b198bb9ea157ac3505b5d64074a90be584b73f/static/13054684_722c6ce459ab54edde2e2f67a143dbaf_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key dbdb37d8d60de50d1b87b35130931ac6:dc187a8ce666e88334aa5f7f7090ae96 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_6_S1_E6_-_The_Greatest_Show_on_Turf" -M format=mkv

python widefrog.py "https://www.6play.fr/timeline-p_25445"

[lomero]

your error is use full header (second header "wide")

on cdrm-project add 'x-dt-auth-token' only

[user10thousand]

pssh: your pssh

lic: https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=true

headers:

x-dt-auth-token: eyJhbGciOiJIUzUxMiIsInR5cCI6IkpXVCJ9.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.5Au2csCwdqBPIr0zs2KY-lzz9TlZwybVuG-K0DsQh6FgHNp2UM1w0szOo6HqeLqarot24D84ZmY40srDb5iweA

some sites dont accept the parameters in lic, if so you need parse json response.

Thanks, i tried using your infos but it didn't work, i put my PSSH in its bracket in CDM site, i copied the lic you provided and pasted it in the Licence URL bracket, then i copied the "x-dt-auth-token" you provided and pasted it in the bracket of Headers, first i didn't copy the sentence (x-dt-auth-token: ) then i copied the whole thing, but the result is this:
Headers could not be loaded correctly, please make sure they are formatted in python dictionary

should the headers code be pasted in another bracket? could you please show me baby steps on which part exactly of the second headers i provided in my topic to paste n the headers bracket, and what is this thing about python and formatting i have no idea but i can learn.

[user10thousand]

Here's the entire season 1. You gotta get a fresh MPD for each episode

N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/6/2/1/62162ec895c7fc74429c2c3fd5f036d8b1ecabdd/static/13054680_e205eba5c3fe3dcf19c09ed3b808c51d_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key f676827a53a410fff9af841b2135b4df:96743185e7ba0e4cd8af8f393bf31158 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_1_S1_E1_-_Tale_of_two_cities_12" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/8/a/3/8a3f63f3da203599ee5b687db63c70aef0c9f6cd/static/13054681_66871704b338da8101bf42baf2ba0a3f_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281186&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key a0c60253d37c83fd1a2b8dd9e7e49078:ae6d02acd1f9ed37c043adf1648d97ff --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_2_S1_E2_-_Tale_of_two_cities_22" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/0/f/d/0fde6a0b074f8795c17940ced8df86e988910aad/static/13054685_f002a74c43dfaf64156e0894d6543b42_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key 76675798400fb86ec6187794f96a1cd2:a78a2857d764a6bc5bb4aabd11998671 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_3_S1_E3_-_The_Ice_Bowl" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/d/2/3/d230cf43ce18ab470dc73b81504ca19d908371f1/static/13054682_bb72eca7b1b6ba9bdac2a9e3a8eb1700_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key a8fe97fb3a9b8450838bb614a7ddc523:01466d63d8f429767959b2f043feba42 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_4_S1_E4_-_The_Helmet_Catch" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/3/f/f/3ff05a1a6bc8387617402f527f3cf347c54c07d4/static/13054683_ac5f8f7973542eaa7a2d963b9cda60fc_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key 87b54fd23b34813bb35671885a6304bc:2b2c6ddbd30de7dda5e1842e4d499e43 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_5_S1_E5_-_Tuck_Rule" -M format=mkv 
N_m3u8DL-RE "https://lbcdn.6cloud.fr/resource/m6web/s/m6web/output/f/6/b/f6b198bb9ea157ac3505b5d64074a90be584b73f/static/13054684_722c6ce459ab54edde2e2f67a143dbaf_web_dash_upTo1080p_1080p_vbr_cae_drm_software.mpd?expiration=1727281181&scheme=https&groups%5B0%5D=m6web&token=<TOKEN>" --key dbdb37d8d60de50d1b87b35130931ac6:dc187a8ce666e88334aa5f7f7090ae96 --save-dir "media\6play_fr\Timeline\Rail_1_Saison_1" --save-name "Content_6_S1_E6_-_The_Greatest_Show_on_Turf" -M format=mkv

python widefrog.py "https://www.6play.fr/timeline-p_25445"

I appreciate you taking the time and giving me the decryption keys i now have decrypted the two episodes
but please i need to learn how to get the keys myself, in my topic i've showed you everything that i know, it would be much helpful if you can show me how to get the hang of the Headers, which part of the headers to use and how to use it? can you highlight the correct lines based on the Headers i provided in post?

[user10thousand]

your error is use full header (second header "wide")

on cdrm-project add 'x-dt-auth-token' only

Thank, but i added only the "x-dt-auth-token" as you said but i still get errors, i put the PSSH in its bracket on CDM site, i put the lic in the Licence URL bracket, then i copied only the "x-dt-auth-token" and pasted it on the headers bracket, and the result is this:
Headers could not be loaded correctly, please make sure they are formatted in python dictionary.

[2nHxWW6GkN1l916N3ayz8HQoi]

it would be much helpful if you can show me how to get the hang of the Headers, which part of the headers to use and how to use it

Your mistake is that you use cdrm project. The license requests returns a json. From that json you need to access the value of the key "license". You can't do any of that with cdrm since it expects a direct result. So use other tools. Either the one I posted, or a key extractor from the sticky threads.

Edit: Apparently I was mistaken. My bad. Cdrm needs proper parsing for input only (right challenge schema) and not output. That's good to know. So with the right formatted headers it should work for @OP's case

[Goku73]

There is at least a python script and an extension you can find here on the site that can help you, here is the key to the first video as an example.

[TPD94]

Just to clear some things up, CDRM accepts params off it's license URL's -- the requests library in python handles params on url's accordingly. Second was just a matter of misformatting. The OP has the wrong format, hence why the old extension still works as shown above, which uses purely web API