howto-deal-with-HLS-128-bit-aes-encrypted-the-hard-one-2.0-version

[anik007]

Can you tell where to exactly find the value that is needed to be tweaked in the code mentioned above??

Check this
https://forum.videohelp.com/threads/408196-howto-deal-with-HLS-128-bit-aes-encrypted-t...e3#post2716234

HEY CAN YOU PLEASE TELL ME WHAT TO DO IF THE /timestamp encoded key fetching url has 48 characters instead of normally 64 characters


Like for this url which was being discussed in the topic that is :

https://www.futurly.com/s/preview/courses/blender-architecture#6337f80fe4b05a534f0e3d5a

and when we look here we are getting a 64 char encoded string which later is being decoded by the apkId and the code snippet that you gave...


[Attachment 91279 - Click to enlarge]

See it has 64 char and the script also handles the 64 char case only and takes the key from apkid accordingly and decodes it right...


Upto here everything is fine but now,
comes the 48 char one.... this too is a preview course but requires login to watch

The url of the course is https://www.iariwallah.com/s/courses/697487722650c03d1c4ea6bb/take [Login needed]


[Attachment 91277 - Click to enlarge]


see here it is 48 characters okay and now when i run my hlsdl downloader as in your script it is unable to decode as it strips from an area greater than the 48 char which is usual for the 64 char timestamp value

Enter the apkId: 3037633662373634343936623339333430376336623736343439366233393334
Enter Index.m3u8 URL: https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/index.m3u8
Fetching playlist: https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/index.m3u8
Video playlist: https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/hls_500k_.m3u8
Key URL: https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/k/timestamp
Fetching key data...
Decrypted key (hex): 
Decrypted key (base64): 
Running: hlsdl -K  -o iariwallah.mp4 "https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/index.m3u8"
Error: AES key value : 32 characters hexstring expected
hlsdl v0.27
(c) 2017-2020 @selsta, samsamsam@o2.pl
Usage: hlsdl [options] url

-b ... Automatically choose the best quality.
-W ... Choose largest width lower or equal than this.
-H ... Choose largest height lower or equal than this.
-A ... Select audio language.
-v ... Verbose more information.
-o ... Choose name of output file ("-" alias for stdout).
-u ... Set custom HTTP User-Agent header.
-h ... Set custom HTTP header.
-p ... Set proxy uri.
-k ... Allow to replace part of AES key uri - old.
-n ... Allow to replace part of AES key uri - new.
-f ... Force overwriting the output file.
-F ... Force ignore detection of DRM.
-K ... Force AES key value (hexstring)
-q ... Print less to the console.
-d ... Print the openssl decryption command.
-t ... Print the links to the .ts files.
-s ... Set live start offset in seconds.
-i ... Set live stream download duration in seconds.
-e ... Set refresh delay in seconds.
-r ... Set max retries at open.
-w ... Set max download segment retries.
-a ... Set additional url to the audio media playlist.
-c ... Treat HTTP code 206 as 200 even if request was made without range header.
-C ... the file name of file holding cookie data in the old Netscape / Mozilla cookie data format.
@xyz ➜ /workspaces/codespaces-blank (main) $

[Attachment 91280 - Click to enlarge]

[Sagnik]

see here it is 48 characters okay and now when i run my hlsdl downloader as in your script it is unable to decode as it strips from an area greater than the 48 char which is usual for the 64 char timestamp value

No problem at all. Go to sources tab, find the hls js file, find the decrypt function, change the downloader code accordingly.
The process is already discussed here https://forum.videohelp.com/threads/408196-howto-deal-with-HLS-128-bit-aes-encrypted-t...e3#post2716234

If you find difficulty, don't hesitate to post here.

[anik007]

see here it is 48 characters okay and now when i run my hlsdl downloader as in your script it is unable to decode as it strips from an area greater than the 48 char which is usual for the 64 char timestamp value

No problem at all. Go to sources tab, find the hls js file, find the decrypt function, change the downloader code accordingly.
The process is already discussed here https://forum.videohelp.com/threads/408196-howto-deal-with-HLS-128-bit-aes-encrypted-t...e3#post2716234

If you find difficulty, don't hesitate to post here.

By using the method that you mentioned i did and succeeded for this video url
https://www.futurly.com/s/preview/courses/blender-architecture#6337f80fe4b05a534f0e3d5a

It was downloading with the updated script that i got from the latest js in the network tab source section...


but this link https://www.iariwallah.com/s/courses/697487722650c03d1c4ea6bb/take it is giving a 48 char encoded string when we hit the timestamp url and thats why it is unable to decode because its expecting a 64 char string

can u kindly help me by just logging in to this website https://www.iariwallah.com/s/courses/697487722650c03d1c4ea6bb/take and see whats going on the js is same as it is as i have succeeded with link 1 but failed in link 2

Enter the apkId: 3037633662373634343936623339333430376336623736343439366233393334
Enter Index.m3u8 URL: https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/index.m3u8
Fetching playlist: https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/index.m3u8
Video playlist: https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/hls_500k_.m3u8
Key URL: https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/k/timestamp
Fetching key data...
Decrypted key (hex): 
Decrypted key (base64): 
Running: hlsdl -K  -o iariwallah.mp4 "https://qcdn.spayee.in/spees/w/o/678bb76294c7070b68658977/v/69779bbc3678eb6e7111aed9/u/6995ef2d54709b0018d52673/t/52212b707f5c2e8dd95fa5f518be3623/p/assets/videos/678bb76294c7070b68658977/2026/01/26/69779bbc3678eb6e7111aed9/index.m3u8"
Error: AES key value : 32 characters hexstring expected
hlsdl v0.27
(c) 2017-2020 @selsta, samsamsam@o2.pl
Usage: hlsdl [options] url

-b ... Automatically choose the best quality.
-W ... Choose largest width lower or equal than this.
-H ... Choose largest height lower or equal than this.
-A ... Select audio language.
-v ... Verbose more information.
-o ... Choose name of output file ("-" alias for stdout).
-u ... Set custom HTTP User-Agent header.
-h ... Set custom HTTP header.
-p ... Set proxy uri.
-k ... Allow to replace part of AES key uri - old.
-n ... Allow to replace part of AES key uri - new.
-f ... Force overwriting the output file.
-F ... Force ignore detection of DRM.
-K ... Force AES key value (hexstring)
-q ... Print less to the console.
-d ... Print the openssl decryption command.
-t ... Print the links to the .ts files.
-s ... Set live start offset in seconds.
-i ... Set live stream download duration in seconds.
-e ... Set refresh delay in seconds.
-r ... Set max retries at open.
-w ... Set max download segment retries.
-a ... Set additional url to the audio media playlist.
-c ... Treat HTTP code 206 as 200 even if request was made without range header.
-C ... the file name of file holding cookie data in the old Netscape / Mozilla cookie data format.
@nehaop24 ➜ /workspaces/codespaces-blank (main) $

[Sagnik]

Go to sources and provide the hls js url.

[anik007]

Go to sources and provide the hls js url.

https://d502jbuhuh9wk.cloudfront.net/static/files/hls.324013256645304581.min.js

[Sagnik]

Try this
https://forum.videohelp.com/threads/408196-howto-deal-with-HLS-128-bit-aes-encrypted-t...e7#post2775904