VdoCipher decryption

[gurmurad]

Hi everyone,

I’m struggling to connect the dots for a VdoCipher decryption and I could really use some guidance. I feel like I have all the "ingredients" but I’m missing the final step to get the clear keys.

Here is my current setup and what I've done:

WVD: I have a valid L3 WVD from my device.

Frida: I’ve used Frida on my phone to monitor the session and try to intercept the keys/requests.

Downloading: I’m using N_m3u8DL-RE.exe to pull the streams. The files (MP4/M4A) download fine but remain encrypted.

The Problem: I have the MPD and the PSSH, but when I try to use my WVD with common Python scripts (like pywidevine), I get 403 errors or InvalidLicenseMessage (server returns a Service Certificate instead of the License).

I suspect I'm failing at the Request Wrapping part that VdoCipher requires, or I'm not handling the single-use auth tokens correctly in the headers.

I have all the logs and technical details ready. If anyone has experience specifically with VdoCipher’s wrapping mechanism and can help me figure out what I'm missing (either here or via PM), I would be extremely grateful.

Thanks for the help!

[Subtitles]

Here is the link to VDOCipher website
https://www.vdocipher.com/
It is highly DRM protected and it is a waste of time trying to download any videos.
Even screen capture is protected.
The only possibility is recording using a web cam or a dedicated camera (did not try it but I think it should work)

[Silv3r]

TubeDigger in Monitor Browser/Rec Mode

[Subtitles]

TubeDigger in Monitor Browser/Rec Mode

I tried TD but it ask to use Firefox browser to play the video (not inside TubeDigger)
I never get to use the TD record mode.
Please confirm if it works for you.

[TubeDigger]

This updated version should record from Firefox 148 & 149 (dev)

[Subtitles]

This updated version should record from Firefox 148 & 149 (dev)

It doesn't work after the update or maybe I am
missing something.

[Silv3r]

This updated version should record from Firefox 148 & 149 (dev)

It doesn't work after the update or maybe I am
missing something.

it still works but you may need to refresh multiple times before it will work


[Attachment 91574 - Click to enlarge]

[Subtitles]

OK it works.
What is confusing is that TubeDigger opens Firefox browser OUTSIDE of the application and then it records the stream with an error message, but it records OK.

[TubeDigger]

OK it works.
What is confusing is that TubeDigger opens Firefox browser OUTSIDE of the application and then it records the stream with an error message, but it records OK.

Firefox browser cannot be embedded into applications. And which error message?

[Subtitles]

Error 2075
open in updated Google Chrome

[Subtitles]

This updated version should record from Firefox 148 & 149 (dev)

Thanks a lot. Good work

[TubeDigger]

Error 2075
open in updated Google Chrome

It's error displayed in embedded browser because Verified Media Path (VMP) signature was not added to license request.
Option 'Monitor Browsers' records from external Firefox because authorized browsers have VMP signatures.

[Twinkey]

you can use streamfab to download vdocipher or
buy chrome cdm from zane on telegram :@ZANE_WASLEY

[HaleX]

you can use streamfab to download vdocipher or
buy chrome cdm from zane on telegram :@ZANE_WASLEY

they work for vdocipher?

[Twinkey]

you can use streamfab to download vdocipher or
buy chrome cdm from zane on telegram :@ZANE_WASLEY

they work for vdocipher?

yes both work now