Help with new type of drm-video...

[larley]

WidevineProxy2 is doing nothing wrong, the server chooses to send different keys

[Sonic934]

WidevineProxy2 is doing nothing wrong, the server chooses to send different keys

Hmm, interesting. Then they seem to have a way to identify valid (own) requests. Maybe they match the OS from the "initiate" API request with the OS from the CDM and return fake keys if they don't match.

[LoveDefender]

Let's see for how long this works: https://larley.dev/Page/Fastevo

How do I use this? I have a video I want to download. How do i find the videos DataToken?

[larley]

Open inspect element and search for data token, then paste the value

[DrFunTimes]

Open inspect element and search for data token, then paste the value

Is it possible that certain sites are masking this value, or declaring it as something else (and not calling it literally "data token"/"datatoken")? I've made a pretty exhaustive search on Darkfans (both using inspect element directly and HTTP Toolkit), and have turned up no results for data token.

[DrFunTimes]

(Mods, you can delete my previous response - it hasn't been approved yet)

I can confirm successful downloads using larley's tool (thank you!) - the site in question does not call it "datatoken". I had previously found a value that looked like a video identifier (it begins with v4.local), but was previously unable to use it successfully. I suspect that the value I was using before was just truncated - I have now been able to use that value and successfully download files.

[larley]

I thought it was "data token"/"datatoken" when I wrote that message, but it's actually called "data-token". Searching for that works

[YmFzZTY0]

(Mods, you can delete my previous response - it hasn't been approved yet)

I can confirm successful downloads using larley's tool (thank you!) - the site in question does not call it "datatoken". I had previously found a value that looked like a video identifier (it begins with v4.local), but was previously unable to use it successfully. I suspect that the value I was using before was just truncated - I have now been able to use that value and successfully download files.

Deleting posts in threads doesn't help anyone else in the future reading back for solutions, from similar issues that they may encounter.

[Silv3r]

All credits goes to AddieCh

// ==UserScript==
// @name         Darkfans Click to Copy Data-Token
// @namespace    http://tampermonkey.net
// @version      1.5
// @description  Adds a floating button to copy the data-token on demand.
// @author       AddieCh
// @include      /^https?:\/\/(?:[^\/]+\.)?darkfans\.com/.*$/
// @grant        GM_setClipboard
// @run-at       document-end
// ==/UserScript==

(function() {
    'use strict';

    // 1. Create the floating button
    const btn = document.createElement('button');
    btn.textContent = '�� Copy Token';

    // Style the button to float in the bottom-right corner
    btn.style.position = 'fixed';
    btn.style.bottom = '20px';
    btn.style.right = '20px';
    btn.style.zIndex = '10000';
    btn.style.backgroundColor = '#007bff';
    btn.style.color = '#fff';
    btn.style.border = 'none';
    btn.style.borderRadius = '5px';
    btn.style.padding = '10px 15px';
    btn.style.cursor = 'pointer';
    btn.style.fontFamily = 'sans-serif';
    btn.style.fontSize = '14px';
    btn.style.fontWeight = 'bold';
    btn.style.boxShadow = '0 4px 6px rgba(0,0,0,0.2)';
    btn.style.transition = 'background-color 0.2s';

    // Hover effects
    btn.onmouseover = () => btn.style.backgroundColor = '#0056b3';
    btn.onmouseout = () => btn.style.backgroundColor = '#007bff';

    // 2. Define what happens when clicked
    btn.onclick = function() {
        const element = document.querySelector('[data-token]');

        if (element) {
            const token = element.getAttribute('data-token');
            if (token) {
                // Copy to clipboard via Tampermonkey API
                GM_setClipboard(token);

                // Visual feedback on the button
                btn.textContent = '✅ Copied!';
                btn.style.backgroundColor = '#28a745';

                // Reset button text after 2 seconds
                setTimeout(() => {
                    btn.textContent = '�� Copy Token';
                    btn.style.backgroundColor = '#007bff';
                }, 2000);
                return;
            }
        }

        // Error feedback if token isn't found
        btn.textContent = '❌ No Token Found';
        btn.style.backgroundColor = '#dc3545';
        setTimeout(() => {
            btn.textContent = '�� Copy Token';
            btn.style.backgroundColor = '#007bff';
        }, 2000);
    };

    // 3. Inject the button into the webpage
    document.body.appendChild(btn);
})();

[1729]

Yeah the change is pretty simple. As we know, companies like these like to read forums like this, and patch any "vulnerabilities" they find. Fastevo is just another JS slop wrapper around Widevine, who have "figured out" that changing keys returned by the license server can be frustrating for users (I believe it's being run by a single person). I'm trying to not make this too public in the interest of those who are already using this change to get correct keys. These users can send me a PM in case you're wondering what you need to change:

315779-BPHvZ
315762-gbdenser
315606-mrbrwn
310217-slayer36

Can someone give a hint of what the key transformation is? I was trying to figure it out from the FastEvo code a few months ago and gave up, and seeing now that some people found it.

[Sonic934]

Can someone give a hint of what the key transformation is? I was trying to figure it out from the FastEvo code a few months ago and gave up, and seeing now that some people found it.

My guess is that they compare the browser OS with the OS of the CDM with which the Widevine request has been sent. In a web browser both should have the same OS, but if you use an Android CDM for the Widevine request, it differs from the browser. Maybe there are also other checks.
Instead of an error message, they just send wrong/fake keys to confuse you.

[larley]

Yes one of the device properties in the /initiate request must be set to either "Android" or "android" (don't remember which), that's all