widevine decrypt help

[birbal1]

mpd url

https://drvideo-ak.akamaized.net/video-sg3/53ae84d1-8b41-4323-8be9-a0fe5ddbf130/5255.ism/manifest(format=mpd-time-csf)

lic url embedded in manifest

https://drvideo.keydelivery.mediaservices.windows.net/Widevine/?kid=a09a150f-4f3b-407e-b034-54a13970202b

pssh
AAAAMnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAABISEKCaFQ 9PO0B+sDRUoTlwICs=

Headers

Dr-Platform: android
Dr-Dv: m.2061a6e23daeed98
course-id: 1
Dr-UID: 6197bdf7aa8ded1766241523 - MFREE
Dr-App: marrow
Dr-Dv-ENC: obexJBKqdVvXmpv7H7fvc7J+dR0HueAT1fYe3edYg98ysexpH0 uzT1dPhgJLxFv7FA==
Dr-Dv-Model: M2007J17I
Dr-Token: .eJxVztEKwjAMheF3ybXI2m7p5suUaDIouKVksl2I725HQfD25-Nw3pAyww3QTfHOcyQaWdhFRN-7wQe4AFti2fNDKluuvkNHKD4wifA0NkClpF1sy7pWFbqhZd3-6s-eS2SmRyvlSa9ZbamZVjatjz5fps8vnA.FHlPdw.cU9iv7UGWbB z-O5eqWVeewLMDSY
Dr-App-Version: 308
Dr-Dv-Ts: 1637515407460
User-Agent: Marrow/7.15.1 (com.marrow; build:308; Android 11(30); Device)
Accept-Encoding: gzip
Host: drvideo-ak.akamaized.net
Connection: Keep-Alive

Authorization:  Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJodHRwczpcL1wvbWVkaWNhbC5wcmVwbGFkZGVyLmNvbSIsImF1ZCI6InVybjpwcmVtaXVtIiwiZXhwIjoxNjM3NjkxNzAwLCJuYmYiOjE2Mzc2OTE0MDB9.jZBnTZxNKFd3Kwd13JbcywVoYb36qpwRY_WcTPkX4Dg

unable to decrypt please help

[blimey]

The important header value begins with: Authorization Bearer ey ...

Which you don't show in your list. That header value needs to be fresh, if it is even more than a couple of minutes old, it will have expired.

You can use an azure demo player to test;

https://ampdemo.azureedge.net/

Enter the mpd url, and choose update player.

Use a browser extension like modheader to add the "Authorization Bearer" header value.

[lomero]

if you play video into some pc browser you get Authorization Bearer on dev tool
anyway best way is write here video link and login if needed to play.

[lomero]

or also play video on your windows browser, then save and share cookie. with this don't need login data.

[birbal1]

https://video.prepladder.com/2019-09-08_11371_12651/Lipoproteins-10786/dash.mpd

https://widevine-dash.ezdrm.com/widevine-php/widevine-foreignkey.php?pX=0E4BB2&CustomData=c423fa0b81ebb470cd2431d3431ae24cb2f92736ee928636d7ef826317427debprepladder

Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJod HRwczpcL1wvbWVkaWNhbC5wcmVwbGFkZGVyLmNvbSIsImF1ZCI 6InVybjpwcmVtaXVtIiwiZXhwIjoxNjM3NjkxNzAwLCJuYmYiO jE2Mzc2OTE0MDB9.jZBnTZxNKFd3Kwd13JbcywVoYb36qpwRY_ WcTPkX4Dg
securityLevel: L3
Content-Type: application/octet-stream
User-Agent: prepladder/2.0.79-p (Linux;Android 11) ExoPlayerLib/2.10.8
Content-Length: 2159
Host: widevine-dash.ezdrm.com
Connection: Keep-Alive
Accept-Encoding: gzip

try this

[birbal1]

The important header value begins with: Authorization Bearer ey ...

Which you don't show in your list. That header value needs to be fresh, if it is even more than a couple of minutes old, it will have expired.

You can use an azure demo player to test;

https://ampdemo.azureedge.net/

Enter the mpd url, and choose update player.

Use a browser extension like modheader to add the "Authorization Bearer" header value.

https://video.prepladder.com/2019-09-08_11371_12651/Lipoproteins-10786/dash.mpd

https://widevine-dash.ezdrm.com/widevine-php/widevine-foreignkey.php?pX=0E4BB2&CustomD...7debprepladder

Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJod HRwczpcL1wvbWVkaWNhbC5wcmVwbGFkZGVyLmNvbSIsImF1ZCI 6InVybjpwcmVtaXVtIiwiZXhwIjoxNjM3NjkxNzAwLCJuYmYiO jE2Mzc2OTE0MDB9.jZBnTZxNKFd3Kwd13JbcywVoYb36qpwRY_ WcTPkX4Dg
securityLevel: L3
Content-Type: application/octet-stream
User-Agent: prepladder/2.0.79-p (Linux;Android 11) ExoPlayerLib/2.10.8
Content-Length: 2159
Host: widevine-dash.ezdrm.com
Connection: Keep-Alive
Accept-Encoding: gzip

try this

[blimey]

That's a different content source than the one you mentioned before.

The first source uses azure (mediaservices<dot>windows<dot>net).

The second uses ezdrm.

The azure source should also have an "Authorization: Bearer" header value.

Why are you mixing them? Did you give up on the first source, and now just want to move on to a different source?

[mister_ nex]

For starters, if its WV it needs a completely different approach anyway- give us the url of the video

the main rule if you want an answer to your question

[birbal1]

That's a different content source than the one you mentioned before.

The first source uses azure (mediaservices<dot>windows<dot>net).

The second uses ezdrm.

The azure source should also have an "Authorization: Bearer" header value.

Why are you mixing them? Did you give up on the first source, and now just want to move on to a different source?

I could not find auth bearer there
could u help me with second one

[birbal1]

For starters, if its WV it needs a completely different approach anyway- give us the url of the video

the main rule if you want an answer to your question

this shit runs only on app i dont have video url

[lomero]

lic url is truncated
put full link into code tag


[Attachment 61970 - Click to enlarge]

and PSSH needed

[birbal1]

lic url is truncated
put full link into code tag


[Attachment 61970 - Click to enlarge]

and PSSH needed

I have made the edits in original post
and thats the full url thats all i see in manifest

[mister_ nex]

this shit runs only on app i dont have video url

try to use traffic sniffer Debug Proxy
https://youtu.be/Gr2Zx4IJSVQ
https://techwiser.com/wireshark-alternatives-for-android/