Extract video from streaming application with AES-128 decryption key

[taleporos]

I am creating a new post, because I asked in a previous old thread, but the issue is not exactly the same.

I am using a streaming application that works only on windows. I've managed to find the log file ( Part of it here, all of it here) in order to get the streaming link: http://212.205.188.205:80/88888888/16/20190614/268481879/5.m3u8

I run the

streamlink http://212.205.188.205:80/88888888/16/20190614/268481879/5.m3u8 best

command but i got the following

[stream.hls][error] Failed to create decryptor: Unable to open URL: https://ipca.ott.otenet.gr/CAB/keyfile?s=1096&r=OTE0000014487OTT&t=VOD&p=0&Kd=6E6ACC86...2DF403435AD960 (HTTPSConnectionPool(host='ipca.ott.otenet.gr', port=443): Max retries exceeded with url: /CAB/keyfile?s=1096&r=OTE0000014487OTT&t=VOD&p=0&Kd=6E6ACC8659C593E6192C45C209911172&Kc=50D4944C8E8A11E9A52DF403435AD960 (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:645)'),)))
[cli][error] Try 1/1: Could not open stream <HLSStream('http://212.205.188.205:80/88888888/16/20190614/268481879/5.m3u8')> (No data returned from stream)
error: Could not open stream <HLSStream('http://212.205.188.205:80/88888888/16/20190614/268481879/5.m3u8')>, tried 1 times, exiting

In order to run the application, I have to login via Chrome (using HULA VPN) and find the link from the application's website. The link forwards me to the application for the streaming. Any clues how to get properly the key?

[ponens]

I am using a streaming application that works only on windows.

...
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
...

The link forwards me to the application for the streaming.

What exactly do you mean when you use the word "application"?

Do you mean a distinct executable program that you have to install in windows and use instead of the browser?

If so, it appears that such application includes (contains within) a SSL certificate and private key for https.

You won't be able to access any https urls outside of the application unless you extract the SSL certificate and private key from the application.

[taleporos]

Yes a distinct executable program, I am 99% sure that when I login to the application's website, it gives me access to the SSL certificate and somehow transfers it to the application. Is there any way to find out if that's true? I believe it's much easier from getting that via the application (which is like a black box). I've also managed to run an other VPN, so the IP wasn't the problem, somehow they have connected that certificate via my username/password.

[ponens]

Ordinarily, fiddler would be useful to intercept the https ssl traffic from the app. But it probably won't be of any use when a private ssl cert is used.

You're left to debugging the app itself (but it probably has anti-debugging code), or system memory capture imaging - hoping that the cert is in the clear somewhere in memory. Both of these approaches are non-trivial.

[taleporos]

Ordinarily, fiddler would be useful to intercept the https ssl traffic from the app. But it probably won't be of any use when a private ssl cert is used.

You're left to debugging the app itself (but it probably has anti-debugging code), or system memory capture imaging - hoping that the cert is in the clear somewhere in memory. Both of these approaches are non-trivial.

I'd like to give it a try, but I haven't done any of those 1) using fiddler or 2)debugging an app. If you could give me any more clues about the next steps...

[taleporos]

On the log file I found that

[2019-06-19 14:52:24.882|DEBUG|Epplib|EppAssistant.cpp:1887|15616] Set the cert file full path:C:\Program Files (x86)\APP TV GO\ott_rootca_bundle.crt

Now the .cert is not in the folder, could it be the one that I am looking for? And if it is, what should i do with that? I can see that

--http-ssl-cert-crt-key CRT_FILENAME KEY_FILENAME

needs a .crt and a .key file, so still need the key, right?

[taleporos]

Anything useful from the website?

Request URL: wss://tvgoplayer.gr:9498/command
Request Method: GET
Status Code: 101 Web Socket Protocol Handshake
Connection: Upgrade
Sec-WebSocket-Accept: v5Au35sHicAHbRkq0FrpHGBK7EM=
Upgrade: websocket
Accept-Encoding: gzip, deflate, br
Accept-Language: en-GB,en-US;q=0.9,en;q=0.8
Cache-Control: no-cache
Connection: Upgrade
Host: tvgoplayer.gr:9498
Origin: http://www.cosmotetvgo.gr
Pragma: no-cache
Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Sec-WebSocket-Key: dAn9Wd41ptPuFTxrCUYxcg==
Sec-WebSocket-Version: 13
Upgrade: websocket
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36

GlobaleConfig = {
    culture: 'en',
    version: 'IPTV_EPG_V100R003C03LOTE96B003',
    ssh_enable: 1,
    versionDate: 20161205,
    defaultAvater: '0',
    batchlimit: 10,
    macPlugType: 'HUAWEI',
    profilelimit: 10,
    ifShowWhatsNew: false,
    boardType: 2,
    //SocialUrl:'http://173.18.1.200:9002'
    SocialUrl: 'https://socialtv.hybrid.otenet.gr:9002',
    //https端口与http端口的映射定义
    protocolPortMap: {
        "443": "80",
        "8443": "8080",
        "33207": "33200"
    }
};

if (/windows|win32/i.test(navigator.userAgent)) {
    GlobaleConfig.macPlugType = 'HW';
}

GlobaleConfig.getHttpsPort = function(){
    if (location.protocol == 'https') {
        return location.port;
    }
    
    for (prop in GlobaleConfig.protocolPortMap) {
        if (GlobaleConfig.protocolPortMap[prop] == location.port) {
            return prop;
        }
    }
    
    return location.port;
}

GlobaleConfig.getHttpPort = function(){
    if (location.protocol == 'http') {
        return location.port;
    }
    
    for (prop in GlobaleConfig.protocolPortMap) {
        if (prop == location.port) {
            return GlobaleConfig.protocolPortMap[prop];
        }
    }
    return location.port;
}

POST http://www.cosmotetvgo.gr/EPG/JSON/ExecuteBatch?PlayRecord HTTP/1.1
Host: www.cosmotetvgo.gr
Connection: keep-alive
Content-Length: 100
Accept: application/json, text/javascript, */*; q=0.01
Origin: http://www.cosmotetvgo.gr
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
Content-Type: application/json;charset=UTF-8
Referer: http://www.cosmotetvgo.gr/EPG/jsp/webtv/index.jsp
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: JSESSIONID=A92503198A49B82F4E78F50A265C1219

{"requestList": [{"name": "PlayRecord", "param":{"recordtype":5,"playtype":"3","channel":"23082"}}]}

[taleporos]

I've also tried

streamlink --http-header "User-Agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" --http-cookie "JSESSIONID=A92503198A49B82F4E78F50A265C1219" http://212.205.188.205:80/88888888/16/20190614/268481879/5.m3u8 best

or

streamlink --https-proxy "socks5://212.205.188.85:80" --http-header "User-Agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" --http-cookie "JSESSIONID=A92503198A49B82F4E78F50A265C1219" --hls-segment-key-uri "https://ipca.ott.otenet.gr/CAB/keyfile?s=1096&r=OTE0000014492OTT&t=VOD&p=0&Kd=587 9DD71890FA532E32285E3B30C4F99&Kc=9F25015A8E9811E9A 52DF403435AD960" http://212.205.188.205:80/88888888/16/20190614/268481879/5.m3u8 best

I think I am close, any clue how to pass my username and password, maybe that's the problem... or any other clues?

[SZS0]

Hello, was this ever solved or just stuck, im facing same issue with SSL Certs

[LZAA]

Url?

[SZS0]

Hello I sent you all details through DMs