How are you going to respond to widevine l3 decryptor's death at May 31st?

[jdanielw]

Hi, does anyone know if http://getwvkeys.herokuapp.com/ supports headers with Bearer tokens in them?
For example

accept: */*
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
authorization: Bearer st2.s.AcbH5vBpuw.jtykAAtHRwUecQeFvobDljRnGh2Bcu5S_R0mYX2pJhCv0y8SnWH9Z1G15zmxRundKP9LKHLCvtvFJGRPHW2X0PF1uQVLS9AJGQwZPyIcfIM.Ax_mYl94yt11aqtcxAgI9lqiF1GCx4FumwEoNNTLCBevbUwx9kD2dbHikShrZsmoxwTGB_ES2W8-7x9LJz8Jjg.sc3
content-length: 104
content-type: application/json; charset=UTF-8

I've gotten the site to give me keys for other videos but this is the first video i encounter with bear auths in the header and I cant seem to get it to work, thank you!

Ghost D'ont work with starzplay.
license request needs extra json exchange to get keys

Out of curiosity, what is the coding required in wks-keys to make this exchange? The bearer token has a header, payload and a signature that is base 64 encrypted. Surely it is a simple solution?

[Fjullekulle]

Anyone know why getwvkeys only say "LICENSE DENIED" for Paramount+?

[darkw4v3]

Anyone know why getwvkeys only say "LICENSE DENIED" for Paramount+?

Blacklisted CDM??

[Fjullekulle]

Anyone know why getwvkeys only say "LICENSE DENIED" for Paramount+?

Blacklisted CDM??

No I mean on http://getwvkeys.**********.com/

I have right PSSH, right licenseserver and right header.

I have tried 3 movies and all say the same.

[darkw4v3]

I don't know the internals of Ghost's site, perhaps he's got several CDMs that he rotates around as requests come in.

However, with the sheer number of invalid requests going through his site from people trying to get keys - it wouldn't surprise me if his CDM (or one of them) got killed off.

Again, I could be totally wrong in how it works - I'm assuming that, because that's how I built mine.

[Fjullekulle]

I don't know the internals of Ghost's site, perhaps he's got several CDMs that he rotates around as requests come in.

However, with the sheer number of invalid requests going through his site from people trying to get keys - it wouldn't surprise me if his CDM (or one of them) got killed off.

Again, I could be totally wrong in how it works - I'm assuming that, because that's how I built mine.

Oki.

I have read somewhere about the site wants "JSON formatted payload with the license request in base64 like many websites do (Amazon, Apple Music/TV)".
But I have not find out how I shall do for get that.

[darkw4v3]

Oki.

I have read somewhere about the site wants "JSON formatted payload with the license request in base64 like many websites do (Amazon, Apple Music/TV)".
But I have not find out how I shall do for get that.

I haven't tried Para+ - it's certainly possible that's the problem, although I would expect that to be more of a "bad request" type response. I can't confirm though.

[Fjullekulle]

Oki.

I have read somewhere about the site wants "JSON formatted payload with the license request in base64 like many websites do (Amazon, Apple Music/TV)".
But I have not find out how I shall do for get that.

I haven't tried Para+ - it's certainly possible that's the problem, although I would expect that to be more of a "bad request" type response. I can't confirm though.

Oki. Do you know how I do a "JSON formatted payload with the license request in base64" from the header? So coul´d I try if it will work. Coul´d I do that with Firefox?

[EatThis]

I don't know the internals of Ghost's site, perhaps he's got several CDMs that he rotates around as requests come in.

However, with the sheer number of invalid requests going through his site from people trying to get keys - it wouldn't surprise me if his CDM (or one of them) got killed off.

Again, I could be totally wrong in how it works - I'm assuming that, because that's how I built mine.

Oki.

I have read somewhere about the site wants "JSON formatted payload with the license request in base64 like many websites do (Amazon, Apple Music/TV)".
But I have not find out how I shall do for get that.

That quote is from me, I don't think I have said that specifically about Paramount+. Around the same post I literally showed an example screenshot of what it looks like. Unless they have changed anything from yesterday to today. It is a request payload in bytes. Yesterday I had tested with a small script I shared in that post and it was working with getwvkeys, maybe they figured out the cdm on it a blacklisted it.

[eNab]

When there's not a widevine listing in the developer tools, what are the alternative file types to look at for a license url?

[jdanielw]

I don't know the internals of Ghost's site, perhaps he's got several CDMs that he rotates around as requests come in.

However, with the sheer number of invalid requests going through his site from people trying to get keys - it wouldn't surprise me if his CDM (or one of them) got killed off.

Again, I could be totally wrong in how it works - I'm assuming that, because that's how I built mine.

Oki.

I have read somewhere about the site wants "JSON formatted payload with the license request in base64 like many websites do (Amazon, Apple Music/TV)".
But I have not find out how I shall do for get that.

That quote is from me, I don't think I have said that specifically about Paramount+. Around the same post I literally showed an example screenshot of what it looks like. Unless they have changed anything from yesterday to today. It is a request payload in bytes. Yesterday I had tested with a small script I shared in that post and it was working with getwvkeys, maybe they figured out the cdm on it a blacklisted it.

Hey mate, I used your python script but got the following error. What am I doing wrong?

C:\Users\Server\test>python getwvkeys.py -p "AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQNzWT2Lx5R6WRviHeR6u6HRoIdXNwLWNlbmMiGE56V1QyTHg1UjZXUnZpSGVSNnU2SFE9PSoAMgA=" -l "https://widevine-proxy.api.rsm.firstlight.ai/getlicense?service=rsmedia&version=1.0&kid=373593D8-BC79-47A5-91BE-21DE47ABBA1D&ptoken=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"
starting license request via getwvkeys to: https://widevine-proxy.api.rsm.firstlight.ai/getlicense?service=rsmedia&version=1.0&kid=373593D8-BC79-47A5-91BE-21DE47ABBA1D&ptoken=eyJjb250ZW50SWQiOiIzNzM1OTNEOC1CQzc5LTQ3QTUtOTFCRS0yMURFNDdBQkJBMUQiLCJsaWNlbnNlRXhwaXJ5VGltZSI6MTY0MTkxODIyMzYzOCwiZW50aXRsZWRDb250ZW50SWRzIjoiTXpjek5Ua3pSRGd0UWtNM09TMDBOMEUxTFRreFFrVXRNakZFUlRRM1FVSkNRVEZFIiwibWF4VXNlcyI6MSwic2lnbmF0dXJlIjoiY2MyNzdlZTBiN2U0YTkwODYwOTg0NWY5MGU4OGRlOWMyMjY5MTVlMTE2MGIwOWI5MzBjNDU1YWY2ZjVkNzJlYSIsInVuaXF1ZUlkIjoiNjA5ZjU4NDYtYTJkNi00NjYxLTgwNjgtMTE1OWEyOTBiYmU2IiwiaXNzdWVyIjoiU0lHTktFWV9QVE9LRU5fQ09OU1VNRV9JU1NVRVIiLCJhcGlLZXkiOiJhcGlLZXkiLCJrZXlWZXJzaW9uIjoidmVyczAxIiwiZXhwaXJ5VGltZSI6MTY0MTg3NTA4MzYzOCwiY3JlYXRlZFRpbWUiOjE2NDE4NzUwMjM2MzgsInRva2VuTW9kZWxWZXJzaW9uIjoiVjMifQ==
Traceback (most recent call last):
  File "C:\Users\Server\test\getwvkeys.py", line 43, in <module>
    assert resp.status_code == 200, 'key request failed\n' + resp.text
AssertionError: key request failed
<!DOCTYPE html>
<html>
  <head>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta charset="utf-8">
    <title>Heroku | Application Error</title>
    <style media="screen">
      html,body,iframe {
        margin: 0;
        padding: 0;
      }
      html,body {
        height: 100%;
        overflow: hidden;
      }
      iframe {
        width: 100%;
        height: 100%;
        border: 0;
      }
    </style>
  </head>
  <body>
    <iframe src="//www.herokucdn.com/error-pages/no-such-app.html"></iframe>
  </body>
</html>

[EatThis]

When there's not a widevine listing in the developer tools, what are the alternative file types to look at for a license url?

I would search with drm, license, widevine, wv. Look at the screenshots I posted before, if any of the request looks decoded/formatted like that on the payload/response body. Then is likely a license request.

Hey mate, I used your python script but got the following error. What am I doing wrong?

C:\Users\Server\test>python getwvkeys.py -p "AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQNzWT2Lx5R6WRviHeR6u6HRoIdXNwLWNlbmMiGE56V1QyTHg1UjZXUnZpSGVSNnU2SFE9PSoAMgA=" -l "https://widevine-proxy.api.rsm.firstlight.ai/getlicense?service=rsmedia&version=1.0&kid=373593D8-BC79-47A5-91BE-21DE47ABBA1D&ptoken=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"
starting license request via getwvkeys to: https://widevine-proxy.api.rsm.firstlight.ai/getlicense?service=rsmedia&version=1.0&kid=373593D8-BC79-47A5-91BE-21DE47ABBA1D&ptoken=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
Traceback (most recent call last):
  File "C:\Users\Server\test\getwvkeys.py", line 43, in <module>
    assert resp.status_code == 200, 'key request failed\n' + resp.text
AssertionError: key request failed
<!DOCTYPE html>
<html>
  <head>
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <meta charset="utf-8">
    <title>Heroku | Application Error</title>
    <style media="screen">
      html,body,iframe {
        margin: 0;
        padding: 0;
      }
      html,body {
        height: 100%;
        overflow: hidden;
      }
      iframe {
        width: 100%;
        height: 100%;
        border: 0;
      }
    </style>
  </head>
  <body>
    <iframe src="//www.herokucdn.com/error-pages/no-such-app.html"></iframe>
  </body>
</html>

That looks like a response from heroku, the hoster of the getwvkeys which may indicate the url does not exist. This is even before doing the key request. Did you recall making any changes to the python script? also, what is the result if you take the same headers and use the website instead. I initially thought that maybe getwvkeys removed the proxy/interface but I just tested with Paramount+, the same script, I am able to get a key. This confirm 2 things, 1. NoAGhost haven't removed the ability to use the interface/proxy and 2. paramount+ seem to work with their CDM with no problem.

[eNab]

When there's not a widevine listing in the developer tools, what are the alternative file types to look at for a license url?

I would search with drm, license, widevine, wv. Look at the screenshots I posted before, if any of the request looks decoded/formatted like that on the payload/response body. Then is likely a license request.

The only one that comes up similar is a license_protocol.proto.js but the headers link points a chrome extension.

chrome-extension://blahblah/protobuf-generated/license_protocol.proto.js

There's also a content_key_decrytion.js file but it also posts to a chrome extension

chrome-extension://blah/content_key_decryption.js"

Is this a different format that what works on the key sites?

[chomako]

Hi Mates , anybody know how to use proxy on getwvkeys web ?
Thank you

[yeahyeah]

Has anyone been able to decrypt from HBO Max recently?

[Bumblebeee]

Has anyone been able to decrypt from HBO Max recently?

Yes

[mostyle]

[QUOTE=EatThis;2644457]

I don't know the internals of Ghost's site, perhaps he's got several CDMs that he rotates around as requests come in.

That quote is from me, I don't think I have said that specifically about Paramount+. Around the same post I literally showed an example screenshot of what it looks like. Unless they have changed anything from yesterday to today. It is a request payload in bytes. Yesterday I had tested with a small script I shared in that post and it was working with getwvkeys, maybe they figured out the cdm on it a blacklisted it.

To clear it up definitively Para+ nor Hbomax need any payload other than the Bearer header... Good CDM, PSSH, that cookie, and the right license URL, and you're set.

[Bumblebeee]

[QUOTE=mostyle;2644496]

I don't know the internals of Ghost's site, perhaps he's got several CDMs that he rotates around as requests come in.

That quote is from me, I don't think I have said that specifically about Paramount+. Around the same post I literally showed an example screenshot of what it looks like. Unless they have changed anything from yesterday to today. It is a request payload in bytes. Yesterday I had tested with a small script I shared in that post and it was working with getwvkeys, maybe they figured out the cdm on it a blacklisted it.

To clear it up definitively Para+ nor Hbomax need any payload other than the Bearer header... Good CDM PSSH, that cookie, and the right license URL, and you're set.

You absolutely right sir.

[mostyle]

Hi Mates , anybody know how to use proxy on getwvkeys web ?
Thank you

other than the proxy field on the page?

[Fjullekulle]

Someone who have luck decrypting Netflix?

[chomako]

Hi Mates , anybody know how to use proxy on getwvkeys web ?
Thank you

other than the proxy field on the page?

I meant how should i put it on that field ?

should i put it like this for example :

{"proxy":"202.162.214.250:5434"}

or directly just IP & port without any " or } .

202.162.214.250:5434

I've tried both , but unfortunately always get errors .

also which proxy protocol is suitbale , socks or http ?

[MindController]

In case it helps anyone, you only need the referer url from the header section to make Shudder work (along with the license url and pssh of course)

[Bumblebeee]

Someone who have luck decrypting Netflix?

Yes, what you want to decrypt from netflix? Leave a link to video.

[Fjullekulle]

Someone who have luck decrypting Netflix?

Yes, what you want to decrypt from netflix? Leave a link to video.

You got PM.

[tachyon512]

I am running into:

Error 404:<br>{"code":190104,"message":"Status of response from Google Widevine server is not 'OK'."}

Any ideas on what might be causing this error?

Can someone possibly help me with this?

[codehound]

I am running into:

Error 404:<br>{"code":190104,"message":"Status of response from Google Widevine server is not 'OK'."}

Any ideas on what might be causing this error?

Can someone possibly help me with this?

Absolutely zero chance with the information you have given. In fact below zero.

1. your website ?
2. mother url of page
3. your mpd ?
4. your pssh ?
5. your lic url ?
6. your headers ?
7. your method for getting keys ? widevine_keys ? wks-keys ? pywidevine ? ghosts online getwvkeys ?

[arktay]

Hey guys it's possible to get keys from https://getwvkeys.herokuapp.com/ using amazon prime video? I was able to get keys for dsnp but i'm having issues with prime video. Probably i'm missing something with the license URL. Could someone give me an example license url for it?

[EatThis]

To clear it up definitively Para+ nor Hbomax need any payload other than the Bearer header... Good CDM, PSSH, that cookie, and the right license URL, and you're set.

No, every license request MUST have a payload otherwise the service will not know what device and for what content the license or the decryption keys are for. I mean its common sense, I don't even know how people are attempting to try to obtain decryption keys without a fundamental fact like that. What makes a difference and makes it easy for most of you is how payload is formatted and sent. A payload in a byte stream is how most streaming provider send it (including HBO Max and P+), you just prepare the license and send it. getwvkeys do that on your behalf and is why work on most websites. There are other websites, that encode this license request in base64 and put it inside of a JSON object or whavever they want to do it. And then send the JSON object as payload. In the later scenario it requires you to observe how the website interact, encode this payload however this website requires it and then with any language of your preferences you can craft it. getwvkeys or some basic script written to do a basic license request will not do those specific scenarios for you.

As I've always been saying, it a great idea to see how the website interact and then you can formulate your license request or start experimenting. Want to see an example of the scenarios above? Look at how Amazon Prime or Apple TV/Music and compare it with Paramount+ or HBO Max or Peacock, despite the obvious license URL difference. They all send a license request including a payload, is just how they al format/encode/send it.

[codehound]

Hey guys it's possible to get keys from https://getwvkeys.herokuapp.com/ using amazon prime video? I was able to get keys for dsnp but i'm having issues with prime video. Probably i'm missing something with the license URL. Could someone give me an example license url for it?

Google VMP

[darkw4v3]

Hey guys it's possible to get keys from https://getwvkeys.herokuapp.com/ using amazon prime video? I was able to get keys for dsnp but i'm having issues with prime video. Probably i'm missing something with the license URL. Could someone give me an example license url for it?

Google VMP

Yep.

Speaking of, I can't even get SD without VMP. I don't know how you folks are managing to get anything.