How are you going to respond to widevine l3 decryptor's death at May 31st?

[JAX75]

^ then it's not gonna work...the app might not even be using the same keys as the web version ones that decryptor/guessor decoded

yes app use Playready DRM not windevine

[DRMdec]

^ then it's not gonna work...the app might not even be using the same keys as the web version ones that decryptor/guessor decoded

yes app use other drm not windevine

omg

But if the key is stored in some file in the folder, can I decrypt by mp4decrypt ?

[JAX75]

^ then it's not gonna work...the app might not even be using the same keys as the web version ones that decryptor/guessor decoded

yes app use other drm not windevine

omg

But if the key is stored in some file in the folder, can I decrypt by mp4decrypt ?

No !

[notaghost]

yes app use Playready DRM not windevine

Android apps use widevine DRM not Playready

[JAX75]

yes app use Playready DRM not windevine

Android apps use widevine DRM not Playready

he said Windows app so Playready

[notaghost]

yes app use Playready DRM not windevine

Android apps use widevine DRM not Playready

he said Windows app so Playready

Okay.

[DRMdec]

is there any addon to download the encrypted data ? And then avoid to download it manually by dev tools ?

[JAX75]

is there any addon to download the encrypted data ? And then avoid to download it manually by dev tools ?

use videodownloadhelper

[KoKloss]

Guys I'm sad that this extension will be closed very soon!
is there any way after it's down to get the keys??
I'll be really in need to find a new method to extract encryption keys as I need to download those educational videos for my studies to watch them again whenever I need them!

[moni]

Guys I'm sad that this extension will be closed very soon!
is there any way after it's down to get the keys??
I'll be really in need to find a new method to extract encryption keys as I need to download those educational videos for my studies to watch them again whenever I need them!

1. No.
2. That's life.

[[ss]vegeta]

is there any way after it's down to get the keys??

Yes. You can contact me and I'll get you keys.

[TIGHazard]

How do we know the extension will fail to stop working?

Unlike last time, they allow other people to contribute and they have updated it since it's original release.

Who is to say that it won't be updated close to the 17th?

[JAX75]

How do we know the extension will fail to stop working?

Unlike last time, they allow other people to contribute and they have updated it since it's original release.

Who is to say that it won't be updated close to the 17th?

It depends on the streaming site some have their own license server like AMAZON or Netflix in short the big sites are therefore able to revoke the CDM when they want even after 11/17
and other it depends on the Windevine license server so end game

[demon]

can any 1 please help me to get key from

https://www.zee5.com/tvshows/details/survivor/0-6-3527/survivor-november-11-2021/0-1-6z540636

thanks in advance

[laiwingnang]

it will be a lifesaver if someone just updates guessor/decryptor for the current version 4.10.2391.0 cdm...instead of waiting for the cdm expiry...
i think it's just a matter of updating the RSA private keys for the new 4.10.2391.0 version widevineCDM, no? ....but no idea how to do it

[moni]

is there any way after it's down to get the keys??

Yes. You can contact me and I'll get you keys.

This is not a solution and you know that.

[[ss]vegeta]

This is not a solution and you know that.

It is a way to get what you want. With a few more steps.
That's how we'll know if he REALLY needs those videos.

[notaghost]

is there any way after it's down to get the keys??

Yes. You can contact me and I'll get you keys.

This is not a solution and you know that.

http://95.216.205.42:5000/
Here use this server to get content keys if you know pssh and license url

Horrible design but hey it works

Will keep it as long as servers don't overload.
Vulnerability risk are high. Don't hack this.

And it is not getting revoked anytime soon like chrome extension.

[laiwingnang]

http://95.216.205.42:5000/
Here use this server to get content keys if you know pssh and license url

Horrible design but hey it works

Will keep it as long as servers don't overload.
Vulnerability risk are high. Don't hack this.

And it is not getting revoked anytime soon like chrome extension.

great for you to do this for us, but

how do i figure out what the license server url is?

i'm using dev tools, but so many urls...

[notaghost]

http://95.216.205.42:5000/
Here use this server to get content keys if you know pssh and license url

Horrible design but hey it works

Will keep it as long as servers don't overload.
Vulnerability risk are high. Don't hack this.

And it is not getting revoked anytime soon like chrome extension.

great for you to do this for us, but

how do i figure out what the license server url is?

i'm using dev tools, but so many urls...

from https://www.ezdrm.com/demonstration-of-player-security-ezdrm

This is the license url https://widevine-dash.ezdrm.com/widevine-php/widevine-foreignkey.php?pX=B03B45

Iicense is usually post method with weird response it is shown twice sometimes in the developer tool with short payloads and long payloads

This is pssh

AAAAdnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAFYIARIQyf3iK27xRyW+04N07kAMLBoIbW92aWRvbmUiMnsia2lkIjoieWYzaUsyN3hSeVcrMDROMDdrQU1MQT09IiwidHJhY2tzIjpbIlNEIl19KgJTRA==

You get it from mpd sometimes you have to make pssh from kid or the init segment or from playready pssh
The long pssh is for Playready the widevine xml header will have schemeIdUri="urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed"
use this site to investigate your pssh https://integration.widevine.com/diagnostics
Last but not least
Headers are important

 sec-ch-ua : "Chromium";v="95", ";Not A Brand";v="99"
sec-ch-ua-mobile : ?1
User-Agent : Mozilla/5.0 (Linux; Android 11; M2007J20CG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.75 Mobile Safari/537.36
sec-ch-ua-platform : "Android"
 Accept : */*

Restrictions:
Some websites hide their license requests and response behind JSON or some sort of other encryptions like netflix

Todo :
Add JSON parsing for license



Special thanks to codehound for inspiring helping and testing this for me

[myteryuser]

http://95.216.205.42:5000/
Here use this server to get content keys if you know pssh and license url

Horrible design but hey it works

Will keep it as long as servers don't overload.
Vulnerability risk are high. Don't hack this.

And it is not getting revoked anytime soon like chrome extension.

great for you to do this for us, but

how do i figure out what the license server url is?

i'm using dev tools, but so many urls...

from https://www.ezdrm.com/demonstration-of-player-security-ezdrm

This is the license url https://widevine-dash.ezdrm.com/widevine-php/widevine-foreignkey.php?pX=B03B45

Iicense is usually post method with weird response it is shown twice sometimes in the developer tool with short payloads and long payloads

This is pssh

AAAAdnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAFYIARIQyf3iK27xRyW+04N07kAMLBoIbW92aWRvbmUiMnsia2lkIjoieWYzaUsyN3hSeVcrMDROMDdrQU1MQT09IiwidHJhY2tzIjpbIlNEIl19KgJTRA==

You get it from mpd sometimes you have to make pssh from kid or the init segment or from playready pssh
The long pssh is for Playready the widevine xml header will have schemeIdUri="urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed"
use this site to investigate your pssh https://integration.widevine.com/diagnostics
Last but not least
Headers are important

 sec-ch-ua : "Chromium";v="95", ";Not A Brand";v="99"
sec-ch-ua-mobile : ?1
User-Agent : Mozilla/5.0 (Linux; Android 11; M2007J20CG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.75 Mobile Safari/537.36
sec-ch-ua-platform : "Android"
 Accept : */*

To add multiple headers in the site you need to split the headers with two semicolons ( ;; )

sec-ch-ua : "Chromium";v="95", ";Not A Brand";v="99";;sec-ch-ua-mobile : ?1;;User-Agent : Mozilla/5.0 (Linux; Android 11; M2007J20CG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.75 Mobile Safari/537.36;;sec-ch-ua-platform : "Android";;Accept : */* sec-ch-ua : "Chromium";v="95", ";Not A Brand";v="99";;sec-ch-ua-mobile : ?1;;User-Agent : Mozilla/5.0 (Linux; Android 11; M2007J20CG) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.75 Mobile Safari/537.36;;sec-ch-ua-platform : "Android";;Accept : */*

headers are required sometimes to access the widevine server


Restrictions:
Some widevine servers are IP restrictioned as well
Some websites hide their license response behind encryptions like netflix

Todo :
Add manual proxy
Add JSON parsing for license



Special thanks to codehound for inspiring helping and testing this for me

Are you using a private cdm for this or a leaked cdm for getting the keys in your site? And can it do l1? And I think this is a rdp...So will it be expired any time soon?

[notaghost]

Yes Linux vps

No idea how long It will stay there

Not an L1.

[myteryuser]

Yes Linux vps

No idea how long It will stay there

Not an L1.

Oh thank you for this. This is really helpful! And If you want I can give you a domain and hosting for free since this helps others for free!

[Quint]

Thanks a lot @notaghost!

[laiwingnang]

Special thanks to codehound for inspiring helping and testing this for me

thanks notaghost..i was so confident I could do this, but

for example, this taiwanese site:
https://www.xxtv.me/play/04000102010042 (change the xx to kk..)

i got the pssh string from the mpd...there are many pssh in there, but i picked the first one and it seems to decode using that link you gave me

AAAAQHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAACAIARIQbB v8o1pO424P2lAe8ia7/RoEa2t0diIEa2t0dg==

license server

https://license.xxtv.com.tw/

and under the license server post request, i found this header

accept: */* ;; accept-encoding: gzip, deflate, br ;; accept-language: en-US,en;q=0.9 ;; content-length: 4315 ;; origin: https://www.xxtv.me ;; referer: https://www.xxtv.me/ ;; sec-ch-ua: "Google Chrome";v="95", "Chromium";v="95", ";Not A Brand";v="99" ;; sec-ch-ua-mobile: ?0 ;; sec-ch-ua-platform: "Windows" ;; sec-fetch-dest: empty ;; sec-fetch-mode: cors ;; sec-fetch-site: cross-site ;; soapaction: "http://schemas.microsoft.com/DRM/2007/03/protocols/AcquireLicense" ;; user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36

but then when i ran it on ur site, it causes an error on your site similiar to the one kokloss has...

[[ss]vegeta]

...

WidevineDecryptor: 6c1bfca35a4ee36e0fda501ef226bbfd:48294d1c01d6c8c725cec0dabf15de1a

[KoKloss]

This is not a solution and you know that.

It is a way to get what you want. With a few more steps.
That's how we'll know if he REALLY needs those videos.

Really Thx dude!
I'll contact u when this extension closes.

[KoKloss]

is there any way after it's down to get the keys??

Yes. You can contact me and I'll get you keys.

This is not a solution and you know that.

http://95.216.205.42:5000/
Here use this server to get content keys if you know pssh and license url

Horrible design but hey it works

Will keep it as long as servers don't overload.
Vulnerability risk are high. Don't hack this.

And it is not getting revoked anytime soon like chrome extension.

Thx dude for helping us here!!!
I got error when I tried to use ur site, can you help??
[Attachment 61770 - Click to enlarge]

[laiwingnang]

...

WidevineDecryptor: 6c1bfca35a4ee36e0fda501ef226bbfd:48294d1c01d6c8c725cec0dabf15de1a

thanks...my widevine guessor is still working, I can still get the keys for the next few days, but will probably need your help after..
for now, just trying to figure out how to use notaghost's app, so I don't have to keep bothering everyone next week

[KoKloss]

...

WidevineDecryptor: 6c1bfca35a4ee36e0fda501ef226bbfd:48294d1c01d6c8c725cec0dabf15de1a

thanks...my widevine guessor is still working, I can still get the keys for the next few days, but will probably need your help after..
for now, just trying to figure out how to use notaghost's app, so I don't have to keep bothering everyone next week

me too lol