How to download a protected Brightcove stream

[kairaira]

I'm trying to dowload a brightcove stream but seems it it being protected.
Anyways I can download it?

link

C:\yt-dlp>yt-dlp.exe link
[brightcove:new] 6289621187001: Downloading JSON metadata
[brightcove:new] 6289621187001: Downloading JSON metadata
ERROR: [brightcove:new] Access to this resource is forbidden by access policy.

[lomero]

you need find mpd ...

[kairaira]

add --referer "https://your_link"

Thanks for your reply.
I think I'm too new for this & hit below error. May I know if there is something wrong in the command or anything?


// Quote //
C:\Users\USER>yt-dlp.exe --referer "link"
Usage: yt-dlp.exe [OPTIONS] URL [URL...]

yt-dlp.exe: error: You must provide at least one URL.
Type yt-dlp --help to see a list of all options.

[lomero]

no.

try this

yt-dlp --allow-u https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/bccenc/6160987583001/ee683ba7-9724-478a-8104-5ba5e4529357/6s/manifest.mpd?fastly_token=NjFkMWU4NjFfOTc3ZWYwMWE2NmY2Y2JhYzA0YzJiYmY5YTZkYzFkNjU5ZDdmYjBkN2RiMTIyZmFkYTUxNjM5MzU0MzViZWY5NA%3D%3D

but video is encrypted. need key to decrypt ...

[[ss]vegeta]

ytdlp.exe --allow-u --downloader aria2c --cookies-from-browser chrome -f f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53 "https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/bccenc/6160987583001/ee683ba7-9724-478a-8104-5ba5e4529357/6s/manifest.mpd?fastly_token=NjFkMjU5MTBfYmRjODA1OTQ4NzYxODc1Y2RlN2FiYTliZjdlZGU0MjZhZmNkZGZhZGRhMjZmMDA1OTFjZDExNzQ2OTE1N2IwNw%3D%3D"

You might need a fresh mpd link. And you probably need to first open the video with Chrome. And you need to find aria2c.exe and put in same folder with ytdlp.
This will download video and audio separately, and you'll need to use mp4decrypt to decrypt them (if you don't know how, search this forum). You will then need to use ffmpeg to mux video and audio.
Key for decryption of video and/or audio

Content key: e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea

[k022]

no.

try this

yt-dlp --allow-u https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/bccenc/6160987583001/ee683ba7-9724-478a-8104-5ba5e4529357/6s/manifest.mpd?fastly_token=NjFkMWU4NjFfOTc3ZWYwMWE2NmY2Y2JhYzA0YzJiYmY5YTZkYzFkNjU5ZDdmYjBkN2RiMTIyZmFkYTUxNjM5MzU0MzViZWY5NA%3D%3D

but video is encrypted. need key to decrypt ...

may i know how do you get the m3u8 link?

Edit : I mean the manifest link

[lomero]

play video
inspect element - network tab

[kairaira]

no.

try this

yt-dlp --allow-u https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/bccenc/6160987583001/ee683ba7-9724-478a-8104-5ba5e4529357/6s/manifest.mpd?fastly_token=NjFkMWU4NjFfOTc3ZWYwMWE2NmY2Y2JhYzA0YzJiYmY5YTZkYzFkNjU5ZDdmYjBkN2RiMTIyZmFkYTUxNjM5MzU0MzViZWY5NA%3D%3D

but video is encrypted. need key to decrypt ...

Great!
I have successfully donwloaded the video & audio file now.

I'm looking for solutions to decrypt these files with mp4decrypt according to vegeta's comments now...
Just installed with Bento4 and trying out

[lomero]

use mp4decrypt to decrypt video and audio. after this merge all with ffmpeg

mp4decrypt --key e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea video.ts output.ts

ffmpeg -i video.ts -i audio.m4a -c:v copy -c:a aac final_video.ts

[kairaira]

ytdlp.exe --allow-u --downloader aria2c --cookies-from-browser chrome -f f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53 "https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/bccenc/6160987583001/ee683ba7-9724-478a-8104-5ba5e4529357/6s/manifest.mpd?fastly_token=NjFkMjU5MTBfYmRjODA1OTQ4NzYxODc1Y2RlN2FiYTliZjdlZGU0MjZhZmNkZGZhZGRhMjZmMDA1OTFjZDExNzQ2OTE1N2IwNw%3D%3D"

You might need a fresh mpd link. And you probably need to first open the video with Chrome. And you need to find aria2c.exe and put in same folder with ytdlp.
This will download video and audio separately, and you'll need to use mp4decrypt to decrypt them (if you don't know how, search this forum). You will then need to use ffmpeg to mux video and audio.
Key for decryption of video and/or audio

Content key: e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea

Thanks!

Just would like to check where I can get below:

1. -cookies-from-browser chrome -f
f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53


2. The keys for decryption

Content key: e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea

[lomero]

to get key you need python

for cookie: what is that?

[kairaira]

to get key you need python

for cookie: what is that?

I think I should get Python tomorrow & try with it then.
Is there any code that I can use to get the key after installation?


For cookie,
I just get this from code which vegeta provided in his comment

 ytdlp.exe --allow-u --downloader aria2c --cookies-from-browser chrome -f f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53 "https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/bccenc/6160987583001/ee683ba7-9724-478a-8104-5ba5e4529357/6s/manifest.mpd?fastly_token=NjFkMjU5MTBfYmRjODA1OTQ4NzYxODc1Y2RlN2FiYTliZjdlZGU0MjZhZmNkZGZhZGRhMjZmMDA1OTFjZDExNzQ2OTE1N2IwNw%3D%3D"

[[ss]vegeta]

Just would like to check where I can get below:

1. -cookies-from-browser chrome -f
f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53


2. The keys for decryption

Content key: e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea

1. --cookies-from-browser is a "helper" for ytdlp that adds the cookies from the browser before downloading.
This is sometimes useful as it can bypass the "403 forbidden" you get.
You get 403 forbidden or similar with ytdlp when it tries to download "normally". It's a security measure that some sites apply.
With cookies, it pretends to be a browser, and the server will let ytdlp download because it thinks it's a browser.
Sometimes this can be also bypassed with adding headers like user-agent and referer.

2. Keys for decryption, nowadays, aren't easy to get. There used to be an extension (Widevine Guesser) that was able to get keys. Now it doesn't work. So, to get keys, you need first to find a Python script (or more precisely a collection of scripts) based on Pywidevine (like WKS, widevine_keys or Pywidevine itself). Then, you also need a CDM. CDM are 2 files that are used with the previously mentioned script to "lie" to Widevine that your computer is someone else, with privileges (like, you are a phone or a tablet). It consists of 2 files, a private key and a blob that identifies the device. But, CDM is not that easy to get. There is this script https://github.com/wvdumper/dumper that can get you CDM but it can be hard. You need to have a rooted device, preferably not Samsung, Android 7-9, a OEM Crypto API 13 or less, sometimes Magisk module and whatnot. Even if you manage to do everything, sometimes it might not work.

[darkw4v3]

Android 7-9, a OEM Crypto API 13 or less

That's not necessarily true. I was able to get the files from Android 10 and oemcryptoapi 15 with only minor script modifications. That may be in the minority, but it is possible.

[[ss]vegeta]

That's not necessarily true. I was able to get the files from Android 10 and oemcryptoapi 15 with only minor script modifications. That may be in the minority, but it is possible.

Yeah, I'm aware of those exceptions.

[kairaira]

Just would like to check where I can get below:

1. -cookies-from-browser chrome -f
f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53


2. The keys for decryption

Content key: e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea

1. --cookies-from-browser is a "helper" for ytdlp that adds the cookies from the browser before downloading.
This is sometimes useful as it can bypass the "403 forbidden" you get.
You get 403 forbidden or similar with ytdlp when it tries to download "normally". It's a security measure that some sites apply.
With cookies, it pretends to be a browser, and the server will let ytdlp download because it thinks it's a browser.
Sometimes this can be also bypassed with adding headers like user-agent and referer.

2. Keys for decryption, nowadays, aren't easy to get. There used to be an extension (Widevine Guesser) that was able to get keys. Now it doesn't work. So, to get keys, you need first to find a Python script (or more precisely a collection of scripts) based on Pywidevine (like WKS, widevine_keys or Pywidevine itself). Then, you also need a CDM. CDM are 2 files that are used with the previously mentioned script to "lie" to Widevine that your computer is someone else, with privileges (like, you are a phone or a tablet). It consists of 2 files, a private key and a blob that identifies the device. But, CDM is not that easy to get. There is this script https://github.com/wvdumper/dumper that can get you CDM but it can be hard. You need to have a rooted device, preferably not Samsung, Android 7-9, a OEM Crypto API 13 or less, sometimes Magisk module and whatnot. Even if you manage to do everything, sometimes it might not work.

#1
It's a lot clear now.
But where I can get "f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53"? or if it is always these 2 'keys'?


#2
omg....looks really hard for me without any backgrounds for those.
Let me try tmr and see where I can get to...




But thanks for both of your help!
I have managed to download & merge the video in this post

[[ss]vegeta]

But where I can get "f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53"? or if it is always these 2 'keys'?

Oh, those are just the stream names/IDs. You can find those with ytdlp -F.
And I think it's a habit of mine to do that, I think ytdlp will just download the best video and best audio without -f IDs

[poyopoyo]

I tried to download the following URL referring to the above.
https://players.brightcove.net/6160987583001/ojGJZehqJ_default/index.html?videoId=6289624830001

I was able to download the encrypted mp4 and m4a, but I don't know the decryption key.

[[ss]vegeta]

but I don't know the decryption key.

Dude, it's up there, I posted it.

[poyopoyo]

I tried this key but it didn't work.

e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea

The video I want to download is different from the thread poster, so I think the decryption key is also different.

[[ss]vegeta]

I tried this key but it didn't work.

e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea

The video I want to download is different from the thread poster, so I think the decryption key is also different.

The link you posted is the same 2:19:37 video

[pandaaa]

Now

[poyopoyo]

I first played the video in chrome. And I got the URL of mpd in the Network tab.

Next, I tried to download the video with the following command.

yt-dlp --allow-u --downloader aria2c --cookies-from-browser chrome "https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/bccenc/6160987583001/7169a1f4-5438-4cdf-9891-a4321aebf074/6s/manifest.mpd?fastly_token=NjFkMmYwODFfMjQ1NDZlZTg1NzRlOTE3Yjg0YzFmNmUyMzY0ZjJkNDUwNmZkZWE5NWZiMGEwNTlkMGNjY2JhNWE1MDViOGYxMQ%3D%3D"

WARNING: You have asked for UNPLAYABLE formats to be listed/downloaded. This is a developer option intended for debugging. 
         If you experience any issues while using this option, DO NOT open a bug report
[Cookies] Extracting cookies from chrome
[Cookies] Extracted 3162 cookies from chrome
[generic] manifest: Requesting header
WARNING: [generic] Falling back on generic information extractor.
[generic] manifest: Downloading webpage
[generic] manifest: Extracting information
[info] manifest: Downloading 1 format(s): 5b075dbd-495d-4fdd-84ca-087ee946e7ea+9cdd8975-6370-44e8-8ea8-bfde38b7c6e8
WARNING: You have requested merging of multiple formats while also allowing unplayable formats to be downloaded. The formats won't be merged to prevent data corruption.
[dashsegments] Total fragments: 1396
[dashsegments] Fragment downloads will be delegated to aria2c
[download] Destination: manifest [manifest].f5b075dbd-495d-4fdd-84ca-087ee946e7ea.mp4
[aria2c] Downloaded 6272834539 bytes)][#fdebfb 3.7MiB/4.8MiB(77%)][#5a11a5 3.1MiB/5.1MiB(60%)][#aa4b5b 3.4MiB/4.7M
[download] 100% of 5.84GiB in 03:38
[dashsegments] Total fragments: 1409
[dashsegments] Fragment downloads will be delegated to aria2c
[download] Destination: manifest [manifest].f9cdd8975-6370-44e8-8ea8-bfde38b7c6e8.m4a
[aria2c] Downloaded 210720837 bytes)][#fcd377 64KiB/147KiB(43%)][#5c58af 48KiB/147KiB(32%)][#866fc8 32KiB/146KiB(2
[download] 100% of 200.96MiB in 00:17

ls -lh
-rw-r--r--  1 poyopoyo  staff   5.8G  1  3 19:24 manifest [manifest].f5b075dbd-495d-4fdd-84ca-087ee946e7ea.mp4
-rw-r--r--  1 poyopoyo  staff   201M  1  3 19:25 manifest [manifest].f9cdd8975-6370-44e8-8ea8-bfde38b7c6e8.m4a

For the time being, I decrypted only mp4, but the output video was a black video with only 6 seconds.

mp4decrypt --key e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea "manifest [manifest].f5b075dbd-495d-4fdd-84ca-087ee946e7ea.mp4" output.mp4

[[ss]vegeta]

I first played the video in chrome. And I got the URL of mpd in the Network tab.

Are we still talking about the same video? The 2:19:37 one, some Asian guys singing or something?
I have that downloaded and decrypted, I'll edit this post in 20 minutes or so with download link.

New key

f60284955f824767b8d2f9532eb46ba1:cba2cdfa3528c2d0a0292032babbea8e

Preferred download with Edge browser
https://rvza-my.sharepoint.com/:v:/g/personal/k_rvza_onmicrosoft_com/EWTpeS_flI1Cg3PWf...brvtQ?e=FtrdS3

[poyopoyo]

vegeta, thank you for your great support.
I was able to decrypt it.

[pandaaa]

I was also able to decrypt successfully.
Thanks for your support and the download link.

[tororo]

Just would like to check where I can get below:

1. -cookies-from-browser chrome -f
f099b8fb-923f-44a4-91f9-37727a2578c1,1eff54ef-7e2f-46b6-822a-b3645e4b6c53


2. The keys for decryption

Content key: e1a205e13dd5407390c79ac12cc4afbf:f2c75ba94d314a2fd57b7ddf289c53ea

1. --cookies-from-browser is a "helper" for ytdlp that adds the cookies from the browser before downloading.
This is sometimes useful as it can bypass the "403 forbidden" you get.
You get 403 forbidden or similar with ytdlp when it tries to download "normally". It's a security measure that some sites apply.
With cookies, it pretends to be a browser, and the server will let ytdlp download because it thinks it's a browser.
Sometimes this can be also bypassed with adding headers like user-agent and referer.

2. Keys for decryption, nowadays, aren't easy to get. There used to be an extension (Widevine Guesser) that was able to get keys. Now it doesn't work. So, to get keys, you need first to find a Python script (or more precisely a collection of scripts) based on Pywidevine (like WKS, widevine_keys or Pywidevine itself). Then, you also need a CDM. CDM are 2 files that are used with the previously mentioned script to "lie" to Widevine that your computer is someone else, with privileges (like, you are a phone or a tablet). It consists of 2 files, a private key and a blob that identifies the device. But, CDM is not that easy to get. There is this script https://github.com/wvdumper/dumper that can get you CDM but it can be hard. You need to have a rooted device, preferably not Samsung, Android 7-9, a OEM Crypto API 13 or less, sometimes Magisk module and whatnot. Even if you manage to do everything, sometimes it might not work.

Hi, I am new here. Can I ask Mr. vegeta of decryption for the past thread ?
How did you get the key for that video which asian guys were singing? Do I also need the Python script and CDM? Did you use those two?

[[ss]vegeta]

Do I also need the Python script and CDM? Did you use those two?

Yes, of course you do.

[tororo]

thank you, vegeta.

[SE14man]

Do I also need the Python script and CDM? Did you use those two?

Yes, of course you do.

Hey Vegeta

Would you be able to decrypt this and if so, let me know the process in which you managed to do it?

I am struggling with it

Thanks

players.brightcove.net/3047407010001/NJxe2G4ox_default/index.html?videoId=5981055825001