Decryption and the Temple of Doom

[A_n_g_e_l_a]

I'd recommend skipping the section about using WKS-KEYS and just going straight to using the pywidevine part. WKS-KEYS wasn't able to obtain keys from https://bitmovin.com/demos/drm at all. It gave me an error about protobuf. It appears that there's a new method of getting keys where you have to make two requests, and WKS-KEYS doesn't do this, but pywidevine does.

Thanks for the feedback and I'm glad it helped.

The protobuf error is well documented in the forum and arises when using an old version of WKS-KEYS. The new one -linked in the thread should give no issues when installed on its own.. Some scripts use WKS-KEYS and to run, and if Pywidevine is on the same system it can cause issues. This https://forum.videohelp.com/threads/411862-Beyond-WKS-KEYS has the solution

[techfin]

Can someone please tell me whether this nice tutorial works for vdocipher. I only got a pc so the way i have to try it using android studio. I have some important videos to save from an educational website and i just dont know why the hell it is drm protected. Please help me cuz i have an exam coming up soon and need to download those vids before they remove it from site in 6 days. There are 14 videos tho. Thx in advance

[Karoolus]

Can someone please tell me whether this nice tutorial works for vdocipher. I only got a pc so the way i have to try it using android studio. I have some important videos to save from an educational website and i just dont know why the hell it is drm protected. Please help me cuz i have an exam coming up soon and need to download those vids before they remove it from site in 6 days. There are 14 videos tho. Thx in advance

iirc Android Studio system IDs are all blocked for vdocipher

[JackGPT]

dm me

[h4zyda1sy]

Thanks! I did the first option, which then resulted in a 'Not executable: 64-bit ELF file'. So I switched Frida server to the 32-bit arm (even though my device is 64 bit).
However, when I'm running this Frida server, I get following error on the dump_keys.py:


[Attachment 75066 - Click to enlarge]

Should I use a different Frida server? Where can I find older versions?

The guide suggests looking up the architecture of the device you have before downloading Frida-server. Clearly you have a version not compiled for your device.
It's one of these:-

[Attachment 75069 - Click to enlarge]

EDIT: Please disregard for now, I will first do some more research.

Okay thanks. I ultimately used Android Studio and was able to successfully decrypt and download the Irish example in the post. However, I'm struggling to apply this to other sites. As in, not finding the license url and/or the PSSH in the same manner as described.
E.g. I want to download something from vrt.be/vrtmax, but here I cannot find a string starting with 'AAAA' in the response of the mpd file.
It's probably already discussed, but what are other ways to find the license and PSSH?

[A_n_g_e_l_a]

It's probably already discussed, but what are other ways to find the license and PSSH?

You're right. Next instalment is here > https://forum.videohelp.com/threads/407216-Decryption-The-Dungeon-of-Despair

[para8ox]

Everything worked flowlessly, just a small doubt, how did you get the license url.

I understood everything, like to get PSSH keys and mpd url, but how do we get license url of any site, I tried searching for lic, widevine, etc. in network section of developer tools, but didn't found anything useful on this site - https://bitmovin.com/demos/drm

Kindly help me with getting license url of any website


[Attachment 77035 - Click to enlarge]

[[ss]vegeta]

Everything worked flowlessly, just a small doubt, how did you get the license url.

I understood everything, like to get PSSH keys and mpd url, but how do we get license url of any site, I tried searching for lic, widevine, etc. in network section of developer tools, but didn't found anything useful on this site - https://bitmovin.com/demos/drm

Kindly help me with getting license url of any website


[Attachment 77035 - Click to enlarge]

Different sites have different license urls.
That's why you have those different keywords: widevine, wv, lic, auth, proxy etc.
For the demo site, in your screenshot is the license url.
You can also filter by method:POST
You can also search the response and find something like this

[Attachment 77040 - Click to enlarge]

[A_n_g_e_l_a]

Everything worked flowlessly, just a small doubt, how did you get the license url

Kindly help me with getting license url of any website

See the post above yours for the next installment link.

[spartan]

tried downloading using n_m3u8dl_re and mp4decrypt, but after choosing what stream ID, and Audio ID I want, it starts downloading just a bit of the stream (format mp4), any ideas how to get full stream?

[spartan]

After decrypting using mp4decrypt, i get a mp4 file with 5gb, but it only shows 2hours of the show, how can i get live stream m3u?

[Sviests]

Has anyone ever experienced something weird,where in manifest there are 2-3 different KIDs for each resolution,same PSSH and licence url,but the decryptor only gets the key for one of them? I mean it outputs kid:key only for one of them. That shouldn't happen.

[[ss]vegeta]

Has anyone ever experienced something weird,where in manifest there are 2-3 different KIDs for each resolution,same PSSH and licence url,but the decryptor only gets the key for one of them? I mean it outputs kid:key only for one of them. That shouldn't happen.

well perhaps L1 needed for those res?

[Sviests]

well perhaps L1 needed for those res?

Is there a way to tell if it's L1 or L3?

[[ss]vegeta]

Is there a way to tell if it's L1 or L3?

I think there's no precise way, but if there's only one PSSH and different KIDs and with L3 you don't get the keys for higher resolutions KIDs, then it's almost a definite L3.

[Karoolus]

Has anyone ever experienced something weird,where in manifest there are 2-3 different KIDs for each resolution,same PSSH and licence url,but the decryptor only gets the key for one of them? I mean it outputs kid:key only for one of them. That shouldn't happen.

Do you have an example of an MPD like that?
Also the video URL if it's allowed according to forum rules.

[Sviests]

Do you have an example of an MPD like that?
Also the video URL if it's allowed according to forum rules.

It’s under paywall and works only from a specific ip (my isp provider ip).
It’s a standart dash manifest, with “cenc” protection, usual wv uuid (ending …21ed). Same pssh for every KID. Nothing unordinary. It used to get keys for all 4 KIDs until recently it stopped for highest resolution. Nothing has changed in manifest. Nothing has changed in licence either,same auth token.I was just wondering if anyone had seen anything like this before.

[Karoolus]

Do you have an example of an MPD like that?
Also the video URL if it's allowed according to forum rules.

It’s under paywall and works only from a specific ip (my isp provider ip).
It’s a standart dash manifest, with “cenc” protection, usual wv uuid (ending …21ed). Same pssh for every KID. Nothing unordinary. It used to get keys for all 4 KIDs until recently it stopped for highest resolution. Nothing has changed in manifest. Nothing has changed in licence either,same auth token.I was just wondering if anyone had seen anything like this before.

And you don't get the key for the KID that belongs to the highest resolution?
One way to try it is to see what resolutions you can play in your browser. Just make sure it isn't using ChromeCDM (in Chrome) or PlayReady (in Edge). I would try in Firefox and see what res is possible.

[Sviests]

And you don't get the key for the KID that belongs to the highest resolution?

Exactly.

I would try in Firefox and see what res is possible.

1080p in ffox (and a legit one). Also in manifest there’s the width=1920 height=1080 and it’s KID+PSSH.

[Karoolus]

And you don't get the key for the KID that belongs to the highest resolution?

Exactly.

I would try in Firefox and see what res is possible.

1080p in ffox (and a legit one). Also in manifest there’s the width=1920 height=1080 and it’s KID+PSSH.

if you want, DM me the license server request (copy as curl) and the PSSH (or MPD url)

[CleoU5]

[Attachment 77245 - Click to enlarge] after I run the video, there is no key dumped, please help

[A_n_g_e_l_a]

[Attachment 77245 - Click to enlarge] after I run the video, there is no key dumped, please help

Clearly you are using Android Studio to dump from a virtual Android device why not ask in the Android Studio thread?

But the answer to your problem is writ large - how could you miss it? Look at the bitmovin image and read, 'No DRM'. DRM stands for Digital Rights Management. Bitmovin is complaining it cannot find any. It is looking to use a CDM and cannot find it. Probably you have chosen the wrong Android virtual device to use.

Follow instructions here https://forum.videohelp.com/threads/408031-Dumping-Your-own-L3-CDM-with-Android-Studio more carefully.

[A_n_g_e_l_a]

after I run the video, there is no key dumped, please help

You are using a rooted Android emulator and that is probably the reason for No DRM in the bitmovin response. Try using a normal non rooted release of Android.

[By29]

Hi I met some problem
The website I want to dump only available for Android 11+ (have try on Android 9 and 10, but can't load the content)
And I have try both dumper from https://github.com/Diazole/dumper and https://github.com/wvdumper/dumper, all of them can works well on Android 9, but can't generate file on Android 10 and 11.
It really confused me, bcs I have to use Android 11 to load the vedio website can't use the older version.

Below are the screenshot of Android 11 using https://github.com/Diazole/dumper and https://github.com/wvdumper/dumper, and the command I use are both Python dump_keys.py
After hooks completed I have reload the website but nothing happen, so it couldn't be the reason.
Are there any setting I need to change?

[Karoolus]

Hi I met some problem
The website I want to dump only available for Android 11+ (have try on Android 9 and 10, but can't load the content)
And I have try both dumper from https://github.com/Diazole/dumper and https://github.com/wvdumper/dumper, all of them can works well on Android 9, but can't generate file on Android 10 and 11.
It really confused me, bcs I have to use Android 11 to load the vedio website can't use the older version.

Below are the screenshot of Android 11 using https://github.com/Diazole/dumper and https://github.com/wvdumper/dumper, and the command I use are both Python dump_keys.py
After hooks completed I have reload the website but nothing happen, so it couldn't be the reason.
Are there any setting I need to change?

Wrong thread, buddy. Why don't you ask this in the thread specifically for dumping CDMs from Android Studio?
https://forum.videohelp.com/threads/408031-Dumping-Your-own-L3-CDM-with-Android-Studio

[A_n_g_e_l_a]

Hi I met some problem
The website I want to dump only available for Android 11+ (have try on Android 9 and 10, but can't load the content)
After hooks completed I have reload the website but nothing happen, so it couldn't be the reason.
Are there any setting I need to change?

You need the function name for the hooks to hook onto. Dumper is reported to work all the way up to Android 13 see https://github.com/Diazole/dumper for details.
There is a library on Android - usually called libwvhidl.so, but maybe renamed (see Diazole/dumper), which holds the function names - one of which gets hooked. This thread will help you find the function name to add to a dumper script https://forum.videohelp.com/threads/407196-Dumping-L3-from-Android-10-11-and-12.

Good luck

[white_snake]

@By29: to add to what Angela said, before doing anything else you can give a try to the function names here: https://github.com/lollolong/dumper/blob/main/Helpers/script.js and add them to your script.js.

[A_n_g_e_l_a]

@By29: to add to what Angela said, before doing anything else you can give a try to the function names here: https://github.com/lollolong/dumper/blob/main/Helpers/script.js and add them to your script.js.

Brilliant! I was just thinking we could do with a list somewhere and here it is! Magic.

[white_snake]

@By29: to add to what Angela said, before doing anything else you can give a try to the function names here: https://github.com/lollolong/dumper/blob/main/Helpers/script.js and add them to your script.js.

Brilliant! I was just thinking we could do with a list somewhere and here it is! Magic.

Yup, this guy has been consistently updating the functions, props to him.

[marioeivissa]

@By29: to add to what Angela said, before doing anything else you can give a try to the function names here: https://github.com/lollolong/dumper/blob/main/Helpers/script.js and add them to your script.js.

Brilliant! I was just thinking we could do with a list somewhere and here it is! Magic.

yes angela but here https://forum.videohelp.com/threads/404994-Decryption-and-the-Temple-of-Doom/page6#post2669744 say than using all of them than already are inside the dumper of diazole we must to reforce close the browser and the device for each one, all the list are already inside de script.js but only work with one of them, so to use all of them we should to reboot the device, or find the correct one, with for example pycdc for linux
,
but the point is puttin all modules from there inside the script.js i just got dump my vontarx4 and with the only few where inside in diazole dumper was not working, so nice!!!!!