Decryption and the Temple of Doom

[[ss]vegeta]

My username has "linux" just so that I can tell you that I do not even use it.

Yeah, that makes total sense.

[ElCap]

my username has "linux" just so that i can tell you that i do not even use it.

yeah, that makes total sense.

[shock]

I tried this procedure on my X96Air and i got two files - one .bin and one .json file. I didn't get a pem key, does that mean the process didn't work? Thanks !

[codehound]

I tried this procedure on my X96Air and i got two files - one .bin and one .json file. I didn't get a pem key, does that mean the process didn't work? Thanks !

Yes

[S1D3KICK181]

Thank You

[S1D3KICK181]

I've been reading through many forums here for a problem for many hours and still have not found any solution yet. So I finally decided to ask for it.
I am getting this error when dumping keys.

[Attachment 64939 - Click to enlarge]
It says "unable to save keybox" and "cannot find the path specified".
The script only creates a license_request.bin and an empty folder with my device's name. I am using a motorola G4 Plus device to dump keys. It has security level L1 even after rooting. I am also using Python v3.9 and Frida v15.1.22 . Here is more information on device.

[Attachment 64940 - Click to enlarge]

[Attachment 64941 - Click to enlarge]
Thanks in advance. I'm still new to this, so I'm gonna keep reading in the mean time.

[S1D3KICK181]

Never Mind. I found a solution. Finally dumped my keys!!
Tried dumping keys from an Ubuntu Virtual Machine and Boom! It worked worked like a charm.
Thanks a lot guys. Thanks a lot for sharing information through all the forums.

[libero08]

Well are a couple of day when i try myself do do some jobs like author of this topic and some other else.
I have a android box 9 pre routed and i install frida inside and start it.
ON pc i do some as into first topic and i obtain this
[Attachment 64954 - Click to enlarge]

into the folder key_dumps i have two files , one xxxxx.bin and another xxxx.json.
Is this ok or i need to try another android version?

I used frida 17 and 22 also i used python 3.10.

[PUOPUO]

Well are a couple of day when i try myself do do some jobs like author of this topic and some other else.
I have a android box 9 pre routed and i install frida inside and start it.
ON pc i do some as into first topic and i obtain this
[Attachment 64954 - Click to enlarge]

into the folder key_dumps i have two files , one xxxxx.bin and another xxxx.json.
Is this ok or i need to try another android version?

I used frida 17 and 22 also i used python 3.10.

congratulations, you achieved nothing

[libero08]

congratulations, you achieved nothing

Well, next time will be better.
It was the first shot for me
maybe it is here the issue? OEM crypto API ver 13 ?
Relax bro, i will extract from another terminal. So stay in touch ready to give me a hand




update,

at last i found those bastards...


[Attachment 65072 - Click to enlarge]


could someone to give me a hand, gently i ask , privately?
i dont want to disturb or break the forum rules here around.
thank you.

[popmar88]

Thanks for the guide. I followed it and i managed to extract keys from my 20 EUR android TV box.

But I am struggling now with WKS-KEYS tool and extraction of encryption keys. For couple of sites I manage to do it so I am sure my private key from android box is good.

For example, I am trying to extract keys from hrti.hrt.hr (live TV stream from Croatian national tv).

MPD:
https://cdn1-hrt.cdn.eurovisioncdn.net/hrtliveorigin/hrt5.smil/1/manifest.mpd?DVR

Licence url:
https://lic.drmtoday.com/license-proxy-widevine/cenc/

In MPD I see 2 pssh values: long one and short one.

Long:
<cencssh>AAADMHBzc2gAAAAAmgTweZhAQoarkuZb4IhflQAAAxAQAw AAAQABAAYDPABXAFIATQBIAEUAQQBEAEUAUgAgAHgAbQBsAG4A cwA9ACIAaAB0AHQAcAA6AC8ALwBzAGMAaABlAG0AYQBzAC4AbQ BpAGMAcgBvAHMAbwBmAHQALgBjAG8AbQAvAEQAUgBNAC8AMgAw ADAANwAvADAAMwAvAFAAbABhAHkAUgBlAGEAZAB5AEgAZQBhAG QAZQByACIAIAB2AGUAcgBzAGkAbwBuAD0AIgA0AC4AMAAuADAA LgAwACIAPgA8AEQAQQBUAEEAPgA8AFAAUgBPAFQARQBDAFQASQ BOAEYATwA+ADwASwBFAFkATABFAE4APgAxADYAPAAvAEsARQBZ AEwARQBOAD4APABBAEwARwBJAEQAPgBBAEUAUwBDAFQAUgA8AC 8AQQBMAEcASQBEAD4APAAvAFAAUgBPAFQARQBDAFQASQBOAEYA TwA+ADwASwBJAEQAPgB3AEwAVABLAHgASgB6AEEATQBUAHkASg BOADcAaAB3AEgAbABRAFUANQBBAD0APQA8AC8ASwBJAEQAPgA8 AEwAQQBfAFUAUgBMAD4AaAB0AHQAcABzADoALwAvAGwAaQBjAC 4AZAByAG0AdABvAGQAYQB5AC4AYwBvAG0ALwBsAGkAYwBlAG4A cwBlAC0AcAByAG8AeAB5AC0AaABlAGEAZABlAHIAYQB1AHQAaA AvAGQAcgBtAHQAbwBkAGEAeQAvAFIAaQBnAGgAdABzAE0AYQBu AGEAZwBlAHIALgBhAHMAbQB4ADwALwBMAEEAXwBVAFIATAA+AD wARABTAF8ASQBEAD4AVgBsAFIANwBJAGQAcwBJAEoARQB1AFIA ZAAwADYATABhAHEAcwAyAGoAdwA9AD0APAAvAEQAUwBfAEkARA A+ADwAQwBIAEUAQwBLAFMAVQBNAD4AWQB3AEIANgBJAGkAYwBH ADgAcABnAD0APAAvAEMASABFAEMASwBTAFUATQA+ADwALwBEAE EAVABBAD4APAAvAFcAUgBNAEgARQBBAEQARQBSAD4A</cencssh>

Short:

<ContentProtection schemeIdUri="urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed" value="Widevine">
<cencssh>AAAAYXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAEEIAR IQxMq0wMCcPDGJN7hwHlQU5BoIY2FzdGxhYnMiGHhNcTB3TUNj UERHSk43aHdIbFFVNUE9PTIHZGVmYXVsdA==</cencssh>
</ContentProtection>

Which one of these pssh should i use?

Next, in the headers.py I put value I got from converting curl command (get posix curl in firefox)

curl 'https://lic.drmtoday.com/license-proxy-widevine/cenc/' -X POST -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:101.0) Gecko/20100101 Firefox/101.0' -H 'Accept: */*' -H 'Accept-Language: en-US,en;q=0.5' -H 'Accept-Encoding: gzip, deflate, br' -H 'Referer: https://hrti.hrt.hr/' -H 'dt-custom-data: eyJ1c2VySWQiOiI4MjQ3MjIwIiwic2Vzc2lvbklkIjoiZVFVdn RDdF90Y1FIbXNJUW9PX0EySW01NXYtWkdFUE9WQ1JoSDNUYzFJ OC4iLCJtZXJjaGFudCI6ImF2aWlvbjIifQ==' -H 'Origin: https://hrti.hrt.hr' -H 'DNT: 1' -H 'Connection: keep-alive' -H 'Sec-Fetch-Dest: empty' -H 'Sec-Fetch-Mode: cors' -H 'Sec-Fetch-Site: cross-site' --data-raw $'\x08\x01\x12\xfe+\x12Y\nW\nA\x08\x01\x12\x10\xc4 \xca\xb4\xc0\xc0\x9c<1\x897\xb8p\x1eT\x14\xe4\x1a\ x08castlabs"\x18xMq0wMCcPDGJN7hwHlQU5A==2\x07defau lt\x10\x01\x1a\x10\x99\xd5eN\xceC\x10\xef;2\xef\x8 8N.:\x09\x18\x01 \xc7\xa6\xef\x94\x060\x158\x93\xcd\xcd\xe1\rB\x90+ \n\x14license.widevine.com\x12\x10\x17\x05\xb9\x17 \xcc\x12\x04\x86\x8b\x063:/w*\x8c\x1a\xd0(\xd23\xacf}\xfa\xdb\x86L\x1a+\x86qI \xa1nD\x14M$\xe47-_t\xf8LMPJp\xae,\xe8\n*\x90\x86\xef\xaf\xcb\x8c\x0 b\x8d\x8eD\x84\x1bZ\xfd5\x93\x96J?[\xa8n7\xfcF\xf9\x12i\xfeG\x0c\x92\xf2\xb0r\x09epN\ x9b\xb8:\xd5\x8dI+q+\xb7\xc6\xeeo\xa86\x8b\xf8sj\x 88\x10\xee\x0f\xf1X\xceh"\xe2p\x16w\x1b?\x09\xff\x d7\x9a\xb9?V\x1ab\x0e\xa2\x98\041\x80\041.\xe1k\x0 7^\xce\xc8(7&\x94\041?`\xd8\x95\'\xd9\xe8\xe7\x9bb \xaa\x1dE#\xdaL\xd8\xafr\x9e\x9b+\xbd\x81\xbcs\xc8 nYE\xd6\x0e\xdb\xc5\xf2\x81\x99\x90B\xd1K\x80n\xfe \xbd\xa1\xd9\xab\x1d\xb6\xa2RF\xb4\xebL"\xa0\x1c\x bb\xccNxd\x1bD) \xc2A\xbdE\xf8\xb6\xd2~ \xcc\xe6y\x1e.\x96\x13$\x09P/nt\xd3\xe7(m1*\xc7\xaa\xf3\xc4\x17\x80\xe2\x98\xe5 2[\xaa\x87\x11\x86\x12\xd0Y?>\xef\x99\x9b\xe7\xf2\xa 3\x81\x98\n%\xd3\xd2Y\xe8\xd1\xc1GF\x7f\xef\xb5\xb b\xc0)Z\xf4\xcf,\x9bJ\xf8y\xe5n\xeb\x95\xd4\x91??\ xaa_e[\x80w\xc3\xb8%\xe1)\xecy\xcc&4\x1a\xd3|4\xea\xe3m\ xd3\x82\xc5\xbd\xd6\xb3g\xcal\x95"\xcf\x10\xab\x85 &\xb1\xd9\xff\xa4\x06<\xb3\x7f\x8e(%\x83\'\xbd\xf5 T\x9a\xe6\xa6NK\x11\xe5\xca<\x01\x04\xb5\x92#\xf1\ xed\xb4\xd1\xfa`\xe8E\xcf\x8f\xcd\r%\xe0\x95\x1f\x caR\xa11\xc7pq\xf7\x87\x9fqX\x9b\x07\xab\x8c\xc0\x bc\xb7j\xb57-\xbd\xec\xf6x\xd7\x01\xf6\x09k\x80\x0e\xad\xa6b\x8 e\x1c\xf2\x10\xbf\x8a\x80a\xed\xfc\x92{t\xaa#\x8a| \xc0\xe8w2\x9a\xbd\xcf\x1fK\xba\x9e\xe1\xdf[\xab\xcfc\xac\x0b\\5B\xc0\xf3\x07\x92\xf8\xd8-\xc3t\xf6\x1dm\x1dV}:1/\xf5\xe5\x9d\x17z\xf0M?\x8c\xcf\x9d>h*_\xef]\xce\xf1T\x9d\xc5\xda\xd7\x17\x10\xa1\xe8\xfe\r6\x e2B\xd5\x07$\x8c\x82\xe4 \xa9\xa6WC\xfbZ\x8b\xcbf\xec\xb2.G+\xdf~\xaa\xa8d\ xe3J\x8d\xf7a\x93\xd8\x9do\x14\x01\x14\xd0\xf8\x09 \xce\xe3\xefW\x10\xe9q\xa5\xba\xf2\xcfZx\xcau\xb4\ xf9\xbc@\xb9\xc19+\xed\xc1j\xa6ZU\xa2m\xecL\x13\xd f\xd8\xfe\x0ct\x81\x05F\xee\x8d \xfa\x9dD\xfc\x15\xfc\x01\xf9\xf1\xa9\xbf\xd2\x11\ x90q\xee\xdfj`\x83(\xc3\xe6\xafk;\xc4=\x1f\xa0"V\x 97?\xdb\xee8\xb0\x03\xe5n\xa9\xdei\x17\x06\x06\xc7 \xc3\x92G\xc20\xf1\x93\xf5\x1f\'\xdb\xfd-\x953\x05\xfe\xd2\x86\xa5\xfdg\x9ai\x81 %J\xab\xf5\x88\xedf\xdf\041U\x86@\x1a\x1bx\xe6-\xc4-\x0cK\x1a\xe9\nk\xa4\xb4*\xc3\xa74\xbb\x9c\xd87JV\ xc5\xb4\xcc\xe3\xe7y\xdd+\xe2\xb6\xc4\x1577\xc4S`i \xe5\x04k|od\xc7\xea\x0e\x82\x12i\x04\xaen\xba\x00 ~R\\C\xff<6\xd2\r\xbc?E\x89\x19\x1c@\x96=Z<t\xf6\x 1au<\x8e2\xa3\xe5\x82\xa4\xe19\xf1\n\xc6\x95\xcd\x e5\xe8G\xfc\x0c\xf0\xcb\xa2\x89\x97\xa4\xe7\xe86\x fd\xafJ}\x9759\xaf:\xca?\xac?\x93\xf6sc\xcf\xd9\\f \xe20\x97pd\x1cA\x16\xcd\x96[\xa2Y\xd6\xf3\x0e\xab\x81\xa5%w\xda-\x0b\x10\xed\xe3X\xb60\x8f2\x84\xd2\xfc\'(jAR\xc8\ xb3u)k\xad\xbcu*\xfey\x11\x08\xb9\xb7\xc48\x91;\x0 3l\x00\xdf/\xfa\xa8\xc7\x80d\xe5\xf9\xa6\x84\xa8\x91k;\xdd\xa 9\x93\xf8w?\x13\'\n\x97\xa5[\x85\x95\'&\x88a\x05u.\x81\x943\xad\x08\xc8\xd1D=\ x05\x91\x95ga\xd3\xb8446\xca\xdd\xe2\x8a\xb6#x\x9c \xf2uD9\x7f\xf5\xa5\x1a\x92\xe9\xa1?b\xf4\x93q\r[\xef\x1c\x10A\x92r\x9a\x8f\\Bp#Y\x8c\xa1\xf0\x08\x e5C\041z6+\x8as\xb7\xbe\x16\xed\x91o9\xae\xce\x10\ x85\xd93}\x9b\xe1\xf5\x7f\\\xc6{\x19\x96X\x09\xe2\ x92>\xab\x89\xffv\xef\xb0\x1d\xdb[@ca\xeb\xb5y\x9a\xfb\x08\xe7\xd3n\xd3\xcf\x93\xb3u P@\x1e\x9eZ\x82\xd9\xc0\xf5?]\xbd\x15\xb1\xe7\xb8\xf0\xa1\xd3L\xde\xe0\xceL\x98 \xc4\xf5I\xbb\x1b\x1f)\x96\xe0=\xa5\x04\x18\xd4 \xbck\xd9\xe4\xa2\x99\x92\x13o@\xa1I\xdd\x84o\x19A \xd8\x88\x8a\x0e{\x06\x92\xd7\x9e\x7fU\xea\x8b\x17 d\xa6\x17\xc8k\xbf?o\x822\xdfs\x83@\xc5j\xdf\x15\x aa\x9a\xf9\x7fGfHm\xe6\xf6`\xcf0L{\x95v\x9ea\xdd\x 05;\x94\xb1\xa3\xb1xVj\xfa|\x07IH\'}+\x11i\xbcx\x9 co\xba\xe1\x19Ok\xc2\xf5\xa6x\x1a\xffl\xa8\x03$\x0 bi\x9a\xf3\xfaE\xa7\x80\xca\x03\xfb\xfd\xc1\x85\xd f]\x9a\x96\x98~l\x86C\xd96\x04\xba>\x80\x1flH\xf0\x0 1\xd9\x95\xd8\x1d\xe7\xdd\xb5\xb1\xa4=\xd3,\xc4\x1 fw\xd0\x9d/E\xe9\xe8\xf3\xdb\x02\xa8\x1a(\xc8\xc3\x1e\xae\x1c \x99\x90\xb9\xe5\xdf\x8b(\xd6\xa9G\xbd\xc8\xa3*Gu\ xb3r\x94\x9fbg\x03hq\n\x12\xc2_5\x82\xa6\xa0\xdc\x 0c.\x09\x06\xbc\xc0\x1e?i\xc3\xf8\xcb\x10[F\xaa\xa2\x01\xb2\xc4\x1d\x84c?\x02\041\xaab\xe0m\ '\xc3\xa5\xd8]\x1c\xa2\x18\x11\041VbfV\\\xaf\xef\xc9\xfdu\xd1Na\ x05Bd.d\xd2\x16\xb5\x00\x82\xd8\xfeH\xe9\x97\x87Q\ xfd\xe3\xbf\xfec\xc9B\xd1\xe5l\xea_\xc7Q\xabl1\x08 \xae;\x10)\xd4\xf3\xa9\xa3\x11\xe6\xcfv\xdeO3S\xda =\xc3d<\x1a\x8f\xba\x13M\x0f\xdb\x0e\x96GR\x14b\xc e\xdd\xce\xf1\x01m7,\xe6\xfd&J\xb9z\xea\xf9\x11\xb c\xa0O\xed\xb7\xe7\xb6\xa5RJ\xe1N\x08_X\x09\x88g.\ n\x98\x92~\xbf\xc0\xe6\x1eh\'g\xb8\x86\xae\x0b\r\x cd\xe4\x99#\x18\x9e\xfa\xd1f]\xbd\x03\xe2\x15\xa6U~\x1ff\xe1\x8a\x02\xcf\x10\x8 2\'\xc8\x96\xdc\xf5Hth\x9fX\xd2\x8c\xcd\xf8\xeeSX\ xf7\x87\xd2J=\xaer\x140\n}\xc1\x9f\x85\x93\xeb{8\x f1\xe4\xe8\x9d\xa3\xec\xb2\x8b\xf2\x045\xa5\xd5\x0 1"7\xf5\x0f\x12\xa4\x86\x0b\x14\x04\xf9\xa6\xd1\xc c\xadGkw\r\0419/X\xa0?N\xe0\xa3\x80\xa0x\x90\xb2\xd9ODh\x05}.\xf0L \xadAt\xf9\xe7\xe9\xdc\x01>\x85\xa6(W_\xad\x0f\x18 \xba/*\rR/\\\xe0\x9d\xdf\x86\xa8\xe1H\n\x9a\xc74E`\xf0\xc6\x 81bOF\xbek\xa9\xa6DEN\xef7x\x8a\x8d\x94\x88\xd5aw\ x17\xddx/_\xda\xb8\x0e\x9d\xb7\xaey\xdd\xf6g\xff5W\xf6\xbb? \x90F6t\x98\xea\x83.\xe7])\xf8\xaf\x8b\xb0%"j{\xe3\x08\xba\xfab_E\xe4[F2z\xf8z\xe6\xd0\x15\xb2\xaf&\x1cL\xb8\xb6s\xa0\x8 c\xee\xa9\x1f~\xcfP\xf8j\x9a\x9a~\x9c\xe1\x01\x0f\ xbcz\x83\x05\x9cV"\xcb;\x95\x09\xe9\xaaS\x7f\x0e\x a6\xd3\xb6\xd6\xc8\xb8rN6\x7fV\x8aH\x85\xf2\xa3\xe 2 Y\xc9\xb6/\xbe\x00\xb4\x89\xa3\xe5\xf4^\x89h\xc1F\x8c;;\x83\ xa2s\xcd{\x97\rd\'a\xe5\x14%\x88\xef\x108U\x0c\xbf \xdel\x10\x07\xde\xc4\x84>\x0b\xab\x88\xba\xfc\xb6[)\xd6\x04\xc49V]\x15\x9f\x87}\x01\xf0\x02"\x00"\n.A\x8em\x95\xc3%: v\xfb\xd4\xc7\xbc\xf9\xc1\x08\x13\xa0\xd9\xc4\xd0^ #\x82M(]Q.\xb1\xe2\xd2L\xee\x1e\x90\xf4_\x93\xa4\xb5\xa3\x 84\x02\xf4\xcc;d\xe51#\xd1,\xa7\x0eA\xf6\x14\x1d(\ xed\x05\xb4T\x14T\x83\xb5\xcbknZb\xabS\xd7M\x13\x8 6\xd0\xcc\x0bA\x1a{\x03#\xe7%a\xb5|\x93\xb6m0\x14\ x1e\xb5\xbd6\xb60\x84\xe0d\xbc\x0b_/\xba\xe3\xb6\x11J\xae\xff\xf8E\xab2\xf2\xb4-\xd1\xb77\xb2/\xac\x0b\x86\x00\xd1I\xebN\xec\xab\xd9\x9b4F\x09\x e1\xf6\xe5\xae\x0ed\xff\x84\xc5\xdbj^\xa8\041~\x1d m:k}+"\x87\xe36o^$N@T\xe7\x1b\x0c\x87\x7fv\x99&\xe dG\xb7\xe5>\xd6\xf2\xf7z\xf3\x1c\xf0\xaf\xfa\x8a\x d9#\xc7\x88\xce\xa1\xfdja\xe7\x13K&Ih\xc5\x0cvG\xf 2w\x1fw\x0bi\xcb\xf9\xc1M=d\x0e\x82n\xa7\x87\xca\x 02B\xd7\xec\x94\x8c\xfb\xaacMY\xeb\x97\xf4\xdf\x86 27k_\xb8\xb8\xc0V\x89j\x14\xbe\xf9D6\x8f$\x1d\xba\ x0cmQJ5\x1c\xde\xc6\x039\x96>d2Pn<\xba\xd2\x97P\x9 1\xd9\xfeS1\xa3\xb2,pk\xfc77\xfb\xa0GQ\xaf\xc7\xe7 5\x86`f\x82\xf2 \xd6\xf8\x11Q\xb9\xdf\x91/\x1av5\x82\x95\r\x9ak\x97\xeb\xeb\x99K>-\xb3"\x91\x95\xd1\xc6\xeb\x1e\xdd\x1d\xfaV\xf48\xf 7\x1bG\x82c\xa6X>\xeeGpnZ\xd4{\x0eLk\xfa\xbc\xb4\x 85r\xb2WWe5\xe6\xe5m\x80Q\xe8i\xb3\xff_\x1a_\xf5\x ebG\xbd\x00\xac|`\x90\xac\x10\xaa\x1f\x08|\xad\xd3 \xb7A\x95\x96\xa6gVu\xd6\xe4>\rk\xe1\xa2\x87\xca\x f6\xae\x8e\x0b<\xb35g\xd63sd\xc2ga(V\xd1\xda\x8a48 \xf7\x7fv\x07[\xa4Ic\xbdx\x09\xa6\x8f\xe0\xd7\xe2$\x90\x92\xc2\x b6}\xfe\x9c\x1f;\xa8\xf9\xb3\xe2E\xeaTh\xae\xc9J\x 0e\xa6\xf3\xe7\xbd?bq\xcaB{\xb1T\x8b\xdc\x88\xe5\x c9=\xf2\xed\xabG\x9b/\n\xa7\xf2\xa4,R\x92\xdaG\xacs\xe6\x0b\x10Z\x9c\xc 0\xec\xc6s\xa2M:\xc9\xe5\xe7\x1c\xe8\xfa\xd5DE@\x0 2\xe8\xfe\xc7\x10\xc2\x0e~\xcb\xe7\xbf\xaa\x15M\x1 9\xa6}\x82\x1f\xf4~[0\xb6U\x06,\x08\x17\xadB\xc2\x90v\xe4\xa32\xc9\xb3 .\xaf\x15\x8a\x8d\xcfF7\x05\x02/\x16%Uw-\x81\x843\x1f\x0eI\xd4\xbd\xe2\xf2\xd2b\x18b\xab\x c0\xa7U:\x03\xb1\x95\xc2\x90\xd2\x04\x9e\x08\xfeP\ xc4p\xe0\xdc\xd8\x84\xe0>\x1dg\xf4OYTJ\xbad|\x8a\x d6l\xfa\x99\xc8\xbe#\x19\xc0/fN\xc0\x9c\xed\xe7NA\n=\x19\xf8\x07\xf7#j#\xac\x19 J\xf8\x8d]\xa4\xe7d\xa9bp\x10\x17\x8c]\xbcP\x90Q\x18\xfb\xb1\x02\xbcb\x91\n\xf9\x1272\xf 6/\x0f\xf3[\xfd\x91x\x06\x14\x12N\xf1\x92x\xd5\x1c\xf0\xb8<\x e1]\xce-G\xdf1PG\x03LC\x1fEq\xc3\xa8\xb7\x90\xee\xe6\x12\x e1g\x11\xa8V\x1e^\xb4\x8f\xb3O\xdc\xa5\x95\x11P\x9 5\xaeG\xcb\xd2\x03\xd9#\x99\xb9eO$j\x98\x07\xa9\x0 3|\x0bk\x01\x1a\xd4\xf8t\xf0\xa2}\xcc;iF\xb3\xb7nv "\xf2qb\'\x17n\xad6\041wD%\xd5\xfe/\xc5\x06\x13\xe1\xd5\x05E|\xfb\x8d\xcc\x82\xd3R\x1 d\xf7\x0e\xd6\xedc\xb9G\x09WS\xbb\x9cJ.+q\x19\xac\ x18\041\x87\xb3M\xa9\xef\xb9WK\x93\x1d\xee\xf4\x90 \x03\xa9\n\x8af\xc85K\xccuT\x15\xa9\xab\xd5E\xbd\x 91I\rrtk\xe25K\x954\xa4\xbe\xe9\x04\xf6\xe01\xf4\x 97w\x81\x85\xda$\xb7\xb24\'y\xdb\xa5\x7f2D\x936wf\ x95\xb4\xf3\xa8\xeb\xb0\x00\x89\'6\xc3\xf2A\x135\x 8d\xbd\xde\xa8D\xb4%\xa7\xce3I\xb6\xd0B\x92\x10\x8 b\xd2\xc6\xfe\x85\xe4\xa1,\xa0\xb9\x01\xc7oX\xff\x 98hb\x17\xc1.\n)\x94\xdc;foLr\xe6\xaev\xdc\x9c\x85 >7^\x07\xbeJ>y\x99v\xba<\x18s5\x9cZ,JUA\xa9\xbfiiJ ?5\\\xc8\xfa\x12X\xb5\xb71\x142\xedA\x07\xd5\xe7\x 92\x9c\x8c\ri\xdf\xfa\xee\xcezm\xf1*;$=B][;\xa9\x00\xc4\xf7\xbd\041\xcd\xe5\xee\x1f\x7f\xf9\ xce\xd1+\xa4n\x12`\xb3\x92\xbe\xc4Al\x0c\x9f:\xe4\ xc0\xad\xd2\x1b\xb5\x8f\xd9O\x9c}\x0c2\x12rT\x19\x ddG\xcd\xb1a\x08\xa7)\xcc\xf5\x02\x83\xf6U\x9f_\xe fg\x8fS\xd1\xabaO/_\x02\xed\xe1\xe0\xd5_\xa8\x03\x11<h\x11dJ\xbdM\x0 1\xaa7\xfd\x81]&\xe1\x17\xa8\x8ec\x192Nv7q\xbc\xc7N\x11\xbc\x1eE\ xf6\xaf\x7framcu\xb0\xf1\xca2\x1f\xedb\x00mu\xcc{_ \xb8\xeaR\xa5\xfaj\xbaQ\xc32t\xd8\xd9\x031\xb6\xe1 \xd1\x94\xb5\xd6s\x0e\xaa)RS\x02L\xebz\xe0\xa3\xe7 k\x0fH\x8c?\xe4\xb2G\xccA\xd9Ax\x89z}\xea\'Zu7\x1a \x16z,\xca\xbc\xb4\xb8\x80(\xd7\x8a\x0f\xe1\x87f]H\xae\xed\x1d\x0b<S\x81j\x7f\xed\x94\xbd\x9d\xc3\x b4\x16~*\x01\x07\xfd\x90,\x1fmD\xe9|\xfbL \xe9\xfdI<\xa0wMK\xce\xb3\x16_+\xc3\xf2\xbb\xb3iu\ xd1\xe3\xebd\xc3*h\xd6\xf0\xa2UF\xcb^Z>\x91\x99\x1 0rQ\x93D\xda\xe7\x9fC\x15\x1f\x1c\x85\x1b\xaf\n\x8 1q\xd7\xaa\x00\xd4\x19\x89\xa2>\x9d\xe8\xbb\x98R\x 0f\x10\xc5M\x90\x01\'\xd5\xa9\x8a\x7f,\x92\xb3d\x9 6\xb5\xde\xdb\xe4\xe3Y\xcf\xfab=\x11t%\x88LZ\xaf\x 82j9s\xbe\xc5\xa7\xf1\x02\x05\x98\041\xc4X\xfb\xbf G\x98\xf8K\x89\x7f\xe0J+\xcfY\x9bl\x1d\xe5\xf2\xab d\xd5q\xc9F\x84\x1c\xe86n\xf8\n\xdcx\xcc\xe9\x0c\x 8a\xfa\x1b\x7f\xe1\xf1R\xfb}\xda\x00\xe9@\xc3\xdao \xd8O\xcc\xa2\x18K\xc8h\xf3L\x8e\x81\x86\xe8K\xdb\ xbe\xf3\x9b\xef?\x1b\x14\xf3\xf0~`\xe8j\xe9Po\xf4^ \x1f\x80?eLj\xa1\xa4\x8ah^\\\xd7VT\x1a;i\xf0 J\xc0\xac\n\xf40|@z\xfd\xc8\xaa\x0f\xdf\x14M\xa6x\ xc3\xde\xca\xdd\x13A\'\xdd\x8f% \x04\x96,=9\'\xad\xcb\xd4\xaf\x92\xd8\x0eZ\x1e\x02 \x08]\xe0NE\x06/\xde.K\x00#\xacE\x92\xdb\x10\x86b\x81\x9d\xf9[\x1d\xdac\xa6`\x9c9\x9a\x07\x11\xbcA\xf7\xaa\xa7qV <\x08\xb9\x1fU@\xa19.\x9c\xb0\x9b\x19\x9d|_C"\x0b$ \xd2\xa1\x19\xa0&(\xb0\x94\x04\xec\xe2\xf1=\x94\xd 02V\x88\x8enP;\xfe\xe1\xba\xf9\x84?-\xef\x09\x8d\xfcm\xd0\x1cmi8?q\xcf\x0efX\x1e\xf7\x d0tjL\x8al\xd1\xa5\x16\x09\xb0\x80\x95\xcd\x9e\x1e t\xfb\x82\xcd\x9d\xbe\xe8|\xd2]\x0f,\'#\xf4$\xc1\xa4I\x0eJ\xdc^\x1d,s\xe4\xab\xa7 \x82h\xfeE\x94\x83\xf4\xad\xb2\xdbT \xfd]\xed\xd5t2Ss\xca\xe1\xb7\xfe\x15p\xd7\xe3\x1a\x13\ x0c\xa3\xe2p\x97C\xa1a?"\x95\xe3 \xf0h\xffI\xb17\x93\xca=><\xb2\xe0c\xcfG\x1c\x97R\ xa9\xe6\x91 T\xe83\x81\ri\xb2\xd04\xc2\xbb\x040\xdc\x1e{\x18\x cd\x02\x8b\x931W\xf9\xb8\x89\x8a\xcb\x1b\x83F\xf1& E(\xe8\xcd\xa0\xf4i|`\xd2`{Wd\xa9\x89\x89Km\xc8\xd b^\xc1vH\x95\xdd"\x7fF\x87\xf3\x8a\x8a\xa5\xbbbgf\ xc8\x86\xd9@A\x1aQ\xf8W\xc5\x81&\xe7\xc0\xd6\x95\\ \xfe^\x0e\xc1\xa7l\x0e\xc9y\xf0u\xa4\xdb\xcf\xe8\x 9cV\x09\xbd\xa3n\x15\xab\xbe-\x90 c\x98\xf5\xda\xe25\r\x9b\x93\x18\xcc\xfby\x1e\x01\ xa1\x88\041E\xde\x8f\x91Zi\x8b\xf9\xbeq\xf2\xddV\x a3\xd5\xd1\xd9TF\xa8\xba\x89\x0e{\xf5\xb4\x01\xbd\ xd4\x82<~kz\x98\x8bC\x8aU\x9d\xe0a\xdfG(\xa6\x1e1\ xa7 \xdeZ\041\x84+\xce3nQ\x02\xdc7y\xc1M\x83\x01z\xac\ x16I\xfe\\\x8eDG\x8a\xe3\x16\x14\xd6\\\x0e\xc87\x0 7\xaaFg\x869\xe4\xb8\xc9\xdc\xdf\xdb[\xea\x17zf\xfd\x07\x97\xe4\x0e\xc1KY.\x13WEl\x06S\ 'Q>\xa6\xb6\xb6,\x98\x8d\x87\xf3(\x10b\xd3\xc9\xc0 \\<z\xca\x1b9\xc1\xadtJb\x9dMJ\xda\xd6\xbd\x7f\xe1 h\xb3"\xeca\xec\xfdtN\xf7\xe4\x9a"y4\xc2m66\x90\x0 9M\xe0\x91oM\xb9~\xab\x80\xad\xca\xdb\xc4$\xea\xbe \x01\x1c\x16U\x01,"\xb9\xb7\x09\xb1\xaeyo1V\xa8\xd 7\xf2A4v\xec\xf1i\x1c\xf7\xcd\xc1=F`\x8e\x8ap\xe1@ Qx\x92*\x1cp\xff\x03Q-\x16urS\x1a\xb0\xc4r\xdf\xaa\xab\x92\x19\xad\xafd\ x7f`\x16\xfb#\x98\xa3R\xf5\x91\xe0\r\xd5[0\xe0\x99\xf0\x7f\xbd<\xc8\xa4i\x02\xf4\x0e\x8e\x1 2-f5\xb4*\xee3\xc6\x91\x98v\r\xb5\xa5\xbb\x08Y\xdaX\ x86=\x95v\xd8u2pu4`\x95\xab\xf1\x14\xfb\xca\rD\xa4 \xf5\xc1\x14\xd4\xccN\xdf\x9f\xb9\x1b\xfa\xab\x9f\ xc0\x98\xba\x8f\x08\'\xfc\xe6B\xbb^\x0b\xdc\xca|Sp Kq0\xbeB/9\x9a8j\x0b\xd9\xee\xff\xbc\xc7\xb12)\xff\x97\x10\ xbc\x9f\xbf\xfc\xc9$\xb6t\xfc\n\xdae\x07C\x86\x83a \x02\x97\xa5\xa2\xb6\x88bev\xc5\xe1\x92&\x8a\xb3\x f1*\xcd\'\xcaAz1\xd0\xe7v_\x00\xb5\x053\x09u\xa4\x c0\x920?O\x98\x10\xbca]\xd32\xf5s<\x92}DR\xc5H\x98\041\x9ek\x8e{.Z@\xee\x 14\x1b\xd5(\x98\xcc9\x03\xc8\xa5\xdd\xa4\x97(\xfd\ x05\xbbI_\x14c.4@\xeb>\x1e\n\xe1\x03\x01\xcf\xf6\x ed\xf3\x96k\x14\xf1wo0X\xd8\xeem\xd9\xdc(\xeb\x17\ x9c/\x95\xf5\x84\xd3\xebn\x8e_u{\xff\xd5\x12N$\x83\x03 9\xf5\x93\xe6h4\xb1\xf6\xc8\xbf\xa4uN\xaa9\xad\x1f[e\x0cK m\xb4E\x84\x9d\xc8\xc5k$\xffY\xfd:\x05\xf1l\xa5diy #\x1b\xb4]mQ\x05q\xb0\xa2\x8c\xac\xe0&>oE\xc2^^\xe9\x9d\x7f\ xc8\x8eK\xc9k=+\x00M\xa1\x01\xb7\x14;\xcd5\x06\xb0 <J\xa9\xd2\xeb\xdd\x9d\x82>\x0f\xfd\xa2\xd0a\xbbt\ xb1\xa3\x8ap\x16\xb4\xb6\xc8en\x1dh\x04\xcf\xb5\xb e\xef\xea\xdaeo\x96\xb8C1\xf8\x06\x8c\xe9O\xe9\xf4/\xa4\xc1\xe7\xe5\xf6\xe5:\x88\xf7\x92\x1ep\xe8\xcc \xfc\xd7\r(\xb05\xa2\x9e\xb1k\xf5.\x83\xaa|>0I\xeb w\xa9\xa9\xe5\x1c]\x07I\x17$A\x95Z\xcc\r\xdc\n\x01\xc9\xc2\xc4\xa8y\ xde\xd5\xb9J\x02?\x93\xf7\xcb7\x19G\xdc)\xff\xab(. f\x0b\xcd\xf5Gd\xe7\xa4i\xe2\xd1\xc4\\\xc2\x95\x07 \x9f\xbbsQ\xfc0\xd1\x8dQ|\xf8\x92]Y\xbc2\n\x11\xe6\x9f8\xb93i(\x9a\x03\xc69\xfc&\xf4 +\x95c,g\x97`\x9b\x8d\xbc\xe7\xfe&\xcc+\xe6\xf3Vu\ xd24b\xa0\xc3f\x8dl\x1d+\xb1\xe1\xf5\xceC\x05\xea\ xdc\x8b\x14\xab\x92|\x03\xd52[\r\x8cm\rovg$+\x95}\r\x1c.\x90\xa0\xdbla7\x1aP\xf3 \xf1)\xda\xf4p\xaf2]\x88\xf6\x07f\xae\xd4\xb8@~\xbax=\xba\xf8{\x142NA\ xba\x8a\x88\x9ek\xfc\xb8|\xde\xf3\x18-Ki\xbc\x03\xb4\xeeJ\x99\xc3\x05\xa6\x09\x0e\x91\x8 8R\x9fh\x15\n\xb1\x81\xf7i/G"?\xa7ir\xd3\xb4\x17\x97oDf\x14\xf03\x88k\xde\x9d \xc3\xfb\xf8\x92\x03\x85\xb116-\x0eX\x9b\xab7\xc5Q\xcb\x07\x93\xc6\x0cI\x18\xb7\x 10\x9e\xf1\xec\x1c\x8e\x04\xf6\xab\xf7J\x1d\x91S\x 81\xac\x06\x80\x96\xd2vm@\xb8-\xfc\x81\x00iI_h\xae\xe1\xcc@\x96\x8ec\xb4\x83\xdd \xbf\x93h\x17\xb5T\xf4\xdf\xf7\x11\x7f/\xe9\x93\xb4vE\x9c\x05f \x0c\xb7\xf5\xe7A\xb8T\xc5P\xfb\xcfs\x8bt\x9a\xd0\ x0e\xe36W\x11\x1aa\xc1\xd7\xc9\xdb\xf0\x15P30\xca\ x1a\xd8\xdc\n\x9b\xdc\xab\xc0\x11\xaa\x9b\xe5\xee\ xa1\xcd&\x11\xbc\x07a\x80\x0bc\xe9\xb6\xc5Y\xcayF@ \x86\xb4\xaf\x98\xbb^\x05\xfd\xc0\xb1\xad\xfe\xcc) \xc9\x0f\xd9=,\xe2\xb7>\x91\x05\xa8\xe8\xc8\x15\x1 2\xf84\xd1?6\x12\x08-8\x9c\x13\x9f,G#\xf8\x85\xdcl\x14VL\041\xf0p\xf9\x d8B\x04\x80\\\x01\xdf\xdf\xb0\xa6*\xbdi\x96\x13W\x d7|\x8b\xddE\x9e\x12\xbe\xb7K\x13\\\xf1d\x07w\xf3\ xd7\xa9J\x83+\x94Zo\x8d\xd8(\xc6\xc9\xc5\xb6,\xfa` +1{i\x11\x0b\x02\xc1<\x0f:jS\x02yL9\x96>0\xbeFg;\x 8c\xd0\xac9y\xec\xf1\xeaj\xf0\x12\xf4\n\xce#l\xf4\ xb7C:\xe2\x11\xdey\x93\x8c\xee\x12\xd1\x13\xb0\xb1 \xf9\x85O\x05w\x97\xd3\x15/sI\x01\x9e\x11uH\xf8\x8b\xb2\xda\x143\x1e\xcb\xa9\ xbc=\x01k=\xf3fy\xe10"xb\x92\x98\x7fE+83\xe2+\x8b& .\x1f5\xedR\x85EC\xc2\xce\x0c\xfaHW\xae\xe9\xe7\x0 bKJ&\x8d\x1f\xdfD\xaa\x10I?\xec2#\xa6S.\xcf\xc6\x0 1\xdf\041\xca\x12\x16\x0b\xba\xd3\xe9\xe3\xf1\xd02 .\xdcW-9\xf1=\xfa\xda\x13\xab\xdb\xf3V\x06U0l\xb8\xea\xf3 \x0f\xceNU(\xa2;\xce\xa9\xc0\x08\xdc\xa5\x9eI\x97= &lLjr\xf3\xd2\xfbI}\xdd\x97\x87\x02\x95\x9f\xec\n\ xa3\xa2y\x06[\xefW+0\x8b\x89i\xf2\x86{F#G\xd23\x12\xdf1D7Gs\x8e \xbb\x82\xae\xd6\x04\x92O\xb18\x02w_dr\x8f\x1b\xbc \xe17L\xad\xd4\xf4\xb9\x88\n\xbd\xea\xcc\x84\xef\x e1\x06\xf26\xbe#\xc8oJZ\xfb\x11\n\x92"\x10\xefn\x8 8\xd2x\x14\x87&L\xcd\x90\xf2\xdej}\x8e*\x80\x02i\x 8e\x18Qp\xc6\xe0\xa6\xc74~W\xa8i[\x86\x93o\x82\x80\xd4x}\x17\x9e\xd8\xed\x97,-\x95\xf8\x86\x00\xcf6(\xa3\x80\x17=i\x8d\xa6AI\x9e .\x981G\x93Z\xde \xe2M\x01O\x9eG\x03\x82\xa0\xa6\xb2= \xf5B\xea}T\xdb\x9a1=P\xb5F\x9a^K\xb1\xa0\x9c\x9eS \xbc<\xa2$\xb4\xb3l\x0b\xb0\x1e\x80\x07\x8a\x06Ru\ xadP\xdeT\xac\x14Dz\xdf\x96u\xef\x90u\x7f\xecp\x14 \xe2d\xfa\xf8\xa5\xa8\x9d~\xfb\xcf\xb6\xb7\x95\xf3 \xcbo\xa8\rZn\x80Cj\x19}n\xe9u\x0b\xabq\xe8\xff\x8 8\xe8\xa4\xfdg\xb1\x91~\x81\x97\xe7\xba\xe7\xf3\xf 8\xed\xe9\x13\xd5\xf4\x02\xdd\xb9\xa7#\x88\x06\x85 X1m\x15\xf0\xd3k\xcaU\xe2\x9a\xef4A\x97J8\xc90\x00 \xbb\xf2\x02\xc4|E\xb8*\xee\xe6\xfa\rA2\xf5|\xa1\x c75\x19\xda\x08B9B\x9b5\x1e_R\x18c\xffj&*\xa2\xdf9 \xd6\x1d\x0bV\x8b>\xbb2Q\xb1<Ll\x9d\x1a\x80\x01\x8 e\x83\xed}Z\x00 w4\xb0\xde\xcc\xe2\xe0\xba-\xbd*Z\xfe\x17\xa3\xb37\x8f"MXO\xb6`~OzuO\x1c\xc7q \x07\xdb*\xb4\x88*\xfd\xc4\x14U\xc6\x89\xe9\xfaj\x f7\xb3|\xf2\xef\xa4\xba\xbe\xaf\xb5\xff\xce\'\xbf\ xb9\x9b[\x01\xfa\xa7\xd3\x09+zD`I\x17O\xb6MYr\xd7\x08\x83\ xe5\xde\xae\x89\x91b$*\xd0%\xf2\x97i\x8c\x93;T\xdf \xa4w\xc6r\x80\xcf.YF8\xea\xb2O\x19\xe3\x0f\x1f\xd 4\xa1\xeaJ\x14\x00\x00\x00\x01\x00\x00\x00\x14\x00 \x05\x00\x10\xdc3f\x93\xd2&g\xa9'

I did conversion at https://curlconverter.com/ and i put resulting values to header.py

Unfortunatelly, I am getting this output :

unable to parse license - check protobufs


Can someone tell me what I am doing wrong here...?

[codehound]

Use the shorter pssh

Append the lic url with

?specConform=true

For Firefox - to gain headers - RIGHT click on lic url in DevTools and select > Copy > Copy as Curl (Windows)

Paste result into curlconverter.com > select Python as output > Copy to clipboard

Paste this into your headers.py in Notepad++ > Save

The output must include dt-custom-data value - this will expire so use smartly - if it fails grab fresh value and get your speed up

Do not use WKS-Keys v2 - use v1

[naim2007]

Use the shorter pssh

Append the lic url with

?specConform=true

For Firefox - to gain headers - RIGHT click on lic url in DevTools and select > Copy > Copy as Curl (Windows)

Paste result into curlconverter.com > select Python as output > Copy to clipboard

Paste this into your headers.py in Notepad++ > Save

The output must include dt-custom-data value - this will expire so use smartly - if it fails grab fresh value and get your speed up

Do not use WKS-Keys v2 - use v1

I don't know why some people keep asking the same question again & again & again

Even tried them selves to find the solution. I have seen this solution million time,

but there is always dump-ass they never learns.

[A_n_g_e_l_a]

I don't know why some people keep asking the same question again & again & again
Even tried them selves to find the solution. I have seen this solution million time,
but there is always dump-ass they never learns.

You know, it seems a million years ago when a colleague was explaining the concept of 'hypertext' to me. I must confess I couldn't see much use for it and thought click-able links in a text document would be a distraction to reading and understanding. That was in the very early 1990s and we all know what happened. Almost overnight, it seems, all of mankind's knowledge was at our finger-tips.

Many, if not most here, have grown up with instant access to information as a norm, and I guess find a site such as this, where knowledge abounds but is wholly uncatalogued and buried in dross, a frustrating mess. I know I did. I read through page after page of 'keep-off'; 'go-way'; 'I'm in the 'in-crowd' and only the-in-crowd allowed here; 'I know how to get keys so pull up the drawbridge' type comments that did nothing but waste my time and squander my resolve-to-learn.

I have never spoken with those who run this site about their purpose, but since the fora name is 'VideoHelp', I guess that is a clue to its existence. It isn't called VideoHelpSoLongAsYouHaveReadThousandsOfFacilePosts AlreadyChumButStillExpectToGetDumpedOnIfYouDarePos tAnythingRemotelyRepetitiveToAnythingThatHasGoneBe fore.com

I've come to realise that almost every human quality sits in a range of values - like a point on a spectrum - you might be short; I might be tall; you might be bright; I may be less so. And so it goes on. People who come to this site come with a range of abilities that make them a unique being. Some are polite; some are annoying; some are self-sufficient learners, some less so.

I think a more valuable response to a knowledge-seeker, with, what to you is, an unwelcome question, would be absolutely nothing. Just let the - to you, silly, annoying and repetitive - question go. Think of the question as a bit like ploughing a field though - by churning the earth what was once buried again becomes revealed

As a means of sharing and disseminating information fora do not work very well. But until something else comes along they are the best we have. And we all need to help 'keep house' by dumping the minimum amount of rubbish and keeping our replies relevant. Don't you think?

[popmar88]

Use the shorter pssh

Append the lic url with

?specConform=true

For Firefox - to gain headers - RIGHT click on lic url in DevTools and select > Copy > Copy as Curl (Windows)

Paste result into curlconverter.com > select Python as output > Copy to clipboard

Paste this into your headers.py in Notepad++ > Save

The output must include dt-custom-data value - this will expire so use smartly - if it fails grab fresh value and get your speed up

Do not use WKS-Keys v2 - use v1

Thanks for the help, at least few error you helped me to correct.
However I have feeling this case is a bit special as I see in the browser debug that during license request some sort of binary data is posted. When I copy as curl (windows) I am getting some garbage characters. If I copy as curl (posix) it is not giving garbage but some encoded string, but most likely WKS-keys is not properly converting that into the binary data and i have to figure out which encoding it is and how to convert it to the binary data.


[Attachment 65212 - Click to enlarge]

Link to the page is https://hrti.hrt.hr/live/tv

If you click at last channel (HRT Int) you can play it without registration. I am really curious if someone can extract the keys.

I know for some people this is being repeated many times but i am reading this forum already for many days and I have figured out a lot using posted information, but this is a place where i am really stuck and can't find solution.

[ElCap]

did you try to search the forum?
if so, you would have come across this thread where lomero gave good information.
https://forum.videohelp.com/threads/405166-problem-2-getting-keys-for-hrti-hr-videos
when copying the information from curlconverter.com you only need to copy the headers section, the rest is not needed.

it works with getwvkeys.cc site

for the case of hrt1
pssh:

AAAAYXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAEEIARIQ7dCN8Y5SODG7GEnriX8g4BoIY2FzdGxhYnMiGDdkQ044WTVTT0RHN0dFbnJpWDhnNEE9PTIHZGVmYXVsdA==

license url:

https://lic.drmtoday.com/license-proxy-widevine/cenc/?specConform=True

headers:

dt-custom-data: eyJ1c2VySWQiOiI4MjA1NDYwIiw----cut----

keys:

edd08df18e523831bb1849eb897f20e0:5d936f87fd0aab2aba6578d1342d5041

[popmar88]

Thank you so much, it worked!

I am sorry for not searching specifically for hrti topic on the forum, but i really appreciate that so many people are ready to help.

I connected with VPN to croatian Ip address, I dropped 'data' part from the request and i got key extracted immediately.

[codehound]

Thank you so much, it worked!

I am sorry for not searching specifically for hrti topic on the forum, but i really appreciate that so many people are ready to help.

I connected with VPN to croatian Ip address, I dropped 'data' part from the request and i got key extracted immediately.

Where are the invisible Mods again ?
wtf has this got to do with the OP's guide ?
does this place actually have any Moderation rules ?

[Takyon]

Can I ask what you guys use this for? Other than getting keys for Udemy lol.

[A_n_g_e_l_a]

Can I ask what you guys use this for? Other than getting keys for Udemy lol.

Everyone will have a different answer, I imagine. In my case I use it to allow me to watch UK TV without adverts.
In the UK, the commercial channels take ~25% of a programme's length to show adverts and channel trailers.
Breaking encryption allows me to watch something broadcast free-to-air without restriction.

[[ss]vegeta]

Can I ask what you guys use this for? Other than getting keys for Udemy lol.

Getting keys from hundreds, if not thousands different streaming sites, since most of them use simple Widevine?

[Takyon]

So sites like Netflix or all the other popular streaming services? Could this be a substitute for a modified Amazon Fire Stick?

[A_n_g_e_l_a]

So sites like Netflix or all the other popular streaming services? Could this be a substitute for a modified Amazon Fire Stick?

Discussion of Pay-Site decryption is not allowed on this platform. Open your own thread if you wish to chance your arm. I do not wish for this thread to be closed because you cannot follow the rules, thanks.

[Takyon]

Ok sorry just trying to understand what this CDM is usrd for.

[A_n_g_e_l_a]

Ok sorry just trying to understand what this CDM is usrd for.

I gave you time as I thought you may be a journalist looking for reasons why Content Decryption is a thing that people use themselves. But it seems you are just another seeker of quick information; so give us all a break, do the apprenticeship first. Read the forum for a month or so, then come back and ask grown-up questions from a position of knowing what you are asking.

[Takyon]

I don't see why asking a general question here is offending you so much. I will stop posting here for now if it can help things. I asked a simple question yet I don't know what I am asking? Weird I just don't get it. If a forum is so big I don't know why asking for something a little more condense or to be pointed in the right direction is such a problem.

[A_n_g_e_l_a]

I don't see why asking a general question here is offending you so much. I will stop posting here for now if it can help things. I asked a simple question yet I don't know what I am asking? Weird I just don't get it. If a forum is so big I don't know why asking for something a little more condense or to be pointed in the right direction is such a problem.

What makes you think I am offended?
I would describe it more as 'tired'. You are not the first to join here and ask the general question 'how is it all done?'. And the question has been answered many times before. People are willing to help - BUT only if you put some work in first.
But I have to say if you have read through this thread and are still at the 'what's it all for?' stage I fear your language comprehension skills are letting you down and would tentatively suggest it might be a little beyond you.

[Takyon]

Well no disrespect but I didn't ask how to do something and this form is how to setup the cdm key. If you think what I did was wrong then that's up to you but no need to mischaracterize me. I'm done here have a nice day.

[staszek1503]

Notes on my journey to get a working Content Decryption Module (CDM)

I chose a cheap Android TV box T95 S1 2Gb/16Gb at £29.99 from Amazon.

Download a frida-server from https://github.com/frida/frida/releases

I had success with frida-server-15.1.17-android-arm.xz - the latest release - although I tried many other releases along the way.

adb via USB cable does not work between a PC and the Android TV box; you’ll need to connect over wifi..

adb connect <box-ip-address>

and accept the link request to the Android box displayed on the T95 screen

I tried using Frida from Google play store and that is perhaps an easy way to get the server software on the machine but I had problems with it and reverted to hand loading the frida-server and running it from SuperUser.

adb push frida-server-15.1.17-android-arm /sdcard/

 adb shell

move the server so it can be run

 mv /sdcard/fridaserver-15.1.17-android-arm /data/local/tmp/

Starting the frida-server first explicitly become super-user and clear any user environment variables active by including a hyphen after su.

 su -

Give execute program privileges

chmod +x  /data/local/tmp/fridaserver-15.1.17-android-arm

start the server

 /data/local/tmp/fridaserver-15.1.17-android-arm

check its running..

 ps | grep frida

That will give you a process number to kill it with later if you need to.

 kill ####

Dumper – download from https://github.com/wvdumper/dumper and extract.
Dumper is a python program to extract the CDM keys; it talks to the frida-server on the Android box. There is much misdirection about which pythons to use. I spent a day setting up a virtual machine and running pythons 3.6 , 3.7 and 3.9 all to no avail.
The latest python on my daily driver machine 3.10.2 finally worked but it perhaps because of the wrinkles of timing everything right.

 python dump-keys.py

will run the software when ready.

Prepare android-tv-box; update chrome to the latest version the Play-Store has
On the TV box start the updated Chrome browser and open https://bitmovin.com/demos/drm; let the page load and then close chrome. Next time Chrome is started it will automatically load this page with widevine protected content.

I think timing and sequence are important; from memory a few days after getting keys from my CDM

1. Reboot the android box
   
2. reboot your PC and from the PC
3. adb connect <android-tv-ip>
4. adb shell
5. su -
6. chmod +x /data/local/tmp/frida-server-15.1.17-android-arm
7. /data/local/tmp/frida-server-15.1.17-android-arm
8. optional; check running ps | grep frida
9. on the android tv box start Chrome
10. and immediately on the Pc start dumper: python dump-keys.py and play the movie.

Mine then dumped after days of trying. Misdirection read here suggested stopping and starting the playing movie; I think keys are shared from Chrome and the bitmovin site as soon as the page loads. So stopping and starting the movie when playing just wastes everyone's time.

Ok with keys dumped what do you do with them? A hack!! Find a key generator and replace their keys with yours!
Find WKS-KEYS https://anonfiles.com/XdUbwepdve/WKS-KEYS_rar and unpack

Locate WKS-KEYS/pywidevine/L3/cdm/devices/android-generic/
Two files to be replaced:- device-client-id-blob and device-private-key.

Dumper stored the android-tv-box keys in key-dumps/MBOXprivate-keys//xxxx/xxxxxxxx/client-id-bin and private-key-pem these two replace in name and body the ones in WKS-KEYS. The *bin becomes the blob (binary large object)

Now, in theory you have a working CDM and can generate your own keys. I found an encrypted video to download, located the request headers saved as a cURL and encoded intp python here:- https://curlconverter.com/ . I put them in headers.py in the WKS-KEYS folder. Eventually when I tried to decrypt keys I got an error about the key length being wrong. Some WiseHead wrote in their experience it was because the CDM was not working --- uurgh!!

So I slept on the problem and realised that the servers we ‘attack’ try to repel us. But bitmovin.com/demos.drm is there to help.

So I checked my keys were working there;-

https://bitmovin-a.akamaihd.net/content/art-of-motion_drm/mpds/11331.mpd

this link loaded in a browser will show PSSH keys between <cenc: pssh> html markup and

https://widevine-proxy.appspot.com/proxy

is the license

running

 python l3.py

and plugging in the PSSH and licence gave me:-

--key 0294b9599d755de2bbf0fdca3fa5eab7:3bda2f40344c7def614227b9c0f03e26
--key 639da80cf23b55f3b8cab3f64cfa5df6:229f5f29b643e203004b30c4eaf348f4

Taadaa!! I nearly fell off my chair.

I downloaded the video:-

yt-dlp –allow-unplayable https://bitmovin-a.akamaihd.net/content/art-of-motion_drm/mpds/11331.mpd

that gave two files an mp4 video and m4a audio encrypted.

Decrypted with mp4decryt -from https://www.bento4.com/downloads/

mp4decrypt –key 0294b9599d755de2bbf0fdca3fa5eab7:3bda2f40344c7def614227b9c0f03e26  <infile.mp4>  <outfile.mp4>

Do the same for the audio file and you then need to combine the audio and video into one playable stream with ffmpeg. It comes installed on my Linux distro.

ffmpeg -i decrypted.mp4 -i decrypted.m4a -vcodec copy -acodec copy your_movie.mp4

That’s all I know and now I am off to see if I can do it for real. I may be away for some time!!

EDIT June 2022
Recently my inbox is getting PMs from people asking questions on this post, and streaming more generally. Whilst I am happy you find this post useful enough to provoke thought on your part, I am not happy to have my day interrupted by your apparent urgent need for help that allows you to ignore the usual social norms of website etiquette .
We have a forum here folks! If you have a question post it here; with luck someone far more knowledgeable than me will provide a definitive answer to your 'urgent' question.

Out of curiosity, has anyone tested it with the mi box?

[Compulsive2012]

The model in the thread, T95 S1 2Gb/16Gb, is no more available on amazon in my country and on other sites it costs much more than 30 USD or any other currency you use.

Can anybody recommend me a model that is compatile with the method explained i this thread?

Thanks in advance