Decryption and the Temple of Doom

[joaopa0]

When I type python3 l3.py in WKS_KEY folder, I receive
from pywidevine.L3.cdm import cdm, deviceconfig
ModuleNotFoundError: No module named 'pywidevine.L3'


Obviously, the folder pywidevine is here.

Any workaround to fix that?

[A_n_g_e_l_a]

When I type python3 l3.py in WKS_KEY folder, I receive
from pywidevine.L3.cdm import cdm, deviceconfig
ModuleNotFoundError: No module named 'pywidevine.L3'


Obviously, the folder pywidevine is here.

Any workaround to fix that?

The line:- pywidevine.L3.cdm import cdm, deviceconfig is python's way of showing a hierarchy of directories or folders. In Windows your program l3.py expects you to have - from the WKS_KEYS folder
pywidevine\L3\cdm\ and therein it expects to find cdm.py and deviceconfig.py see below;


[Attachment 67300 - Click to enlarge]

Your error says there is no L3 ... just see what the folder path is to get to the cdm folder and change that line in your version of l3.py. Simples!

[joaopa0]

I use Linux. How can I change this import
changing from pywidevine.L3.cdm import cdm, deviceconfig into
import /home/test/WKS/pywidevine.L3.cdm import cdm, deviceconfig does not work (WKS is the folder where I decompressed all the files)

[A_n_g_e_l_a]

I use Linux. How can I change this import
changing from pywidevine.L3.cdm import cdm, deviceconfig into
import /home/test/WKS/pywidevine.L3.cdm import cdm, deviceconfig does not work (WKS is the folder where I decompressed all the files)

I just gave you the answer!! Read it carefully. THINK a bit and do what you were told.

It really doesn't matter if it is windows or linux; folder hierarchies are the same.

And if you really cannot follow what is going on - you have no business in this forum. Harsh but realistic and it preserves my sanity.

[joaopa0]

I managed to fix the problem; surely in a ugly way
For those having the problem:
when you need some imports: add
import sys

then before each problematic import
sys.path.insert(1, 'path_to_WKS_KEYS_folder//pywidevine/'[remaing_folders])

For instance in l3.py file

import os, sys
import base64, requests, sys, xmltodict
import headers
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/cdm')
import cdm, deviceconfig
from base64 import b64encode
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/')
from getPSSH import get_pssh
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/decrypt')
from wvdecryptcustom import WvDecrypt

[A_n_g_e_l_a]

I managed to fix the problem; surely in a ugly way
For those having the problem:
when you need some imports: add
import sys

then before each problematic import
sys.path.insert(1, 'path_to_WKS_KEYS_folder//pywidevine/'[remaing_folders])

For instance in l3.py file

import os, sys
import base64, requests, sys, xmltodict
import headers
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/cdm')
import cdm, deviceconfig
from base64 import b64encode
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/')
from getPSSH import get_pssh
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/decrypt')
from wvdecryptcustom import WvDecrypt

I think I understand what is happening with your system now. You've been using a channel4 downloader - C4-dl that installs pywidevine as a module. Whenever your l3 code sees pywidvine it looks to the module installed under .local. You should choose either to use WKS-KEYS OR pywidevine otherwise you'll give yourself problems.

[codehound]

I managed to fix the problem; surely in a ugly way
For those having the problem:
when you need some imports: add
import sys

then before each problematic import
sys.path.insert(1, 'path_to_WKS_KEYS_folder//pywidevine/'[remaing_folders])

For instance in l3.py file

import os, sys
import base64, requests, sys, xmltodict
import headers
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/cdm')
import cdm, deviceconfig
from base64 import b64encode
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/')
from getPSSH import get_pssh
sys.path.insert(1, '/home/test/WKS-KEYS/pywidevine/L3/decrypt')
from wvdecryptcustom import WvDecrypt

Yuk...

A_n_g_e_l_a is correct in the analysis, and its harder to do that; than to do as your were advised.

[joaopa0]

Thanks a lot Angela. It was my problem indeed.
Your solution works perfectly.

[bamboobali]

Diazole:

The function name you need is 'kqzqahjq'

Then, 16 minutes later washizu had keys dumped. It took me a lot longer then 16 minutes (it would have taken a lot longer if it wasn't for the exceptionally clear instructions - thanks A_n_g_e_l_a).

Is it possible to describe how to identify the 'right' function from the 30 or so other obscurely named functions? Are there some telltale signs to look out for? Or were the keys dumped quickly for other reasons maybe?

[shakir9022]

Hi.. just curious here.. i able to push frida server to my android phone and run dump.py.. however, after "hook completed", nothing happened and no key dumped folder produced. May i know why??

Thanks..

[A_n_g_e_l_a]

Hi.. just curious here.. i able to push frida server to my android phone and run dump.py.. however, after "hook completed", nothing happened and no key dumped folder produced. May i know why??

Hi, I am just curious here as to why you are asking about something that is already covered at the end of the very first post in this thread and in various posts after? May I know why you waste other people's time?

Thanks.

[Magicians]

You can dump working CDMs from Android Studio Emulators
I just dumped a working L3 CDM off one. Theres no need to go out and purchase a device

[AscensionDweller]

I wonder if it's possible to dump L1 now? I guess what I don't understand is a lot of content is 720p+ which can only be dumped via L1.
Its rhetorical I know only L1 are per device (hardware).

Any groups about tee and L1 security ? , I could care less about content and more how things work.

Is Magisk still being used?

[portalme]

You can dump working CDMs from Android Studio Emulators
I just dumped a working L3 CDM off one. Theres no need to go out and purchase a device

did you test it on vdocipher? mine is banned on there

[A_n_g_e_l_a]

You can dump working CDMs from Android Studio Emulators
I just dumped a working L3 CDM off one. Theres no need to go out and purchase a device

You are right. BUT, it adds a whole new layer of complexity to the job involving rootAVD, magisk and ensuring you have a suitable AVD. Care to do a write up, rather than just blowing a trumpet?

[A_n_g_e_l_a]

I wonder if it's possible to dump L1 now? I guess what I don't understand is a lot of content is 720p+ which can only be dumped via L1.
Its rhetorical I know only L1 are per device (hardware).

Any groups about tee and L1 security ? , I could care less about content and more how things work.

Is Magisk still being used?

TEE -Trusted Execution Environment - it is beyond the skills of most people. Add the fact that rooting destroys L1 on phones (maybe not Xiaomi) means L1 remains a pipe dream for modern devices. I think it was possible for Android versions before TEE. But people keep very quiet if they have one and do not share - (for a very good reason). I have no knowledge of recent L1 'discoveries'.

[Magicians]

You can dump working CDMs from Android Studio Emulators
I just dumped a working L3 CDM off one. Theres no need to go out and purchase a device

You are right. BUT, it adds a whole new layer of complexity to the job involving rootAVD, magisk and ensuring you have a suitable AVD. Care to do a write up, rather than just blowing a trumpet?

I followed your tutorial. Android Studio emulators come pre rooted. Mo magisk needed. Just load up adb and do the commands.

[A_n_g_e_l_a]

I followed your tutorial. Android Studio emulators come pre rooted. Mo magisk needed. Just load up adb and do the commands.

When I tried using an Android Virtual Device as it came, I wasn't able to run anything in /data/local/tmp/ on the AVD. RootAVD exists for a purpose. I got as far as finding function names to hook and 'hooks completed' but little more.
Which flavour of Android was your AVD running?

[Magicians]

When I tried using an Android Virtual Device as it came, I wasn't able to run anything in /data/local/tmp/ on the AVD. RootAVD exists for a purpose. I got as far as finding function names to hook and 'hooks completed' but little more.
Which flavour of Android was your AVD running?

If the device you pick has the play button logo by it, it wont work. I used 10.0

[Magicians]

https://streamable.com/f1ajvi
Heres a video of me dumping a CDM on Android Studio.

[AscensionDweller]

Very nice .... (: -- Now lets figure out how to get 1080p (:

[elfoeda]

https://streamable.com/f1ajvi
Heres a video of me dumping a CDM on Android Studio.

Thanks for sharing your method!

First of all let me say that I am using google translator so something I write here might not be understandable.

I followed the video, succeeding until the minute 00:01:50, from here I couldn't and I had doubts, if you can help I appreciate it very much.

Where should I put the folder containing the dump_key.py? It looks like you just ran it with a double click, but I didn't succeed anyway.

[Magicians]

Thanks for sharing your method!

First of all let me say that I am using google translator so something I write here might not be understandable.

I followed the video, succeeding until the minute 00:01:50, from here I couldn't and I had doubts, if you can help I appreciate it very much.

Where should I put the folder containing the dump_key.py? It looks like you just ran it with a double click, but I didn't succeed anyway.

Can be put anywhere. Make sure you install the requirements with correct versions for dumper

[portalme]

It looks like you just ran it with a double click, but I didn't succeed anyway.

just open command prompt or powershell in that directory. Then use

python dump_keys.py

or

python3 dump_keys.py

as your version.

[portalme]

When I type python3 l3.py in WKS_KEY folder, I receive
from pywidevine.L3.cdm import cdm, deviceconfig
ModuleNotFoundError: No module named 'pywidevine.L3'


Obviously, the folder pywidevine is here.

Any workaround to fix that?

That's the problem I also faced today. Yesterday I learnt in a python lecture that there should be a __init__.py in a folder to refer that as a module. So just make a __init__.py file in pywidevine dir and you'll get there. I don't know actually I did understand it well but however it worked for me.

[A_n_g_e_l_a]

Yesterday I learnt in a python lecture that there should be a __init__.py in a folder to refer that as a module. So just make a __init__.py file in pywidevine dir

Should already be in WKS-KEYS as distributed. Problems are arising for people who try to use WKS-KEYS on the same computer as a python3 pip install of the pywidevine module. They do not play nicely together!

[mylove711]

Thanks for sharing!

This method worked great for me. I'm running Android 11 so I used the dumper from Diazole/dumper with a rooted Redmi Note 11

[andrez4zv]

It looks like you just ran it with a double click, but I didn't succeed anyway.

just open command prompt or powershell in that directory. Then use

python dump_keys.py

or

python3 dump_keys.py

as your version.

Hello,

I am using the translator, so I hope to make myself understood.

I already did almost everything in this thread, but in the Dumper part, I have a problem. I get an error:
line 4, in <module>
import frida
ModuleNotFoundError: No module named 'frida'.

When I'm getting to this point: /data/local/tmp/frida-server-16.0.6-android-x86, and I have to open dumper_keys_py, it doesn't open anything (window opens and closes in seconds).

What am I doing wrong?

[A_n_g_e_l_a]

I already did almost everything in this thread, but in the Dumper part, I have a problem. I get an error:
line 4, in <module>
import frida
ModuleNotFoundError: No module named 'frida'.

When I'm getting to this point: /data/local/tmp/frida-server-16.0.6-android-x86, and I have to open dumper_keys_py, it doesn't open anything (window opens and closes in seconds).

What am I doing wrong?

Have you installed frida to your PC?

python pip install frida

should do it.

[andrez4zv]

I already did almost everything in this thread, but in the Dumper part, I have a problem. I get an error:
line 4, in <module>
import frida
ModuleNotFoundError: No module named 'frida'.

When I'm getting to this point: /data/local/tmp/frida-server-16.0.6-android-x86, and I have to open dumper_keys_py, it doesn't open anything (window opens and closes in seconds).

What am I doing wrong?

Have you installed frida to your PC?

python pip install frida

should do it.

It's already installed... Maybe that was the problem, many thanks!

Now the problem is different:


[Attachment 67943 - Click to enlarge]

I am an absolute newbie, and I have been 6 continuous days without success, trying everything to download from Vdocip***...
I'm about to give up.