Help decrypting video/audio downloaded from NPO (Netherlands website)

[oopargentina]

Hi everyone
I download this concert:
https://www.npostart.nl/glennis-grace-zingt-whitney-live-in-amsterdam/26-12-2018/AT_2111286

I used yt-dlp.

Is there any way to decrypt it?

Thanks a lot in advance!!!

[AbortRetryFail]

Use shaka-packager/mp4decrypt on the separate audio and video files you got from yt-dlp with this KID/key pair:

d49d3726121da5c5abe1d53070907fa3:7722f7c5c317b170997d99a03d55072b

[oopargentina]

Use shaka-packager/mp4decrypt on the separate audio and video files you got from yt-dlp with this KID/key pair:

d49d3726121da5c5abe1d53070907fa3:7722f7c5c317b170997d99a03d55072b

Thank you SO VERY MUCH
Million dollar question: how to get the KID/key pair? I used to use widevine but I read it doesn't work anymore. And there's more stuff on that website I'd really love to grab myself without having to ask for the code for each video (Nick & Simon's videos for starters).

Again thank you so very much for your help on this !!!!!

[AbortRetryFail]

You're welcome. The easiest way: if you have a GetWVKeys account, there's a really good script on their Discord server by pkp that retrieves NPO videos' keys without you even needing to touch a browser (assuming you have the URL to a video ).

Otherwise, I think the information here still holds good: https://forum.videohelp.com/threads/405230-NPO-widevine-decryption-no-longer-working?highlight=npo

Assuming you have a CDM already dumped from your Android device, a quick version (I used rlaphoenix's pywidevine to get the key above, but you need to write your own script on top of that, and the one I put together for this site doesn't lend itself to easy copy-and-paste sharing for quite a few reasons...):

1. Extract WKS-KEYS somewhere
2. Run

   pip install --user --upgrade requests xmltodict protobuf==3.19.5 pycryptodomex

   (given the outdated protobuf version you might want to consider setting up a Python virtualenv, though I think WKS v3 might work with protobuf v4)
3. Put your dumped CDM into the pywidevine\L3\cdm\devices\android_generic folder. Rename private_key.pem to device_private_key and client_id.bin to device_client_id_blob
4. In your browser, before playing a video on NPO, open the developer tools (F12) and go to its network tab
5. In the filter field, put in

   nepworldwide method:POST

6. Ignoring anything with a payload of "CAES=" (on this site, you won't see that, but you will on most others), right-click the "authentication" request, copy its link address and put it into notepad or something. Go back to the same request and click Copy -> Copy as cURL (bash)
7. In a new tab, go to https://curlconverter.com and paste in the request
8. Copy only the headers dictionary from the request (from

   headers = {

   to

   }

   ) and paste it into WKS-KEYS' headers.py file
9. Go back to the NPO tab and in the devtools, filter for mpd. Copy the link for the stream.mpd into notepad.
10. Open a command prompt cd'ed to WKS' folder
11. If you're using a proxy instead of a VPN, set the HTTP_PROXY and HTTPS_PROXY environment variables
12. Run

    py keys.py

13. Paste in the license URL and hit enter
14. Paste in the mpd link and hit enter

As ElCap explains, you need to be pretty quick when making the request - I got a lot of 401 responses...
For a guide that doesn't gloss over the concepts, look at this: https://forum.videohelp.com/threads/407216-Decryption-The-Dungeon-of-Despair

For subtitles, just filter the network requests for vtt or use https://github.com/rowrawer/stream-detector

P.S. The first episode of Nick and Simon, and probably the rest too, isn't encrypted ("streamType":"dash_unencrypted"). Go crazy there...

[oopargentina]

First of all thank you so very much for caring, for your time, and for the explanation on how to achieve decrypting the encrypted videos on this website! (Yes I saw some are not encrypted, like Oleta Adams one).
I'll do my best to make this work with the videos that are encrypted.
I'm still waiting for a guy to share with me his premium access, so I can download both Glennis Grace & Oleta Adams concerts in HQ. Once I get to have that access, I'll start downloading them all (I already downloaded all the ones that are not encrypted).

Again thank you so very much for all the help you've give to me on this! I much appreciated!

PS: BTW, no Android here. Old fashioned PC, Windows 10, Chrome or Firefox.
Python installed. Basic knowledge regarding DOS commands.
I'll do my best
I don't have a GetWVKeys account. No idea what that is (but I do use Discord). Googling about GetWVKeys now.

Edit: Got & verified a GetWVKeys account on Discord. I'll try that one seems to be way easier.
Thanks again!!!!

[AbortRetryFail]

PS: BTW, no Android here. Old fashioned PC, Windows 10, Chrome or Firefox.

Yeah, I couldn't imagine doing any of this on anything but a computer/laptop, phones are too fiddly... But you do need a rooted Android device for a unique CDM in order for a Widevine server to give up the keys, unless you're using GetWVKeys, which it seems you are.

Edit: Got & verified a GetWVKeys account on Discord. I'll try that one seems to be way easier.
Thanks again!!!!

You're welcome

Do make sure to read their first rule before getting the keys for a lot of videos...

[[ss]vegeta]

@AbortRetryFail thank you for helping people out. I truly appreciate your work.

[AbortRetryFail]

@AbortRetryFail thank you for helping people out. I truly appreciate your work.

Thank you very much, [ss]vegeta. It's not much, I'm not really posting anything that hasn't already been said before by other users, but it's fun.

And I think I might've gotten help from you indirectly? Thanks again!

[[ss]vegeta]

And I think I might've gotten help from you indirectly?

It's possible. Someone else introduced me to videosubfinder (I helped him with something else so he did a video tutorial for me) and it's very possible that I did the same thing for someone else. Please provide me a link if you can find, via pm, so I can refresh my memory

[AbortRetryFail]

And I think I might've gotten help from you indirectly?

Please provide me a link if you can find, via pm, so I can refresh my memory

Gladly, but:

[ss]vegeta has chosen not to receive private messages or may not be allowed to receive private messages. Therefore you may not send your message to him/her.

[oopargentina]

Hi everyone:
I'm having a hard time to decrypt the video I downloaded from here:
https://www.npostart.nl/glennis-grace-zingt-whitney-live-in-amsterdam/26-12-2018/AT_2111286

I got the PSSH:

AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQ1J03JhIdpcWr4dUwcJB/oxoIdXNwLWNlbmMiGDFKMDNKaElkcGNXcjRkVXdjSkIvb3c9PSoAMgA=

the license:

https://npo-drm-gateway.samgcloud.nepworldwide.nl/widevine_player_cert.bin

and the headers:

x-custom-data: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJucG8iLCJpYXQiOjE2NzA1MTc1NDgsImRybV90eXBlIjoid2lkZXZpbmUiLCJsaWNlbnNlX3Byb2ZpbGUiOiJ3ZWIiLCJjbGllbnRfaXAiOiIxODEuMTE3LjkzLjQ0In0.CmVxo-qRYFE_xKnVtkOUD3K4rqO_3jqhuWB22A4FkfI

yet I get this error when I try to get the decryption key/s:

'str' object has no attribute 'items'

Thanks so much in advance

[lomero]

d49d3726121da5c5abe1d53070907fa3:7722f7c5c317b170997d99a03d55072b

[oopargentina]

Much appreciated @lomero !

[megames]

Hi, can somebody help me with this i dont understand anything of this. I have a big list of NPO start links that i want to download.

[gnodde]

Hi, can somebody help me with this i dont understand anything of this. I have a big list of NPO start links that i want to download.

Start here: https://forum.videohelp.com/threads/404994-Decryption-and-the-Temple-of-Doom

Then come back here and things should start to make sense

[megames]

aaah ok so you need an android device

[gnodde]

Correct, if you want to be able to download and decrypt videos from NPO you need a CDM and the easiest way is from Android devices. After that you can use any OS to code yourself a nice download tool.

[megames]

So you cannot use android emulator

[gnodde]

You can, but your mileage may vary.. Steps are sort of the same.

[megames]

ok do you have any suggestions how to do it on emulator

[gnodde]

Follow that guide, the steps are almost the same, I have never done it myself but I know others that have, and got the needed files from the emulator. I have always used actual android devices for myself.

[megames]

ok ty i will try

[cedric8528]

@megames...

https://forum.videohelp.com/threads/408031-Dumping-Your-own-L3-CDM-with-Android-Studio

[megames]

my man thank you so much this is great

[tiwkletoes]

https://npo.nl/start/serie/close-up/seizoen-13/helmut-lang-meister-der-coolness/afspelen


can anyone help me get this pro favor

[gnodde]

https://npo.nl/start/serie/close-up/seizoen-13/helmut-lang-meister-der-coolness/afspelen


can anyone help me get this pro favor

2b86a860fca1f596513a6477d1aaa13a:512b5da5890a72ac33056241c63c4a0c

[jckzz]

2b86a860fca1f596513a6477d1aaa13a:512b5da5890a72ac33056241c63c4a0c

how you get this?
i tried but this error

{"code":400,"error":true,"message":"Failed to get license: 401 Unauthorized"}

PSSH

AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQK4aoYPyh9ZZROmR30aqhOhoIdXNwLWNlbmMiGEs0YW9ZUHloOVpaUk9tUjMwYXFoT2c9PSoAMgA=

License URL

https://npo-drm-gateway.samgcloud.nepworldwide.nl/authentication

headers

x-custom-data: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.xxxxxxxxxxxxxx

i got x-custom data from license url
and "client_ip" in custom data is my ip

[shellcmd]

jckzz, you cant do that, you must paste all in license url

pssh

AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQK4aoYPyh9ZZROmR30aqhOhoIdXNwLWNlbmMiGEs0YW9ZUHloOVpaUk9tUjMwYXFoT2c9PSoAMgA=

license

https://npo-drm-gateway.samgcloud.nepworldwide.nl/authentication?custom_data=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.xxxxxxxxxxxxxxxxxxxxxx

no header needed, but the custom data expire soon, about 5-8second, so you must paste quickly. i tried in getwvkey, same as you, cant get key, i think my speed too slow
so i suggest you should write a script by youself if you can, will success.



[Attachment 74973 - Click to enlarge]

[jckzz]

no header needed, but the custom data expire soon, about 5-8second, so you must paste quickly. i tried in getwvkey, same as you, cant get key, i think my speed too slow
so i suggest you should write a script by youself if you can, will success.

wow that so fast


thank you shellcmd
finally got it