Ripping StreamFab itself -- A possible decryptor source?

[doctorm]

I was playing around with the free trial of StreamFab and noticed that for the price, the software looks fairly cobbled together. It seems a lot like something you'd find on Github.

The wvcdm, python and java scripts are visible.

Now I'm more script kiddie than anything else, but it looks like StreamFab's files could be used as a source for decryption, just download and install the free version and pick out the pieces you need.

Am I wrong? Has anyone tried this?

[lomero]

yes you're right
StreamFab it does nothing but take pieces from github and make an app for those who can't do things manually. nothing more
and like all-in-one software, it has its limitations. by doing things hand-crafted you have much more flexibility to get the right deal

[helloImNoob]

some base things are visible, true, but that also leaves some of the inner workings left to decompile. Thing is, there are great minds here, and maybe if they invest some time, there would surely be a solution, maybe you guys can make one also.

[T33V33]

So streamfab has its API that uses ChromeCDM to decrypt - This has previously leaked and people were able to make calls to the API using their own scripts to get the keys. Streamfab occasionally updat the API so you need to keep updating your own script to keep access.

Streamfab also have a keyvault so obviously if you cxan get access to that then you have another source of keys for anything that has already been pulled from a licence server.

(P.S. This is not something I can help with. I know it has been done but not how)

[Quint]

Streamfab uses the Chrome-CDM? If so, it would be much more interesting HOW it uses the Chrome-CDM. If you know how to handle this, you won't need own CDMs any more, I suppose.

[T33V33]

Streamfab uses the Chrome-CDM? If so, it would be much more interesting HOW it uses the Chrome-CDM. If you know how to handle this, you won't need own CDMs any more, I suppose.

The tools/script that Streamfab uses for ChromeCDM have previously leaked and are out there for people who understand how to use them. How long they'll continue to work in their curent form is unknown (some ChromeCDM versions are due to be revoked soon)

Needing own CDMs depends on services limiting the quality for ChromeCDM. A few are already limiting quality (HMAX, DSNP and others) in which case ChromeCDM is useless if you want 1080p+

[Quint]

I see. Not good. Might lead to revoking Chrome and other browsers generally from higher definitions, thus it will be more complicated to find mpds, headers a. s. o., and my nice script that uses Chrome won't work any more.

[kenyard]

I see. Not good. Might lead to revoking Chrome and other browsers generally from higher definitions, thus it will be more complicated to find mpds, headers a. s. o., and my nice script that uses Chrome won't work any more.

The leaked cdms are being revoked on 5th December. Newest one is out and only it will be valid after that date.
Any ppl in the know will probably have the new cdm cracked already. It can be bruteforced same as existing I believe. Was shown how in research paper a few years ago and method can be adopted to work.

Re: streamfab they do server side decryption.
Leaked method to access it.. was a simple API call with a generic trial account.
You can probably get info from their app but I guess trials accounts now will have individual user id or pass so I doubt there's an easy option.
That wvfucks posted original method onn github and they blocked it within a few days. Had been working for few months before it was leaked..

Same as google announced chrome cdm revocation timeline a few days after he posted chrome cdm.
Entire public leaking of these things just means most sites gone to L1 for 1080p+
But most ppl don't find out these things unless it's leaked so....

L1 is pretty much limited though unless some cheap device gets a public exploit and easy use script so I doubt it will be revoked soon.
But Netflix has gone anal on L1 so now not only is it risky to grab 4k content, those who do aren't even sharing it...

[doctorm]

Would the old Widevine L3 Decryptor work with StreamFab's CDMs if they were swapped out in your browser?
That is, are the CDM's included in StreaFab modded?

[T33V33]

Would the old Widevine L3 Decryptor work with StreamFab's CDMs if they were swapped out in your browser?
That is, are the CDM's included in StreaFab modded?

no

[KarsonDelgado]

haha finally someone cracked this app


[Attachment 68169 - Click to enlarge]

[Quint]

Which means that it won't work much longer, for no one...

[doctorm]

There was previously a crack, but once a new version came out it seemed to break it.