Help getting license key from kinostream

[zonula]

Hello to all great minds,

I managed to download an encrypted mp4 file from this VOD provider : https://kinostream.com/cloud/vod/2909


The m3u8 is located at : https://gpx-garageplay.cdn.hinet.net/garageplay-gpx/_definst_/2106/smil:2106182909-HD..../playlist.m3u8

MPD : https://gpx-garageplay.cdn.hinet.net/garageplay-gpx/_definst_/2106/smil:2106182909-HD....l/manifest.mpd

LICENSE URL : https://gpxams1.keydelivery.japanwest.media.azure.net/Widevine/?KID=cc210820-2bcd-4ea0...0-780a880a9e8e -----not sure about this one

PPSH : AAAAW3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADsIARIQAp S5WZ11XeK78P3KP6XqtxoNd2lkZXZpbmVfdGVzdCIQZmtqM2xq YVNkZmFsa3IzaioCU0QyAA==


At this point I have no success getting license key with the l3.py (https://github.com/medvm/widevine_keys)

Here are my headers (headers.py)

import requests

cookies = {
'uuid': '4ded3198-6802-47c0-a606-93572f650234',
}

headers = {
'authority': 'gpx-garageplay.cdn.hinet.net',
'accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9',
'accept-language': 'fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7',
# 'cookie': 'uuid=4ded3198-6802-47c0-a606-93572f650234',
'sec-ch-ua': '"Not?A_Brand";v="8", "Chromium";v="108", "Google Chrome";v="108"',
'sec-ch-ua-mobile': '?0',
'sec-ch-ua-platform': '"macOS"',
'sec-fetch-dest': 'document',
'sec-fetch-mode': 'navigate',
'sec-fetch-site': 'none',
'sec-fetch-user': '?1',
'upgrade-insecure-requests': '1',
'user-agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36',
}

params = {
'token': 'VpgD44wK5Se8Opm0QRSbMg',
'expires': '1671826267',
}

response = requests.get(
'https://gpx-garageplay.cdn.hinet.net/garageplay-gpx/_definst_/2106/smil:2106182909-HD.smil/manifest.mpd',
params=params,
cookies=cookies,
headers=headers,
)

Thanks in advance, this is my first post, hope you can help me

Zonula

[andrewzhong]

[INFO] - [KID:KEY] : cc2108202bcd4ea0b7c0780a880a9e8e:95d63b0e2b268a22e 19a6b49e019d025
[INFO] - [KID] : cc2108202bcd4ea0b7c0780a880a9e8e
[INFO] - [KEY] : 95d63b0e2b268a22e19a6b49e019d025

[larits]

M3u8 is unnecessary for obtaining keys, your MPD is missing a token at the end, and your headers are wrong; there need to be a 'Bearer' included. The license and PSSH are correct, though.

Copy the full MPD url, keep headers minimal with the Bearer included and you'll get the key.

[zonula]

Wow thanks! Merry Christmas, I'll work on my headers, but right now I am rocking around the Christmas Tree ahah lol

[ElCap]

Wow thanks! Merry Christmas, I'll work on my headers, but right now I am rocking around the Christmas Tree ahah lol

you need the headers from the license request not the mpd request

[zonula]

Ok! Here is another try

I used this header from the license request (hope I am right)


[Attachment 68311 - Click to enlarge]

I copied the link as curl and converted it to python. Unfortunately, I get this error in the script

license response status: <Response [400]>
server reports: {
"Error": {
"Message": "Widevine server returned unexpected response status.",
"Code": "WidevineServerResponseStatusNotOk"
}
}
server did not issue license, make sure you have correctly pasted all the required headers in the headers.py. Also check json/raw params of POST request.


It is harder than I thought, but I have fun learning

Zonula

[andrewzhong]

pssh:
AAAAW3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADsIARIQApS5WZ11XeK78P3KP6XqtxoNd2lkZXZpbmVfdGVzdCIQZmtqM2xqYVNkZmFsa3IzaioCU0QyAA==

lic url:
https://gpxams1.keydelivery.japanwest.media.azure.net/Widevine/?KID=cc210820-2bcd-4ea0...0-780a880a9e8e

headers = {
    'authorization': 'Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1cm46bWljcm9zb2Z0OmF6dXJlOm1lZGlhc2VydmljZXM6Y29udGVudGtleWlkZW50aWZpZXIiOiJjYzIxMDgyMC0yYmNkLTRlYTAtYjdjMC03ODBhODgwYTllOGUiLCJpc3MiOiJodHRwczpcL1wvZ2FyYWdlcGxheS50d1wvIiwiYXVkIjoiaHR0cHM6XC9cL2dweC50d1wvIiwiZXhwIjoxNjcyMDM3Nzk0fQ.NKAFWLqN1K5Mc4h1NWi86ELC5E5E5fTFwgq53lrt08s',
    'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36',
    'accept': '*/*',
}

make sure your pssh is correct. update the bearer and try again.

[zonula]

Thanks again Andrew Zhong!

I ran l3.py but I still get a message saying : AttributeError: module 'headers' has no attribute 'token'

How do I insert this token value in the header? With a cookie?


Zonula

[cedric8528]

https://streamable.com/y18vmj

[larits]

Thanks again Andrew Zhong!

I ran l3.py but I still get a message saying : AttributeError: module 'headers' has no attribute 'token'

How do I insert this token value in the header? With a cookie?


Zonula

There's a token at the end of the MPD url. No need to insert it anywhere.

Headers.py:

import requests

headers = {
   'authorization': 'Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1cm46bWljcm9zb2Z0OmF6dXJlOm1lZGlhc2VydmljZXM6Y29udGVudGtleWlkZW50aWZpZXIiOiJjYzIxMDgyMC0yYmNkLTRlYTAtYjdjMC03ODBhODgwYTllOGUiLCJpc3MiOiJodHRwczpcL1wvZ2FyYWdlcGxheS50d1wvIiwiYXVkIjoiaHR0cHM6XC9cL2dweC50d1wvIiwiZXhwIjoxNjcyMDUyMjM0fQ.oVHYgHkUjzYR4t-1gfCbmZEYjnNY4xQelvRsc6XGVGU',
    'origin': 'https://kinostream.com',
    'referer': 'https://kinostream.com/',
    'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36',
}

widewine_keys l3.py:

Input MPD URL: https://gpx-garageplay.cdn.hinet.net/garageplay-gpx/_definst_/2106/smil:2106182909-HD.smil/manifest.mpd?token=_3zcnevVnsOStuTPunf5RQ&expires=1672052234
License URL: https://gpxams1.keydelivery.japanwest.media.azure.net/Widevine/?KID=cc210820-2bcd-4ea0-b7c0-780a880a9e8e

PSSH obtained.
AAAAW3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADsIARIQApS5WZ11XeK78P3KP6XqtxoNd2lkZXZpbmVfdGVzdCIQZmtqM2xqYVNkZmFsa3IzaioCU0QyAA==

license response status: <Response [200]>

KID:KEY -> cc2108202bcd4ea0b7c0780a880a9e8e:95d63b0e2b268a22e19a6b49e019d025

Use your own token and bearer and you're good to go. IF you have a working CDM. Which you do... right?

[zonula]

https://streamable.com/4t5lii

Here is my vid, unfortunately, I get the "unable to parse license - check protobufs" error

That leads me to think I don't have to correct version of WKS-KEYS? I dowloaded my script from this site https://cdm-project.com/CDM-Tools/WKS-Keys

Thanks you so much for your help!!! Thanks to cedric8528, larits

Olivier

[ElCap]

Here is my vid, unfortunately, I get the "unable to parse license - check protobufs" error

That leads me to think I don't have to correct version of WKS-KEYS? I dowloaded my script from this site https://cdm-project.com/CDM-Tools/WKS-Keys

Did you copy your cdm into the right directory for wks-keys script?

[zonula]

Here is my vid, unfortunately, I get the "unable to parse license - check protobufs" error

That leads me to think I don't have to correct version of WKS-KEYS? I dowloaded my script from this site https://cdm-project.com/CDM-Tools/WKS-Keys

Did you copy your cdm into the right directory for wks-keys script?

I am confused, what do you mean by "copy your CDM" is it a file within Firefox? Noobs question lol

[ElCap]

Check out Angelas write up on how to get your own cdm.
https://forum.videohelp.com/threads/404994-Decryption-and-the-Temple-of-Doom/

[zonula]

Ok I answered my question...It will cost me a T95, would this one work?

https://www.amazon.ca/EASYTONE-Android-Newest-Supporting-Outputs/dp/B07F9RZPNK/ref=sr_...ps%2C76&sr=8-1

Olivier

[ElCap]

You'd have to ask on Angelas thread.

If you don't have a cdm, you could try using this instead
https://cdrm-project.com/
(the cdm is part of the site, so you don't need your own one)
Just need to input the pssh, license url and headers
(it might not work with kinostream if it's georestricted)

[A_n_g_e_l_a]

You'd have to ask on Angelas thread.

If you don't have a cdm, you could try using this instead
https://cdrm-project.com/
(the cdm is part of the site, so you don't need your own one)
Just need to input the pssh, license url and headers
(it might not work with kinostream if it's georestricted)

TPD94 is the idiot who runs that site. There area couple of things you should know. He lifts other people's work and claims it as his own; he has done it with me and the developers of GetWVKeys at the very minimum.


[Attachment 68341 - Click to enlarge]

But there are references on the web to a TPD94 with an email address at Tulsa Police Department. So it could be that https://cdrm-project.com is run by some once-rookie cop (right-wing, authoritarian, controlling bastard), who has moved on to setting a honey-trap for the American Film & TV studios by logging all the IP addresses of those requesting keys. I would avoid at all costs myself and use getwvkeys.cc instead . You need to search through the site to find an invite to their Discord channel to become accredited.

You may think I'm being paranoid - and maybe - but I've messaged with the guy and everything he says tells me he's a bad actor.

[TPD94]

Hey a_n_g_e_l_a always a pleasure to see you.

I’m not a honeypot or a cop, but the more you muddy my actual identity the better I guess.

I’ve never claimed anyone else’s work as my own, in all my posts I say it’s tools I’ve collected (not written) and post the links to the original GitHub on my repos.

[A_n_g_e_l_a]

Hey a_n_g_e_l_a always a pleasure to see you.

I’m not a honeypot or a cop, but the more you muddy my actual identity the better I guess.

I’ve never claimed anyone else’s work as my own, in all my posts I say it’s tools I’ve collected (not written) and post the links to the original GitHub on my repos.

I use the 'Mandy Rice-Davis' argument, "well, he would say that, wouldn't he?" And documented history from me and other shows otherwise.

Let me post a bit of my last message to you on Discord

I tell you this. I now have a window into your character. For all your bluster and protestations we both know you've copied and compiled the work of others and your enormous ego prevents you acknowledging the fact.
One day, as an old man, you will remember me when you sit drooling down your chest.. and you will be embarrassed. You will be embarrassed to recall that you are a shit and I knew that too. Happy days.

[TPD94]

I have yet to see any proof that I’ve ever said that any of the tools I host were my own. And on my discord I explicitly have made an announcement clarifying if it’s not already known from common sense that I have not written any of the tools hosted, just the how to guides.

The only thing you’ve reached out to me about is my how to guide, in which you claimed I had plagiarized your work, and as I told you and I will post here for others, if you took longer than 10 seconds to compare our write ups, there is mild similarities at best.

All you’ve done is make accusations without any kind of proof, as where I’ve had the original repos up for the tools I host the moment I uploaded them, and have always acknowledged the fact it is either leaked code or code freely available on GitHub, as mentioned in my how to, the repo is simply there to host them all in one convenient place.

[zonula]

Sorry to hear about your story Angela

Another noob question how do I get verified to join #GetWVKeys? My profile is already verified

A warm thanks for everyone

[zonula]

My username on discord is MisterTee83#0001