Dumping Your own L3 CDM with Android Studio

[dan555]

Had an idea that worked. I installed Firefox on the device, forced desktop mode and wasn't required to install the app. I now have all the files needed to continue.

To confirm, I need a py file with the headers, PSSH, licence URL that will work in pywidevine?

If you didn't need to dump the CDM using a specific app why didn't you use https://bitmovin.com/demos/drm directly?

Anyway your next step should be this: https://forum.videohelp.com/threads/411862-Beyond-WKS-KEYS

Thanks, I'll check it out. I'm very much a newcomer to this and trying to figure it out. I'm most likely missing something in what I think I need to do.

So far, in the traffic trace:

• 1 POST to licensing.bitmoving.com
• 1 GET to MPD URL (which I extracted the XML)
• 2 separate widevine API POSTs (about half a dozen headers required/used)

Noting the MPD URL can be used by dashmpd, but requires decryption keys to finalize the capture - which brings me to the Android Studio setup. To confirm, the step you suggest I follow, is still valid/next step?

[Badchip]

No module named 'Helpers'. Any idea?

pip install helpers

"Defaulting to user installation because normal site-packages is not writeable
Requirement already satisfied: helpers in c:\users\user\appdata\local\packages\pythonsoftwar efoundation.python.3.12_qbz5n2kfra8p0\localcache\l ocal-packages\python312\site-packages (0.2.0)"

C:\dump>py dump_keys.py

Traceback (most recent call last):
File "C:\dump\dump_keys.py", line 6, in <module>
from Helpers.Device import Device
ModuleNotFoundError: No module named 'Helpers'

[white_snake]

No module named 'Helpers'. Any idea?

pip install helpers

"Defaulting to user installation because normal site-packages is not writeable
Requirement already satisfied: helpers in c:\users\user\appdata\local\packages\pythonsoftwar efoundation.python.3.12_qbz5n2kfra8p0\localcache\l ocal-packages\python312\site-packages (0.2.0)"

C:\dump>py dump_keys.py

Traceback (most recent call last):
File "C:\dump\dump_keys.py", line 6, in <module>
from Helpers.Device import Device
ModuleNotFoundError: No module named 'Helpers'

Helpers is not a module that must be installed, it's simply the name of the folder contained inside the dumper main folder. You're running dump_keys.py from C:\dump, but you must have done something wrong when extracting or moving because your C:\dump folder doesn't contain any Helpers folder, does it?

[Badchip]

No module named 'Helpers'. Any idea?

pip install helpers

"Defaulting to user installation because normal site-packages is not writeable
Requirement already satisfied: helpers in c:\users\user\appdata\local\packages\pythonsoftwar efoundation.python.3.12_qbz5n2kfra8p0\localcache\l ocal-packages\python312\site-packages (0.2.0)"

C:\dump>py dump_keys.py

Traceback (most recent call last):
File "C:\dump\dump_keys.py", line 6, in <module>
from Helpers.Device import Device
ModuleNotFoundError: No module named 'Helpers'

Helpers is not a module that must be installed, it's simply the name of the folder contained inside the dumper main folder. You're running dump_keys.py from C:\dump, but you must have done something wrong when extracting or moving because your C:\dump folder doesn't contain any Helpers folder, does it?

I don't understand this part:

- Download Dumper-main on Github https://github.com/wvdumper/dumper
- Open a new command prompt
- Place yourself in the Directory (cd /....) of dumper main and launch dump_keys: py dump_keys.py

So I downloaded 'dump_keys.py', placed it in the 'dump' folder, and executed it from there.

[white_snake]

I don't understand this part:

- Download Dumper-main on Github https://github.com/wvdumper/dumper
- Open a new command prompt
- Place yourself in the Directory (cd /....) of dumper main and launch dump_keys: py dump_keys.py

So I downloaded 'dump_keys.py', placed it in the 'dump' folder, and executed it from there.

You don't have to download just dump_keys.py, you have to download the whole repository in .zip format, then extract it, and place yourself in the newly extracted folder in cmd. Btw don't use that dumper, use a newer one like this.

[Badchip]

I don't understand this part:

- Download Dumper-main on Github https://github.com/wvdumper/dumper
- Open a new command prompt
- Place yourself in the Directory (cd /....) of dumper main and launch dump_keys: py dump_keys.py

So I downloaded 'dump_keys.py', placed it in the 'dump' folder, and executed it from there.

You don't have to download just dump_keys.py, you have to download the whole repository in .zip format, then extract it, and place yourself in the newly extracted folder in cmd. Btw don't use that dumper, use a newer one like this.

Thank you for your help. Now I have a new problem:

C:\dumper-main>py dump_keys.py

Traceback (most recent call last):
File "C:\dumper-main\dump_keys.py", line 6, in <module>
from Helpers.Device import Device
File "C:\dumper-main\Helpers\Device.py", line 5, in <module>
from Crypto.PublicKey import RSA
ModuleNotFoundError: No module named 'Crypto'

I've tried installing crypto, pycrypto, pycryptodome...

pip install protobuf==3.20.3
pip install cryptography==37.0.2
pip install pycryptodome==3.16.0
pip install pycryptodomex==3.15.0

The folder seems to be correct


[Attachment 78039 - Click to enlarge]

[peterb999]

Edited as I posted in the wrong thread.

[white_snake]

Thank you for your help. Now I have a new problem:

C:\dumper-main>py dump_keys.py

Traceback (most recent call last):
File "C:\dumper-main\dump_keys.py", line 6, in <module>
from Helpers.Device import Device
File "C:\dumper-main\Helpers\Device.py", line 5, in <module>
from Crypto.PublicKey import RSA
ModuleNotFoundError: No module named 'Crypto'

I've tried installing crypto, pycrypto, pycryptodome...

pip install protobuf==3.20.3
pip install cryptography==37.0.2
pip install pycryptodome==3.16.0
pip install pycryptodomex==3.15.0

pycryptodomex is the one you need. Unless you're in the wrong virtual env, you might have a conflict. Read here:

https://medium.com/@rajparmar23801/no-module-named-crypto-707f75186a6a
https://stackoverflow.com/questions/19623267/importerror-no-module-named-crypto-cipher

[Badchip]

Thank you for your help. Now I have a new problem:

C:\dumper-main>py dump_keys.py

Traceback (most recent call last):
File "C:\dumper-main\dump_keys.py", line 6, in <module>
from Helpers.Device import Device
File "C:\dumper-main\Helpers\Device.py", line 5, in <module>
from Crypto.PublicKey import RSA
ModuleNotFoundError: No module named 'Crypto'

I've tried installing crypto, pycrypto, pycryptodome...

pip install protobuf==3.20.3
pip install cryptography==37.0.2
pip install pycryptodome==3.16.0
pip install pycryptodomex==3.15.0

pycryptodomex is the one you need. Unless you're in the wrong virtual env, you might have a conflict. Read here:

https://medium.com/@rajparmar23801/no-module-named-crypto-707f75186a6a
https://stackoverflow.com/questions/19623267/importerror-no-module-named-crypto-cipher

https://medium.com/@rajparmar23801/no-module-named-crypto-707f75186a6a

This has solved the problem. You're a genius!

[white_snake]

https://medium.com/@rajparmar23801/no-module-named-crypto-707f75186a6a

This has solved the problem. You're a genius!

But all I did was a google search. Anyway, glad you got it working.

[PSXman_uk]

https://github.com/hyugogirubato/KeyDive New dumper tested with Android 13 real device and android studio works really well.

[Xeon]

Once i reated a Virtual Android Device then open Chrome and go to "https://bitmovin.com/demos/drm or https://www.theoplayer.com/theoplayer-drm-aes-128-encryption" can't play……
My PC can play it well.

[PSXman_uk]

Android version ? also what version of frida are you using ?

[Xeon]

Android version ? also what version of frida are you using ?

just create Android （Pixel 6 API 28） and then browser the site... so that means the Virtual Android Device can't decrypt widewine?
My computer can decrypt and play normally, indicating that there is no problem with the network.

[T33V33]

https://github.com/hyugogirubato/KeyDive New dumper tested with Android 13 real device and android studio works really well.

Works with Android 14 too

[PSXman_uk]

https://github.com/hyugogirubato/KeyDive New dumper tested with Android 13 real device and android studio works really well.

Works with Android 14 too

Just testing it on real Android 14 device works SM S901B android 14

[goveg]

"You don't have an Android Device or don't want to buy one to get the two magic files to decrypt your video with drm?" - which video? I am not sure I understand the use case of this guide

[Karoolus]

"You don't have an Android Device or don't want to buy one to get the two magic files to decrypt your video with drm?" - which video? I am not sure I understand the use case of this guide

Pretty much any video that requires an L3 CDM to decrypt (some services actively block Android Studio CDMs though)

[Jelov]

Duplicate

[goveg]

"You don't have an Android Device or don't want to buy one to get the two magic files to decrypt your video with drm?" - which video? I am not sure I understand the use case of this guide

Pretty much any video that requires an L3 CDM to decrypt (some services actively block Android Studio CDMs though)

Thank you. What is a CDM? Services like Netflix does not require L1 to decrypt?

[Karoolus]

"You don't have an Android Device or don't want to buy one to get the two magic files to decrypt your video with drm?" - which video? I am not sure I understand the use case of this guide

Pretty much any video that requires an L3 CDM to decrypt (some services actively block Android Studio CDMs though)

Thank you. What is a CDM? Services like Netflix does not require L1 to decrypt?

You should probably read the other sticky threads first to get a grasp on how this all works. It'll all make sense then

[user47]

I fallowed the guide to the best of my abilities and i keep getting this error when i try the dumper thing. i do not know hoe to fix this nor how to begin. i've also tried the keydive and get an error of KeyDive: [WinError 2] The system cannot find the file specified.

thank you for any help you can provide.

Traceback (most recent call last):
File "C:\Users\dumper\Downloads\dumper-main\dump_keys.py", line 6, in <module>
from Helpers.Scanner import Scan
File "C:\Users\dumper\Downloads\dumper-main\Helpers\Scanner.py", line 7, in <module>
from Helpers.wv_proto2_pb2 import SignedLicenseRequest
File "C:\Users\dumper\Downloads\dumper-main\Helpers\wv_proto2_pb2.py", line 33, in <module>
_descriptor.EnumValueDescriptor(
File "C:\Users\dumper\AppData\Roaming\Python\Python310\ site-packages\google\protobuf\descriptor.py", line 789, in __new__
_message.Message._CheckCalledFromGeneratedFile()
TypeError: Descriptors cannot be created directly.
If this call came from a _pb2.py file, your generated code is out of date and must be regenerated with protoc >= 3.19.0.
If you cannot immediately regenerate your protos, some other possible workarounds are:
1. Downgrade the protobuf package to 3.20.x or lower.
2. Set PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION=python (but this will use pure-Python parsing and will be much slower).

More information: https://developers.google.com/protocol-buffers/docs/news/2022-05-06#python-updates

[PSXman_uk]

I fallowed the guide to the best of my abilities and i keep getting this error when i try the dumper thing. i do not know hoe to fix this nor how to begin. i've also tried the keydive and get an error of KeyDive: [WinError 2] The system cannot find the file specified.

thank you for any help you can provide.

Traceback (most recent call last):
File "C:\Users\dumper\Downloads\dumper-main\dump_keys.py", line 6, in <module>
from Helpers.Scanner import Scan
File "C:\Users\dumper\Downloads\dumper-main\Helpers\Scanner.py", line 7, in <module>
from Helpers.wv_proto2_pb2 import SignedLicenseRequest
File "C:\Users\dumper\Downloads\dumper-main\Helpers\wv_proto2_pb2.py", line 33, in <module>
_descriptor.EnumValueDescriptor(
File "C:\Users\dumper\AppData\Roaming\Python\Python310\ site-packages\google\protobuf\descriptor.py", line 789, in __new__
_message.Message._CheckCalledFromGeneratedFile()
TypeError: Descriptors cannot be created directly.
If this call came from a _pb2.py file, your generated code is out of date and must be regenerated with protoc >= 3.19.0.
If you cannot immediately regenerate your protos, some other possible workarounds are:
1. Downgrade the protobuf package to 3.20.x or lower.
2. Set PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION=python (but this will use pure-Python parsing and will be much slower).

More information: https://developers.google.com/protocol-buffers/docs/news/2022-05-06#python-updates

pm you

[sppcctv]

Hiya,

I'm currently stuck with frida on CMD.


[Attachment 78575 - Click to enlarge]

I follow all steps, but I don't know what I'm doing wrong.
Any help is much appreciated!

[white_snake]

Hiya,

I'm currently stuck with frida on CMD.


[Attachment 78575 - Click to enlarge]

I follow all steps, but I don't know what I'm doing wrong.
Any help is much appreciated!

You sure you need an x86 executable and not an x86_64 one (or even something else)?

[Barabasz]

Ive been fighting this error for a while now, and i dont know what else to do:

C:\dumper-main>Python dump_keys.py
Traceback (most recent call last):
  File "C:\dumper-main\dump_keys.py", line 6, in <module>
    from Helpers.Scanner import Scan
  File "C:\dumper-main\Helpers\Scanner.py", line 7, in <module>
    from Helpers.wv_proto2_pb2 import SignedLicenseRequest
  File "C:\dumper-main\Helpers\wv_proto2_pb2.py", line 33, in <module>
    _descriptor.EnumValueDescriptor(
  File "C:\Users\AppData\Local\Programs\Python\Python312\Lib\site-packages\google\protobuf\descriptor.py", line 914, in __new__
    _message.Message._CheckCalledFromGeneratedFile()
TypeError: Descriptors cannot be created directly.
If this call came from a _pb2.py file, your generated code is out of date and must be regenerated with protoc >= 3.19.0.
If you cannot immediately regenerate your protos, some other possible workarounds are:
 1. Downgrade the protobuf package to 3.20.x or lower.
 2. Set PROTOCOL_BUFFERS_PYTHON_IMPLEMENTATION=python (but this will use pure-Python parsing and will be much slower).

More information: https://developers.google.com/protocol-buffers/docs/news/2022-05-06#python-updates

Does anyone have solution for this?

[peterb999]

It actually tells you what to do "Downgrade the protobuf package to 3.20.x or lower"

Just run this -

pip install protobuf==3.20.0

[Barabasz]

It actually tells you what to do "Downgrade the protobuf package to 3.20.x or lower"

Just run this -

pip install protobuf==3.20.0

I actually did, yesterday nothing what i did worked, today i did nothing and it just worked right away, Thanks anyways!

[peterb999]

It actually tells you what to do "Downgrade the protobuf package to 3.20.x or lower"

Just run this -

pip install protobuf==3.20.0

I actually did, yesterday nothing what i did worked, today i did nothing and it just worked right away, Thanks anyways!

Glad to hear you got it working

[ivanko362]

[Attachment 78894 - Click to enlarge]

what to do with these files please?