Encrypted payload ?

[tadanobu]

So I usually manage to work with payload and json responses, but this one is unusual and I'm stuck. Any idea ? I suppose my headers are fine but not my l3 script... Anyobdy to put me on the right track to customization ? Or do I just forget the data and focus on the headers ?

data = '\b\x01\x12\x9f(\x12*\n(\n\x12\x12\x10>Òyí&ùB;¬¡\x0e6¹\x8e¶C\x10\x01\x1a\x104ßj\x98·ÿ^=Á\x1fÉã3\x99(D\x18\x01 \x81À÷¤\x060\x158¢Û¨\x9e\x0fBà\'\n\x14license.widevine.com\x12\x10\x17\x05¹\x17Ì\x12\x04\x86\x8b\x063:/w*\x8c\x1a\xa0%+ªls!Á\x8c\b=À1þ\t0\x14«Ëbñ\x839\x04îÖÀm\x13¿·°,î´f)£)\x82op[\x85u\x0e\x1fÕ_\x92÷ÃÑZn|«ô\x1dS\x01\x9fê\x82\x91kqÐ\x87\a\x96£\x12S\x87uêñ\x8fVz2&Í-`î\x8aã´¾\x11W\x96ä\x03\x03g\x00#\xadé}î\x93j9±·\rð\x89\x9ag¾\x1bÃ\n§¹\x05|,í¤>\x9c\x1fB\x94\x98ml×ìg\x1cÁ\x8d{*\npÎ^ÐÃAõµÃ0ÍóaJ¿`¢\x93c\x902µ]\x7fõõÎ\nÛ#üð\x1dõ\x8a©\x97\x9f!×\x9b\x1c^\xad\x01\x02¢^]\x8f\x11\x1bX\\o:ËEuÄЫÒ\x14\x8dnÞàà\xa0þÎ]\x9b\x9bþ\x9a\x10ÿ\b\'ÔL²ÃG¹r\x13íý\v£Ý%#\x1d\x1fV\x8bæ\x8e\x14myÖË÷¨>¡IÜ\x10l.+çÈ1¼¢Q\x14Aµz\x04\x13û>\x02\x18¢\x89Ö\x18kÞ1\x80äyp\x1e7`\x84É\x95\x15\b£\f¹tÅ\x19\x96\x8e£\x02¾@\x14v?\x15\x82\x00\x92½×ë\x90\'úï\x9fÜ\x1e¢¸zbÄê¡8qæmø];\x1d\x9c8_óå\x9a×\x19\v×¢ô\vyä¶O\x83ý\x0ff¿äÕ[Ræh\r\x86Äe\x1e¥ÈÝN§ÞI<¿\\ûº-dè\x98Ô\x19\x9eö\x96\rçÖ\x90l÷Ç\x9a\x8a\x02\x86|{Xke\x99\x02\x11þ\x12:*\x8f÷\x00\x98\x8d\x9ay1\x12ä\x06ü\x8bja;ý*\x9cc]~ËÒ\x01®\x00xú"e±k\b\x01\x86\x1d\x03¾CGne\x8fÖQYÏ\x10\x97LÔÛ¬ÈÎ\x84ãæR\xa0|¡\x8c/LÅTâ¥QßQ,åüpFí(¤1ä±Q%\x9fk¬GÀ\x96dØçmø«|}\x9f§""\xa0\x94^UkG$èjÕ~oÕBbwJ\x9fLnÊnöë#È<WF5µÖèÔ\'Fqºr\x96Ò\x8c\\\v½ø¢\x99·"Q¹¾fÈßÄÀñz\x92o.\x13\x12\xadÏ-\x97ÖJ^+~~!KT¤À\fMcä\x8eÚëcp9ßXc\x1f´oDa-®xÏb\x88ö\x04Á\x00\x1b\x88\x93 *\x86Ö\x8a9\x7fìèîØØc9\x8878ð[é\x93¿G`ÔBm*¢åe*Ó7î\x89z|Ò\x89¹àþ¸\x88%Q\x9d>\t´\'«\x13\x14M\x13cý\x94\x1d\xa0©S£\x1c\x83Ó_˪Ø\x17VñÁ,\x83LÐ2ؤík\x00\t/\vX\x13´ºXæ³J\x10æ·FE>Y\'è\bK?\x89\tl\x83^\x06\x90uimrbb\x85ѵĢ\x8cH{å®i)\x9f¾\x00\x8eà¥n\x83®Ñ¬\fÇ\t\x91ÜD5\x8cÏÝ\x1fðÍ\x12\x99RG\x8axø~Ò\x99ÀhJ\x87Ð_;hbªJSôe-=Ñ\x8d$Sh\x00\'¸ç\x87Ð<t\x9côf&䵿\n\x90k\x15\x1cÃ\x85(\f\x18¹1í,O(=\x88\x03\rº,f\x1f\x8e\x04X\x95Õ\x9cnû\xa0û\x92ª)[iê\x86I7\x93\x05ó\x95%\x01@+¦-DH^M¢NgòÕ&Ñ*ükA\n¯ÒP#ÀÃTÆGoÌ\x98\x8e\x02\x8c\x9cÊ\x9c(\xadÜe¤ülî?\x85r¯9i\x8d\rÕ\x1f#Q\x87¢ØH\x1br5¿xy¥áá÷× Ír:¥p\x1e\x86k\bÒ1E¥\x9d\x1b\'\x17\x17\x1f\x13\x11\x1d¾\x86\b1f!0\x81ö\x0e"B\x13 N\x7fõ9\x0f^\'\x8eó*\x81°jêM\r\x12dNBûÅèØ?*{~®¯Ñ`=\x01.ö\rS{%ãÝ\x17=uü\x84"\x12c̯6>£\x1e\x83\x83\x1d\v&\x96Ob&M=§rðÕ¸ZE7o°Ry.ßEÌ\x16ç7Z\x9f\t \x8aý«@ã\a.ß\x11{ÑÉëkN[\x9aÔ\x90\x86fA\x84Ò¦édÔdoNpe²\xad.e(|ä\x02Ä¿ó/Í\x99^XÃò\x0f\nl\x9b5·¡øhÅ¢$ìz\a=ͽ\a\\\x840\x98\x10x\x89.q\x00ê\x030Î\x14\'Ú¥\x8f\x03B\x00\x9f\x93©Ô.¹ó2 ¿\x11xÛ¡\x01ÎÉQ¶uÓba¼óû\tá±IÙ\x1aÚ«qðú2\x19C·\x80\xa0ó¼r.ò=<\x97\x98¬ö\x85b®òq<·©²\x14\x17Q\x17ZÛ1¶F\x80á;\x7f\x0f\a\x9d\x8fUqó¸À³«Ç\x9b\x9f\xad½%ã\x7fc»u\x1cU¦Ô"ºà!IsïìÃèRe\x1c0J\x8cý/ÜÆ\'üÖ7¿i)\x83\x9aË\x99@\x1eêérë\x17\x81µÎæ\x05\x0e©Ü.jw#\x11"Ã\x88·ò\x90AQ/&\fqËh¨pEÏÿ\x1b,P\x91§Ö¼\x10\x8d\x10kÇzWqIÞ24\x140Á.\x110"$\rz[¿`W\x87\x0fç]\x19\x85äpO,CHV~<R©}Fá¸AÓ#\x91Ã~µWsíc©Ú`Ñ!¸â\x92(\x04\bQ\x8f£ý\aO\v°\x0f\x85\x7fë\x1e7\x9b\x85¼Ç\x0fï"\x80³Kç²Ïû\x8a\x881\x91Æø¥Ð¡oX|\x9b»¸1B`ÐU>ë\x91O§Ê\\&\x1cU8@\fì\x99XnN\x99È2rx\xa0CD\x81\x04sÆé!\x94òOò\x98®óÏá\xad\x05ê·ÏxY\x95v ¾i\rNðà<å\'³»m\x8c\x17Ï¥øº\x9eW\x9e\a(ËÏ(\x06\x15лSL:»ô$£1˳à)\x80\x9d\x04\a&,Å«\x0e\x87¤Ñß®\f\xa0×\vù9Ö\x9a\x856çøò&Ã\x1bpæ~\niS;lñâ²´Îàm³ú`ð;\x0e|9??j¯\f\x0fì$_Ï\x05¾yYÀÎ?¦j+\aw\x98\x9e\t(\aX\x95ñÙÌ\x8f\x83;Ýîo@±m\x98ÃW\x7fE\x855\rƯÚ\x98s¿\x82\x9búÂ@Ãa\x85\x03Á\x0eÕ\x9dó8·ßBÝr£Ô\x92\x92,q\x9a\x0e~}Tu°$f¥UZTÔ \x7f\x1c?Û-\x00Dh\x8dó\t\x11-×\x04ÌÉóFù<\r\x05D\x13yUü\x1c=¿1£nÙ¿>\x0e=~¿dj\x89RÞU\x01áËu\x88s´âÂ\x8fôm¨Sä)Y\x8a\x9f\x9b\x9e¢]\x95{´ê\x8f¥\f\x813\x00\x8e»\x1aÜ9<7\x16¢>)Ù\x1b»\x9c\x83Þ\x9eþI\x8d]ÙNq\x91+³\x9dÂ\x13Ýïq[\x9bPÿx6s×8ë\x17¿»\x8f\x06µCA××Ww\x8ak¸Ft!sG\'zi\x01\tÓ)FRi\x96\x1b|!ð×£\x10\x91\x8dÄ\x96ó\x9aé/\x9eÒ\x01ÜóõI)UïË4<ÕHv¤NJ¤¨\\>~é1N\x92\x89nLQ\'¦\btÃliJ\x85:õö\x91Ãõw¿ª4ÇǪÓæ\x8e\x9be£¥\x16ê·\x94ª6\x7fìØ\tÙæ\x197c\x87r-§\x9biÒ¡\x11KB4\x82¿¢\x06OÏ1kÖÚÏjR\x1eÈ[áiñývt\x11\x86\x8aÏåcD¯V÷~\x0e±\x8dHVelÇ9\nÍ\x15Ç¿u\x02L!&Y ×HY\x9da9\x8d[¨\x14Y\x88BÞ\x81\x98÷]\x91ÊúlÂ¥l\x9f*ÔÄ\x05Èïî¯0\x06:\x0fN\x1d\x00-ò¾ø\x01÷döúrZ\x16Fv,d©ö:Ö°zÚ\x1du[õé¹Ù\x1e·Ð\x93\x115\x14V¸8Ӷܥĵ3Ng-\x1b3ö°H!²d\x19kÙã\x99_Q+\x1cB\x90zö£Í¼îc2\x8fÅÂn9\x99\x02Û\x1b:BÏù\x92¡ÓC\b±\x1f\xad¡\x91ÝÚ\rÝj\x1fÛjäp\x04\xad7¦!µDI\x1c\x90D\x9b\x04àñ\x80\x89\x9d\x1c\x9dÖF\a³dTp\rÐÉ\x8dë²ÀÐ\x96Ø2«½k\x83Á;\x01m2û\x95\x15C¸4¼¶Ê©4ë\x1fn\x87\x8eWï\x1a\x1du\x1e÷«ê¾Ç(\x00£Þ<\x13)[°¼Jq\x8dú\x19ôÀÓg+EÔmÝÁ\x88Â09£ÉB\x7f¾Cìe\xa0bCÄ\x84>2Yú\x15uMXì\x95G\x1d\x02º+QÓä\x11W\x8dÞ\v\x86\ao\x1d¦|\x81G\x1f±\x99Î\x8cò½\x92@\x1c\x7flb\x8d-¶\'¼Gâ§\x1d0ÎbÿÏð&\x8cZ*~¢ÓVb\x02×\x04Äþ\x06\x98\x16\x05d±b¯\tçM;À\x1c¾wÂ?\bÉî]"äöNUo8ï&îeksÈajãݳv\x06\x9b[O·a\x9aÒ¬ØBÚ\'¨\x92ß]9\x93Éü\x03FÜÂAçdus\x81´\x97\f\aïÿé»åx¢\x9dy.\x92vÆ\x19¿\x9d§\x94y\x00¨÷3Æ\b®r¿Ü\x1dÎõ\\091\x0eAx¥¶·£\x8bXÝX¿5Ìr\x05\aÿX²å\x1fITgJa>\x1c~\x85Hme\x1dþG}1¡Eû\n²Óê\x16j-\x8a+Àsv\x89ïã\x8a±á\x92À³\x1fñ\x8d0òq\x8cï;xO\x1ecãÅ\x87$\x97.\x8e\f\x1c.ã¦êD.\x80Ù\x143\x9d×9Â÷ü\x81¿\x86\x90\x80°§m=\a\x9bµÅþ\x883\x98Ë\xadÀÒÖ\x1c_\x8f\x030eîYÊnª|Q\x1e\x8e«hÕø\x81D\x9e,^ÅGÁ¦\vð\x03à\x0f\r\ap\x8d?ã"\x9bq¶p\x85Ðø\x1eï \x11¼ \x1d\x00a^G\x13©&z6¾ÿùíѹ\x89C86ÊGvI\x80+\x15jÿÀ\x80«r¯4^\x19Ð?VT\x17*tÎ\tÞ\x84òñ,\x1dªÕ|2\x13\x8d\x8b¶§ýG½ÚcP\x03V\x0e)\x9e\x1eË©®t}à"I1Lª»Å$ÔH\brÄ\t÷ôÈd\x84ÑþÛ&~ME¤\x1bý\x00\x99HDþÇÿ\x14Aú\x14¹\x9a¤`¥\r0à$¥\x17ÿ\x82\fÛ\x17\'\x10Ä/Ã\x19?\x904ï\x1b\x88\'ä;\x1cIèBÌ\'ØúݽõZf\x18\x14»\x1bÞCíVc8\x14^Ï\x84k/¥ÝDÉà\x15\x8d\x7fb£ú¸\x90\x054\x11\x9f\x05\x06è\tÚÏ\x85\x93p*vÞ\x14\x9bgVj\x1f!ÜEU[Üÿ¶ñGWlÞXâÔ«\x8e\x7f\x06s\x81\x83ªl[²Ú×"\x05äÊX´\tk^OÕn;\x85-í\x03\x88ÔÕ±\x9d*\n¶£úó\xa06X<<vØøt²~¥ÄÇø\ncZ)\x9b77JÜ\'[É\x18\xad\xa0\x0f\x065åZ \x06\x12;ÙÂ\x1a\x9dÓ>\x96÷Æ*o\x0e\x8cÒµbC7H°4]?\x06ï\x12\x19¢ú@ÈË\x1a\x87{\x01qZºçH§¶\f,$\x8f\x84Õ\x1bl\x87ÊN8\x17\x83{\x9a\x85b\x17(ã&.XÙ\x90\x93Ò&Ô±\x1aÃ\x8b}òP\x92Û\x1f\x14\x96Ê\x84)fQU²\x17\x10£\x8c\x993¬\x80\x82G9aá3\x89°Bó\rGÄ\x87úù²ÃÂô\x83\x9dNCÇ\\èÐ\x17\x96¾Á\x867b\x110Ý\x93îí\x85¿;û®\x8b=\x87±\x91\x86\x15x\x86Ó\x85(\x01SìÒÇôá´\x89 \x16¢c¦Ç\x9f.\x1dÅÛs\x13\x17æbij¢m\x14K7l\x12í\x88\xa0N[ÊÝ^Pk2À\x15\x8cÝÄF\xadR)Y\x84æEÆ=Í\x91Ü(e$Ùðuµúf*ôR`â¯ÔM8\b±\x04Ø\x81Iùò\x851v\x1a\x94¬æBvè÷ú@£&û\x10«ÀÈ¢A\x00¢´ºUHp\x05\x85\x1f\x06ùÖwVUkHâEHòLѺ\x12Ü{\x87?\x97\x13K{\\»\x9e\x117E8¿\a\x84æ\x7fÑ\x02)\t\x88\a5ЧÌô[t\x04Ë6\'+\x86%Ý\x97JêIÓ\x89c\x889\x15\x81E8§I}àïHÃ/|õKÿg;\xadMÏÊBOêNÊ]\x86\x198²%¶¹M:á|Õ\výÿ®\x862\x18¯ô[2\x98 *t\x1añö¬\x89÷Säß¼T¾\x9a4\x1f¿B¡õ\x8bÒ\x9bÞ\x0f\x1e\x11frv\x06\x99é\x95¹ØÀ\rLÄ\x01\x0e>\x1d\x16\x90{8®BÊ$8©Ü\x86³\x97Ã/\v¼\'Ç\x95\x81ÔZ)Ð\x0e\x8a\x9c\x1eÑVô\nîkù%\x10\r3ßX·{\x1eB\x8c\x81Ë/kܬ\x13\x89ooð?\x04\x98[\x93Er~\x13:E~düÌ3M\x9cô0ãèmòU\x11\x03\x90ÜTÁ\x8bk<@ÙtÇ\t3m\x19|Ñl³¶ßAó\x05D\x98d¾ñ\x86\'LÔ\n+®\v¤F\x1e\x14\x96&X¦\x87Ô\x97þ\x88\x0eaWW\x9e7\x13ÛE\n\x14N±j\x7f=YÏa%>É-\x1ez&µ\x9c\x0e*\x8c +.\x03·y¶\x12a\x02\x8c\x8eÄ\x8d¥\x1c\x151Ü\x8a\x1cr\x96Æu\x86ɲ\x88Ö®i\x90\tAÜ\x16È%\vSÁ]\x9a0\x8f&WÜî"\x93;íeC}Á$\x03\x14s\r\rxj=Í\x82Dãkj}¹Ä\x92Ö©\x04ÿjz1o«ù\x7fñ\x14;O3Âq\x88eÞÊ:\x9e¦\x01\f߯\x8et\x9aï\x81<£xàÎ\x02\x04d¦d1gìá(\t/å\x12(\x9e¬\x10ÿXWL\fCeác5-\x81[\ta\x83³ÔgPÃÀú¬d\x99\xad=¯ \x95\x1a*KJof£ÌMT-æÅa=\x89\x19Gø\x1aújbV\x16QÔ\x1bÚGLö\x02¾.\'\x1de\x82\x94¾»\x12\b|\x00úÝ̲Iµçg\x1fûSgrxHª\x85\x8c\x06\x90\x8c\x84K\x14\x06mëÔ"M_5d|4\xa0óåL\x89\x16f׶Ìþp\x8f\x9b\b\x84wÕss\x85Sôû a\x83\x10DT\x1bØDeãÈÖ¨fuÁ\rU@\x98{w\x05¤ö«\x90@ÁkâýÃãcïu¢«nü\x1e½o\x16jµZ\x16\x926Íï88\x9d_3ÉG.\x8c;´Dñ<T\x97\x9f\rJX=Í\x98nG\x9b¶\a(\x9dìîh^º\rÓ\x00Ô÷\x83Ð\x9fÂq/,Ð&\x14\x03\x81C\x14\x94\x85\x81\x1a\x0e\x03&s\x13*ûÀjîÇ\x8cHCùc\x88$cÈ\x94\x99}#yA\tt\x95ØN@\x12?·öÓ>\x9a|aÐ){-\x1e[Ð$qõ»\x8bSÜ`¬_\x1d²1\x00Y\x17hÍðf.~\x162\r¨e` ù\x88\x0eïK)h\x1d\x91\x88gÉìË\x1f¤\x7fh\x96Ëm]0\a}öaǸ@w±\rèËÒ³ý\x98\x9fç¿ÆB~ÝcÎÕ¨Ü\x9c"\aç@\x91<\x17~æ©I\x97¥\x15Í¢ÃQý¡?i©\x18\x8eIë\x92\x84äV^Le¡J\x9eò\x00`é\x7f2[\x9aiN\x06Ó¨p8ú\x1bå#\x7fí\x8a\x92\x06¦á)<æÛ\x01`æRüÜQU¨íÏq·èÔd\x05`»æ\x91\x05í\b\x12ÀU#\x96\x8c#x2¤u=\x1aÎé{á.Ç\x8f9a\n¦\xad¾\x01\bÙϲRaG`¸°p_Y)ã¥þ\x9d±\x06\x05àÎ\x9eÇ\x0epûÍ\x13CúÜ°òW\x8e\x9aã~|º]~ð\x00)ËÁEø\x88¸\x94Ý+4êñ\f\x93o\x8aFmoPʵ\x99wìÝÊh\x89YyÉàZ5\x80J\x83sZ\x06ÐÅÅÈe|ØúÀ2ç\x8e¨<pVy½\x93×ïÿ8«\x90\x00@vHó\x13¡*CJáí\x1fþ¹ÞÙ\fN\x93èÖXÚT«\x91ÚO\x04\x15ö\x00T´\xad\x1cPðUƬ7\v¤Ì\x90ï½á\v\x80-\r!§i«wÍà\bú\n\b¡-»bû:úMî\x93\x13\x18rf,YnËLén\x13U\xa0âØÏn\x83\x1e¨{ÎHþAQa(\x7fªzâq\'0\x81 ø\x87\x84\x85\x10ÁyBºù²Ìi\x1eÕ¾G"\x9dt\x19\x944ñ%ÎÜYd\\`¸\x18vAæt\x05_¤\x02CT¿\x00\x03\x0e¿s\x9a\x01v\x91ù ¥4\x064ëÔ/ÒõBË\t\v\b\x14 (Ëõg\x8dYá=\vò\x9e\x8d"ÏvÆ\x02\x84\xa0Ñ\x82<\x80ø\x10_¦!o\x80.b`\x84å \x88eĤV\'}qqÁ«¥\x04\x1d³a\x9aëÕ\x06¦Aì0`¼\x8d<ö\x064\x01\x10Ì|ÞÓ®Û\x1dpDÔ\x1eÚ<ÅìÑ\x84XcD!\x0f\x8e\x1a\x11\xa0áh\x97\f¡Ñ¼D$\x8eö²¤-\x10k\x894ýã\x96\x81°?\x0f¸6\x1c+s^Tt\x9d%\x1bÓne\x82£kjjè\x9aPy\x920Hì!\x9b¶|Ï>\x88r^~\x80\x9cèáÓñ4CDZ¤Úèðî8\x80¤à\x99\x17}×Yá\x1c;\x19xÕ\x1d\x00ue\x99K¨åN\x9ek\x05\xad6"\x1avs0\'·Ã´n-a\x7fnz`\x97@\x0eëxô?\x10#öÉ\x92Z\x02Ö\x1eÒ\x8c\x97¾\x9aãr\x12\x9b&loº`øA0çsý\x05·\x83\x9aSE¨\x9aÝ»\nr²"\x10ÿ\x85âr\x19\x9a\x17¯å·\x8b\x88Íù0]*\x80\x02 2èÀ¹\aU×{\x1d\x13¢x\nZb±M"_\x84\x9c\x15[\r\th{®fh\x1b9Âø2ïLnfR/w\x11Ö5\x81PÓòØ\x95qþ\xa0\x84|Ô·@8oBMÂ#ãÄ;À\x11\x05\x14)Z/&\x8c/0\x1d7"Æ\x82v\x96\x1e\x8ca\rË!=þ\x04\x0e©Bj\x87N\tLG$JÖ\x9d÷£¡\x94\x13ñ@x¶\x88£\x96®\x8f¿Í|õ\x87\nbËW\x8d\r6ï\x1dç«·Üõ\x8e9\x93k~ÔÒýµ\x02§6u:>È\x1c\x9an\fì¿Ã(ioú\x1dò«èc\x87\aMú¨,\v^\x0e§º\x93¨\x92\x88¯¼O¯áÔõw\x02R3\x88ìÇ.BÎ}w\x9d\x18%IE\x91\x9cÎÜ\x8c\x97\x99\x15H\x8b\vr\x912ä\x14OÈ\x8fv\v¯ªi\xad\x91\x90\r¶úPÒLÃp\x89\x8c·¥\x107kl\x1a\x80\x01P\x12\x97ùï*\bãß\t\x94\x8e^B\x92\x02ª\x9fZ-µ:\x19\x86:\x13C\\ÞØUèÕÉû\x051èÚe0ÌpLùÓ\r,r+qJÝ\x1d~l³\xa0þ\x88Ñ\x7fÌ^&\x8c\x19ÕáoAÕÏ^(Ý\x9f¬hõgÇd\v\x85:>Àb24§\x7fGïZ~\x1cìR\x03©\x0eÎh ³\nÇ\x1f^É\x8d\x81\x9dËñç\x8aéV]®¤\x95v¥9J\x14\x00\x00\x00\x01\x00\x00\x00\x14\x00\x05\x00\x10óÊ-¢)¨6ß'.encode()

license response status: <Response [400]>
server reports: {"bl_ok":0,"str_licence":"","const_status":"KO_YACAST","str_title":"Erreur","str_message":null,"type_licence":"DP WIDEVINE","device_id":null,"db_id_device_client":null,"id_client":120319127,"retour_false":"pouet","str_erreur":"Nous avons rencontr\u00e9 une erreur. Merci de renouveler l'op\u00e9ration, puis contactez le SAV si le probl\u00e8me persiste. [30]","id_article":"2352489","type_drm":"widevine"}
server did not issue license, make sure you have correctly pasted all the required headers in the headers.py. Also check json/raw params of POST request.

[Attachment 72135 - Click to enlarge]


[Attachment 72138 - Click to enlarge]

[lomero]

you talk about this one: https://forum.videohelp.com/threads/409776-Get-a-key-without-CDRM/page3#post2695424

and also another same your request here: https://forum.videohelp.com/threads/409776-Get-a-key-without-CDRM/page4#post2695539

we are all still, without answers. this is a weird site. that contains garbage in the headers

also this site allow login, but device number is limited and to disconnect some devices, need 30 days

the only way is make a new login with free trial 14-days. and can share login with trusted and very strong user/friend

i have login and video link to tryout is that: https://www.filmotv.fr/film/la-nouvelle-fille/24243.html

if anyone wants to join the fight, PM me

[Silv3r]

you talk about this one: https://forum.videohelp.com/threads/409776-Get-a-key-without-CDRM/page3#post2695424

and also another same your request here: https://forum.videohelp.com/threads/409776-Get-a-key-without-CDRM/page4#post2695539

we are all still, without answers. this is a weird site. that contains garbage in the headers

also this site allow login, but device number is limited and to disconnect some devices, need 30 days

the only way is make a new login with free trial 14-days. and can share login with trusted and very strong user/friend

i have login and video link to tryout is that: https://www.filmotv.fr/film/la-nouvelle-fille/24243.html

if anyone wants to join the fight, PM me

have you tried StreamFab or TubeDigger in Rec Mode ?

[lomero]

ye, maybe both app can work. but the issue is the OP login does not allow other devices. and in tubedigg or streamfab you need login to play ...

[iamghost]

I cant login in to check your video :/

[Karoolus]

I gave it a go today as well, I'm stumped. I managed to create a trial account though

[k2000]

I gave it a go today as well, I'm stumped. I managed to create a trial account though

How did you open a free account for 14 days even by VPN with a Canadian credit card, it doesn't work.

[Karoolus]

From what I can find, the responses from the license server are encrypted using AES-CBC. The key and IV are passed along as headers. I've been trying to decrypt one of the responses to get to something that is recognizable but so far no luck.
I got the AES-CBC part from https://www.filmotv.fr/assets/ucaya_player.js

The key and IV seem to be B64 encoded, but I'm struggling to decode them to something usable. The B64 (at least I assume it is B64, I could be totally wrong) is too long to be used as a decryption key and when decoded it's not a correct usable string. So I'm not sure what to try next.

I'll have another look whenever I find some time.

[Karoolus]

I gave it a go today as well, I'm stumped. I managed to create a trial account though

How did you open a free account for 14 days even by VPN with a Canadian credit card, it doesn't work.

I live in Belgium and I can just get a normal subscription to the service using my Belgian credit card. I'll have to remember to cancel it though

[lomero]

From what I can find, the responses from the license server are encrypted using AES-CBC. The key and IV are passed along as headers. I've been trying to decrypt one of the responses to get to something that is recognizable but so far no luck.
I got the AES-CBC part from https://www.filmotv.fr/assets/ucaya_player.js

The key and IV seem to be B64 encoded, but I'm struggling to decode them to something usable. The B64 (at least I assume it is B64, I could be totally wrong) is too long to be used as a decryption key and when decoded it's not a correct usable string. So I'm not sure what to try next

nice news. and nice also your trial. now you can share your login with some user here (not me). let's join forces

[stabbedbybrick]

Man, this site is something else. I spent the last hour going down an AES rabbit hole, and I can't tell if I'm close to getting it or even further away

I can get a proper 200 response from the license, but it's clearly encrypted. I'm assuming the FILMOTV-KEY av FILMOTV-IV are the keys to decrypting the response, but you can't use them as they are or you'll get "incorrect decryption". If you trace the license message, you can see mentions of RSA OAEP and AES CBC. And since there's a 'cert' in the authorization header, I figured you might be able to somehow use your own RSA keys that could then be used to decrypt the returning KEY and IV headers, but exactly how to do that is where I'm stuck. I either get a "Bad request" or "incorrect decryption".

I like a challenge though, so I'll probably come back to this later. But I'd love to hear if anyone have this figured out.

[sk8ordi3]

and if it fails because it is only possible with chrome-cdm?

[lomero]

no, the same. one friend have buy a chrome-cdm and ahe have tested. same result

[Karoolus]

and if it fails because it is only possible with chrome-cdm?

I know that someone managed to get a key for it last year. So pretty sure it's possible.

[iamghost]

will it work with addon chromecdm widevine guesser?

[sk8ordi3]

will it work with addon chromecdm widevine guesser?

is there still a working version of that?

[iamghost]

will it work with addon chromecdm widevine guesser?

is there still a working version of that?

for moment.. yeah but it different it cdm api



i edit it add stargate gif background
keys for amazon 1080p

[sk8ordi3]

@iamghost
cahh, i'm out of date on what method still works..
(I thought this api had already been shot..)

[lomero]

yes, i know a new guesser like iamghost talk, is available

and maybe with this one you can find the "unavailable" key

but the problem is that the account does not allow other devices (now full) and cannot disconnect some devices. so maybe the only guy who could get the key, cannot have access to the site.

That's why i said in my post #2 that the only solution is to signup in trial mode for 14 days and then unsubscribe. just to have a trial account for a test

[Karoolus]

will it work with addon chromecdm widevine guesser?

is there still a working version of that?

for moment.. yeah but it different it cdm api



i edit it add stargate gif background
keys for amazon 1080p

Is this publicly available?
I'm curious to see the source

[lomero]

Is this publicly available?
I'm curious to see the source

not free ...

[iamghost]

yeah not free... but beware of scam
i got the key from somewhere, be use that like about nearly 2 months and still working till key get blacklist

[Karoolus]

Thought so.. I'll just write my own things then

[stabbedbybrick]

https://www.filmotv.fr/film/la-nouvelle-fille/24243.html

fc04a251920f42629dc87ae5a598903d:cf1f16a12b05f9a4e1695836aac96ab8

Well, that sure was a learning experience. If there ever was a service that required a custom script, it's this one.

I can also confirm that 1080p is L3:

Video:
3 788 kb/s (4 7700 kb/s), 1920*1080 (16:9), at 25.000 FPS, AVC (High@L4) (CABAC/ 4 Ref Frames)

Audio:
Spanish, 128 kb/s, 48.0kHz, 2 channels, AAC LC

[Karoolus]

https://www.filmotv.fr/film/la-nouvelle-fille/24243.html

fc04a251920f42629dc87ae5a598903d:cf1f16a12b05f9a4e1695836aac96ab8

Well, that sure was a learning experience. If there ever was a service that required a custom script, it's this one.

I can also confirm that 1080p is L3:

Video:
3 788 kb/s (4 7700 kb/s), 1920*1080 (16:9), at 25.000 FPS, AVC (High@L4) (CABAC/ 4 Ref Frames)

Audio:
Spanish, 128 kb/s, 48.0kHz, 2 channels, AAC LC

Care to elaborate? I'm curious now

[lomero]

wow stabbedbybrick great news. my regards

no one succeeded in this challenge. and i can guarantee you that many guys have tried ... nice one

[stabbedbybrick]

Care to elaborate? I'm curious now

I don't like to post too many details in the open since there are so many parasites around trying to turn a profit from these scripts. But I'll give you a synopsis:

The response headers have one type of encryption, while the response content have another. You need to send your own certificate in the request in order to be able to decrypt the returning headers. The decrypted headers are then used as KEY and IV to decipher the content itself. The problem is that the certificate is tied to your device and token, so when you change it it'll look like another device is sending the request. And since this service has a limit of 4 devices that can only be changed every 30 days, you'll be hit with "ADD_TOO_MANY_DEVICES" almost immediately. So I found a way to get a fresh token each request, which allowed me to also send a new cert each request. Which means I can get as many keys as I want without hitting a device limit.

It's definitely a unique approach. But I do love a good puzzle

[Karoolus]

Care to elaborate? I'm curious now

I don't like to post too many details in the open since there are so many parasites around trying to turn a profit from these scripts. But I'll give you a synopsis:

The response headers have one type of encryption, while the response content have another. You need to send your own certificate in the request in order to be able to decrypt the returning headers. The decrypted headers are then used as KEY and IV to decipher the content itself. The problem is that the certificate is tied to your device and token, so when you change it it'll look like another device is sending the request. And since this service has a limit of 4 devices that can only be changed every 30 days, you'll be hit with "ADD_TOO_MANY_DEVICES" almost immediately. So I found a way to get a fresh token each request, which allowed me to also send a new cert each request. Which means I can get as many keys as I want without hitting a device limit.

It's definitely a unique approach. But I do love a good puzzle

Very nice!
Dammit, now I'll have to get a new trial account and figure this out haha

[tadanobu]

Wow. Congratz on this breakthrough !

[scryclwn]

Care to elaborate? I'm curious now

I don't like to post too many details in the open since there are so many parasites around trying to turn a profit from these scripts. But I'll give you a synopsis:

The response headers have one type of encryption, while the response content have another. You need to send your own certificate in the request in order to be able to decrypt the returning headers. The decrypted headers are then used as KEY and IV to decipher the content itself. The problem is that the certificate is tied to your device and token, so when you change it it'll look like another device is sending the request. And since this service has a limit of 4 devices that can only be changed every 30 days, you'll be hit with "ADD_TOO_MANY_DEVICES" almost immediately. So I found a way to get a fresh token each request, which allowed me to also send a new cert each request. Which means I can get as many keys as I want without hitting a device limit.

It's definitely a unique approach. But I do love a good puzzle

Goddamn... Seeing what some people around here can do is beyond impressive.