Need help to download HLS AES-128 encrypted video.

[johnyl0]

The first lines of the M3U8file are as follows:

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-TARGETDURATION:13
#EXT-X-MEDIA-SEQUENCE:0
#EXT-X-KEY:METHOD=AES-128,URI="http://localhost:3001/key.dat",IV=0x4d1acfe1962002a4abedb8b68c65fa93,KEYFORMATVERSIONS="1"

When I try to download with yt-dlp I get 403, even though I specify headers and cookies.

I tried to download with hlsdl and got the same problem ({"error_code":403, "error_msg": "http"}), I can't get key

[2nHxWW6GkN1l916N3ayz8HQoi]

Localhost key? Where did you get this m3u8 from? Site link?

[lomero]

upload and share file http://localhost:3001/key.dat

[johnyl0]

Localhost key? Where did you get this m3u8 from? Site link?

mobile app, when I watch the network with proxy the key.dat request fails and the video stays loading. when I disable the proxy the video plays

[johnyl0]

upload and share file http://localhost:3001/key.dat

I can't download the file, the mobile app is requesting this.

[2nHxWW6GkN1l916N3ayz8HQoi]

mobile app, when I watch the network with proxy the key.dat request fails and the video stays loading. when I disable the proxy the video plays

More details would help. You can play it only on mobile through the app? No desktop? Do you need an account? What app? etc. You could try and setup usb debugging phone->computer and inspect the network traffic.

[johnyl0]

mobile app, when I watch the network with proxy the key.dat request fails and the video stays loading. when I disable the proxy the video plays

More details would help. You can play it only on mobile through the app? No desktop? Do you need an account? What app? etc. You could try and setup usb debugging phone->computer and inspect the network traffic.

There is an app for desktop and an account is required. I will try for desktop and let you know, thanks for your support.

I have a question, won't the request localhost:3001/key.dat also apply to the computer, what will be different if I try from the computer?

[2nHxWW6GkN1l916N3ayz8HQoi]

There is an app for desktop and an account is required. I will try for desktop and let you know, thanks for your support.

I have a question, won't the request localhost:3001/key.dat also apply to the computer, what will be different if I try from the computer?

I just find it easier to get stuff done when poking around a site on desktop. It's a preference. When you try to access localhost to get the key, make sure you keep all the headers from that request. You can copy its curl and play with it to get that key. If you can't get the key from localhost on desktop, you could try to detect the localhost request and manually export the response from the network traffic.

If you are lucky that key should be good to decrypt the hls stream. If it doesn't work with that key then that means it is altered by the app after it is received, and things get messier.

Edit: You can access it only through the help of an app? No browser site?

[johnyl0]

There is an app for desktop and an account is required. I will try for desktop and let you know, thanks for your support.

I have a question, won't the request localhost:3001/key.dat also apply to the computer, what will be different if I try from the computer?

I just find it easier to get stuff done when poking around a site on desktop. It's a preference. When you try to access localhost to get the key, make sure you keep all the headers from that request. You can copy its curl and play with it to get that key. If you can't get the key from localhost on desktop, you could try to detect the localhost request and manually export the response from the network traffic.

If you are lucky that key should be good to decrypt the hls stream. If it doesn't work with that key then that means it is altered by the app after it is received, and things get messier.

Edit: You can access it only through the help of an app? No browser site?

I understand

No browser site, just an app.

[johnyl0]

There is an app for desktop and an account is required. I will try for desktop and let you know, thanks for your support.

I have a question, won't the request localhost:3001/key.dat also apply to the computer, what will be different if I try from the computer?

I just find it easier to get stuff done when poking around a site on desktop. It's a preference. When you try to access localhost to get the key, make sure you keep all the headers from that request. You can copy its curl and play with it to get that key. If you can't get the key from localhost on desktop, you could try to detect the localhost request and manually export the response from the network traffic.

If you are lucky that key should be good to decrypt the hls stream. If it doesn't work with that key then that means it is altered by the app after it is received, and things get messier.

Edit: You can access it only through the help of an app? No browser site?

Hi, I tried with the desktop app.

URI value: https://xxx.com/xxx.php?c=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

When I try to download with ffmpeg, hlsdl and yt-dlp it gives 403.

When I make a request to the link the php file is downloaded.

[2nHxWW6GkN1l916N3ayz8HQoi]

You obtained the key from localhost? That's good. Now get the m3u8 link of the stream with all its headers. Bad headers may give you 403 forbidden so just a link pointing to it may not be enough in this case. And then decrypt the stream using N_m3u8DL-RE and --custom-hls-key "keyfile" (the local key file you managed to download).

[johnyl0]

You obtained the key from localhost? That's good. Now get the m3u8 link of the stream with all its headers. Bad headers may give you 403 forbidden so just a link pointing to it is not enough. And then decrypt the stream using N_m3u8DL-RE and --custom-hls-key "keyfile" (the local key file you managed to download).

no, the URI in the m3u8 link had another link (https://xxx.com/xxx.php?c=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx)

here are the header values:

headers = {
    'Host': 'xxx.net',
    'Sec-Ch-Ua': '"Not.A/Brand";v="8", "Chromium";v="114"',
    'Sec-Ch-Ua-Mobile': '?0',
    'User-Agent': 'Mozilla/xxx',
    'Sec-Ch-Ua-Platform': '"Windows"',
    'Accept': '*/*',
    'Origin': 'https://xxx.net',
    'Sec-Fetch-Site': 'same-site',
    'Sec-Fetch-Mode': 'cors',
    'Sec-Fetch-Dest': 'empty',
    'Referer': 'https://xxx.net/',
    # 'Accept-Encoding': 'gzip, deflate, br',
    'Accept-Language': 'en-US',
}

did not download when I specified host, User-Agent, Origin and Referer values

[LZAA]

Need full file 'Name.m3u8'.

[johnyl0]

Need full file 'Name.m3u8'.

This is the first line of the m3u8 file

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-TARGETDURATION:13
#EXT-X-MEDIA-SEQUENCE:0
#EXT-X-KEY:METHOD=AES-128,URI="https://xxx.com/xxx.php?c=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",IV=0x4d1acfe1962002a4abedb8b68c65fa93,KEYFORMATVERSIONS="1"
#EXTINF:12.133,
media_b595000_sl_0.ts
#EXTINF:12.1,
media_b595000_sl_1.ts
#EXTINF:12.134,

What difference will it make if I send the file, what will you do differently? Please don't misunderstand, I'm trying to understand.

[LZAA]

Need full URL '0.ts'.

[ElCap]

What difference will it make if I send the file, what will you do differently? Please don't misunderstand, I'm trying to understand.

Its much easier to test with the link itself than with the limited obfuscated information that you are giving.

did you try N_m3u8DL-RE like 2nHxWW6GkN1l916N3ayz8HQoi said?

[johnyl0]

Need full URL '0.ts'.

okey, is pm allowed?

[johnyl0]

What difference will it make if I send the file, what will you do differently? Please don't misunderstand, I'm trying to understand.

Its much easier to test with the link itself than with the limited obfuscated information that you are giving.

did you try N_m3u8DL-RE like 2nHxWW6GkN1l916N3ayz8HQoi said?

Yeah, it's giving me 403.

I'm doing it as a test, I wondered if it could be downloaded.

I can download all the parts individually, how can I decrypt them together with the key file?

[ElCap]

What difference will it make if I send the file, what will you do differently? Please don't misunderstand, I'm trying to understand.

Its much easier to test with the link itself than with the limited obfuscated information that you are giving.

did you try N_m3u8DL-RE like 2nHxWW6GkN1l916N3ayz8HQoi said?

Yeah, it's giving me 403.

I'm doing it as a test, I wondered if it could be downloaded.

I can download all the parts individually, how can I decrypt them together with the key file?

its still very vague.
which part is giving you 403?

you can concatenate the files together and then run mp4decrypt on them

[johnyl0]

What difference will it make if I send the file, what will you do differently? Please don't misunderstand, I'm trying to understand.

Its much easier to test with the link itself than with the limited obfuscated information that you are giving.

did you try N_m3u8DL-RE like 2nHxWW6GkN1l916N3ayz8HQoi said?

Yeah, it's giving me 403.

I'm doing it as a test, I wondered if it could be downloaded.

I can download all the parts individually, how can I decrypt them together with the key file?

its still very vague.
which part is giving you 403?

you can concatenate the files together and then run mp4decrypt on them

the main m3u8 connection contains Policy, Signature and Key-Pair-Id values (https://xxx.m3u8?Policy=xxx&Signature=xxx&Key-Pair-Id=xxx), but the content is "media_b595000_sl_0.ts". these values are not defined in the included tracks, could this be the cause?

Is there a command that works with the key.php file so I can use mp4decrypt or how can I get the hex value from the key.php file?

[ElCap]

this should be the key (the key file in hex)

0d5ba7503d466dc46c934a19621e14a7

you should be able to use it with mp4decrypt like this (if you know the kid)

mp4decrypt --key kid:0d5ba7503d466dc46c934a19621e14a7 encrypted_file.mp4 decrypted_file.mp4

or try these if you dont

mp4decrypt --key 0:0d5ba7503d466dc46c934a19621e14a7 encrypted_file.mp4 decrypted_file.mp4
mp4decrypt --key 1:0d5ba7503d466dc46c934a19621e14a7 encrypted_file.mp4 decrypted_file.mp4

[2nHxWW6GkN1l916N3ayz8HQoi]

I can download all the parts individually, how can I decrypt them together with the key file?

You could download the first few fragments and test the decryption key on them. That way you won't waste time getting the entire stream just to test your download key.

[lomero]

[Attachment 76668 - Click to enlarge]

N_m3u8DL-RE "https://m3u8_link" --custom-hls-method AES_128 --custom-hls-key 0D5BA7503D466DC46C934A19621E14A7

[LZAA]

'URI="k/timestamp"'.

[johnyl0]

this should be the key (the key file in hex)

0d5ba7503d466dc46c934a19621e14a7

you should be able to use it with mp4decrypt like this (if you know the kid)

mp4decrypt --key kid:0d5ba7503d466dc46c934a19621e14a7 encrypted_file.mp4 decrypted_file.mp4

or try these if you dont

mp4decrypt --key 0:0d5ba7503d466dc46c934a19621e14a7 encrypted_file.mp4 decrypted_file.mp4
mp4decrypt --key 1:0d5ba7503d466dc46c934a19621e14a7 encrypted_file.mp4 decrypted_file.mp4

Hi,

this command worked but the file won't open and its size is 0 KB

mp4decrypt --key 1:0d5ba7503d466dc46c934a19621e14a7 encrypted_file.mp4 decrypted_file.mp4

[johnyl0]

I can download all the parts individually, how can I decrypt them together with the key file?

You could download the first few fragments and test the decryption key on them. That way you won't waste time getting the entire stream just to test your download key.

Hi,

I downloaded the parts, I could not decrypt it with the key.php file. When I try to decrypt it, the file size is 0 KB and the file does not open.

[2nHxWW6GkN1l916N3ayz8HQoi]

Hi,

I downloaded the parts, I could not decrypt it with the key.php file. When I try to decrypt it, the file size is 0 KB and the file does not open.

Can you upload the first fragment or any other random fragment from that list of yours? Only one is enough. I wanna see something.

[johnyl0]

[Attachment 76668 - Click to enlarge]

N_m3u8DL-RE "https://m3u8_link" --custom-hls-method AES_128 --custom-hls-key 0D5BA7503D466DC46C934A19621E14A7

Hi,

It gives 403, the reason is that the Policy, Signature and Key-Pair-Id values are not specific in the parts in the m3u8 file.

sample track link:

https://xxx.net/media_b1128000_slTR_0.ts?Policy=xxx&Signature=xxx&Key-Pair-Id=xxx

Is there support to specify them with N_m3u8DL-RE?

[johnyl0]

Hi,

I downloaded the parts, I could not decrypt it with the key.php file. When I try to decrypt it, the file size is 0 KB and the file does not open.

Can you upload the first fragment or any other random fragment from that list of yours? Only one is enough. I wanna see something.

okey

Edit: IV=0x97e05e5b1f3329130331f234af992a09

[johnyl0]

'URI="k/timestamp"'.

Hi,

I don't understand, can you explain?