Boomstream - new DRM protection?

[vvv84]

Hello everyone!
I decided to save another course, but while saving I found a very interesting moment and I think you will find it very interesting because I think Boomstream has implemented a new security system!
Boomstream video player


[Attachment 77049 - Click to enlarge]

If you start the video at this moment, there is a delay code on this segment.


[Attachment 77050 - Click to enlarge]

The coolest thing is that the script ends with an error, but part of the video will be downloaded! the question is how to get around this error I have already tried all the keys. either it requires some kind of delay between fragments, or there is some kind of pre-check with the keys.

What do you think?

[2nHxWW6GkN1l916N3ayz8HQoi]

Link to video?

[Silv3r]

Hello everyone!
I decided to save another course, but while saving I found a very interesting moment and I think you will find it very interesting because I think Boomstream has implemented a new security system!
Boomstream video player

I download it through hlsdl, but at a certain part of the video fragment this error occurs.
Error: curl_easy_perform() failed: Timeout was reached
Warning: VOD retry segment 30 download, due to previous error. http_code[0].
Downloading part 30

[Attachment 77049 - Click to enlarge]

If you start the video at this moment, there is a delay code on this segment.


[Attachment 77050 - Click to enlarge]

The coolest thing is that the script ends with an error, but part of the video will be downloaded! the question is how to get around this error I have already tried all the keys. either it requires some kind of delay between fragments, or there is some kind of pre-check with the keys.

What do you think?

HLS aes-128

https://boomstream.com/en/video-protection.html

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-TARGETDURATION:3
#EXT-X-MEDIA-SEQUENCE:1
#EXT-X-MEDIA-READY:2954532e0e5d581e530334095f2d080d22201a202917 255426333b36361734242d261c37
#EXT-X-KEY:METHOD=AES-128,URI="[KEY]",IV=[IV]
#EXTINF:3.333,
https://cdnv-m15.boomstream.com/vod/hash:ce2ba89ee70fd38e3b38bd4e37c3b860/id:11.173.37...mp4/media-1.ts
#EXTINF:3.333,
https://cdnv-m15.boomstream.com/vod/hash:ce2ba89ee70fd38e3b38bd4e37c3b860/id:11.173.37...mp4/media-2.ts
#EXTINF:1.414,
https://cdnv-m15.boomstream.com/vod/hash:ce2ba89ee70fd38e3b38bd4e37c3b860/id:11.173.37...mp4/media-3.ts
#EXT-X-ENDLIST

https://gofile.io/d/16r3df

easiest solution as always TubeDigger RecMode

https://dealschief.com/shop/tubedigger/

[2nHxWW6GkN1l916N3ayz8HQoi]

HLS aes-128

https://boomstream.com/en/video-protection.html

#EXTM3U
#EXT-X-VERSION:3
#EXT-X-TARGETDURATION:3
#EXT-X-MEDIA-SEQUENCE:1
#EXT-X-MEDIA-READY:2954532e0e5d581e530334095f2d080d22201a202917 255426333b36361734242d261c37
#EXT-X-KEY:METHOD=AES-128,URI="[KEY]",IV=[IV]
#EXTINF:3.333,
https://cdnv-m15.boomstream.com/vod/hash:ce2ba89ee70fd38e3b38bd4e37c3b860/id:11.173.37...mp4/media-1.ts
#EXTINF:3.333,
https://cdnv-m15.boomstream.com/vod/hash:ce2ba89ee70fd38e3b38bd4e37c3b860/id:11.173.37...mp4/media-2.ts
#EXTINF:1.414,
https://cdnv-m15.boomstream.com/vod/hash:ce2ba89ee70fd38e3b38bd4e37c3b860/id:11.173.37...mp4/media-3.ts
#EXT-X-ENDLIST

If you replace in that m3u8 the following

#EXT-X-KEY:METHOD=AES-128,URI="https://play.boomstream.com/api/process/2954532e0e5d581e530334095f2d080d22201a200f59065d573e5708513d535f52000a566f035e546a005f055009516f5154516b",IV=0x45764738476c595a574856484c447056

and upload somewhere and use yt-dlp in the hosted m3u8, you can download it

yt-dlp.exe https://example-hosting-site.com/chunklist.m3u8

Weird that for some reason, N_m3u8 doesn't work on the local m3u8 file though.


[Attachment 77051 - Click to enlarge]

[vvv84]

Link to video?

>>>><<<<<

[2nHxWW6GkN1l916N3ayz8HQoi]

hlsdl -K 374f42705834664d30644a6e316d5133 -b -c -u "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv: 109.0) Gecko/20100101 Firefox/114.0" -h "Referer:https://play.boomstream.net/51SDXTqg" -o "demo.ts" "https://bs.boomstream.net/adaptive/hash:0de3d1a1f42dec004f6ccf215850a0c6/data:eyJ0aXRsZSI6IjAiLCJ1c2VfZGlyZWN0X2xpbmtzIjoie WVzIiwiaXNfZW5jcnlwdCI6InllcyJ9/ncjhK3WH/playlist.m3u8"

Can you even watch it fully in the 1080p version? I get some dead fragments and I don't know if it's their vod mechanism messing with it, or their server.
I could try downloading a lower resolution but I wanna be sure the 1080p is broken.


[Attachment 77055 - Click to enlarge]

Edit: was this link embedded somewhere before? Could you watch it fully there?

[vvv84]

hlsdl -K 374f42705834664d30644a6e316d5133 -b -c -u "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv: 109.0) Gecko/20100101 Firefox/114.0" -h "Referer:https://play.boomstream.net/51SDXTqg" -o "demo.ts" "https://bs.boomstream.net/adaptive/hash:0de3d1a1f42dec004f6ccf215850a0c6/data:eyJ0aXRsZSI6IjAiLCJ1c2VfZGlyZWN0X2xpbmtzIjoie WVzIiwiaXNfZW5jcnlwdCI6InllcyJ9/ncjhK3WH/playlist.m3u8"

Can you even watch it fully in the 1080p version? I get some dead fragments and I don't know if it's their vod mechanism messing with it, or their server.
I could try downloading a lower resolution but I wanna be sure the 1080p is broken.


[Attachment 77055 - Click to enlarge]

Edit: was this link embedded somewhere before? Could you watch it fully there?

[Attachment 77057 - Click to enlarge]

this?

[2nHxWW6GkN1l916N3ayz8HQoi]

Yes, what's the link to the original site? Whenever I watch it from https://play.boomstream.net/51SDXTqg it gets stuck in some places.

[Silv3r]

Yes, what's the link to the original site? Whenever I watch it from https://play.boomstream.net/51SDXTqg it gets stuck in some places.

Firefox no problem , Chrome always stuck

[vvv84]

Yes, what's the link to the original site? Whenever I watch it from https://play.boomstream.net/51SDXTqg it gets stuck in some places.

I've emailed you the access credentials

and what does that mean about the video being interrupted like that?
and a question, why hlsdl does not have a key that could jump such a part of the video and continue downloading further?

and as I understand such streaming videos can be downloaded only by hlsdl ?

[vvv84]

Yes, what's the link to the original site? Whenever I watch it from https://play.boomstream.net/51SDXTqg it gets stuck in some places.

Firefox no problem , Chrome always stuck

yes, everything is ok in mozilla, but it doesn't affect video downloading in any way, on any fragment of video it loops and can't go further(

any thoughts?

[2nHxWW6GkN1l916N3ayz8HQoi]

Firefox no problem , Chrome always stuck

I have random fragments stuck on Firefox as well. I really don't know if it's me or their "pinging" vod mechanism. There is a "fix" though at least. If you generate via a script, a proper m3u8 file using the right key and iv, and replace those "dead" fragments with other ones from lower "acceptable" resolutions (like 720p), the downloading works. However that brings another problem. How can you fix a video with multiple resolutions in the same video track?

VLC is smart enough to play it, though when it changes the resolution for some random frames, it is temporarily a black screen while the audio is playing uninterrupted. The black screen isn't from the video data, but rather because VLC does a transition. The codecs used by both resolutions are the same, the same fps, etc. Only the resolution differs. I guess you could fix it using ffmpeg and resize only those parts and leave the main ones the same, but I'm not knowledgeable enough to do it.

[vvv84]

Firefox no problem , Chrome always stuck

I have random fragments stuck on Firefox as well. I really don't know if it's me or their "pinging" vod mechanism. There is a "fix" though at least. If you generate via a script, a proper m3u8 file using the right key and iv, and replace those "dead" fragments with other ones from lower "acceptable" resolutions (like 720p), the downloading works. However that brings another problem. How can you fix a video with multiple resolutions in the same video track?

VLC is smart enough to play it, though when it changes the resolution for some random frames, it is temporarily a black screen while the audio is playing uninterrupted. The black screen isn't from the video data, but rather because VLC does a transition. The codecs used by both resolutions are the same, the same fps, etc. Only the resolution differs. I guess you could fix it using ffmpeg and resize only those parts and leave the main ones the same, but I'm not knowledgeable enough to do it.

and how do you do that?
I mean, generate a playlist, etc.?

[2nHxWW6GkN1l916N3ayz8HQoi]

[Attachment 77072 - Click to enlarge]

Same problem (on any browser), though now it seems there are other fragments dead. Kinda hard to figure out their mechanism when the video doesn't even play on its own and is stuck loading And funny, pretty much any resolution they offer is stuck on random parts. Oh well.

and how do you do that?
I mean, generate a playlist, etc.?

I don't think it's a satisfactory solution but rather a cheap workaround. Maybe Silver can get it using Tubedigger. You shouldn't settle for lower resolutions. Even if you get the video, it has multiple resolutions in the same video stream and needs resizing.

If you wanna see what kinds of problems you can get from multiple resolutions in the same video you can check it:
https://www.transfernow.net/dl/20240217cgUog89r

VLC inserts blank screens when it changes resolutions and that's why I wouldn't settle in any way for this.

Edit: If you do indeed claim you can watch the ENTIRE video without problems on max 1080p you could try this. Download the m4 chunk m3u8. Edit it in notepad and replace this line:

#EXT-X-KEY:METHOD=AES-128,URI="https://play.boomstream.net/api/process/295f510606070a39271d2f062130161a191b3b2b5c03550f023c045c513e535f55565953395259533b0354520055563b5b5c5966",IV=0x6862756169474e525539516f626c6959

Then upload that file somewhere like https://tmpfiles.org/
And use yt-dlp on the generated link.

[vvv84]

[Attachment 77072 - Click to enlarge]

Same problem, though now it seems there are other fragments dead. Kinda hard to figure out their mechanism when the video doesn't even play on its own and is stuck loading And funny, pretty much any resolution they offer is stuck on random parts. Oh well.

and how do you do that?
I mean, generate a playlist, etc.?

I don't think it's a satisfactory solution but rather a cheap workaround. Maybe Silver can get it using Tubedigger. You shouldn't settle for lower resolutions. Even if you get the video, it has multiple resolutions in the same video stream and needs resizing.

If you wanna see what kinds of problems you can get from multiple resolutions in the same video you can check it:
https://www.transfernow.net/dl/20240217cgUog89r

VLC inserts blank screens when it changes resolutions and that's why I wouldn't settle in any way for this.

Edit: If you do indeed claim you can watch the ENTIRE video without problems on max 1080p you could try this. Download the m4 chunk m3u8. Edit it in notepad and replace this line:

#EXT-X-KEY:METHOD=AES-128,URI="https://play.boomstream.net/api/process/295f510606070a39271d2f062130161a191b3b2b5c03550f023c045c513e535f55565953395259533b0354520055563b5b5c5966",IV=0x6862756169474e525539516f626c6959

Then upload that file somewhere like https://tmpfiles.org/
And use yt-dlp on the generated link.

Can Tubedigger download it? If so, I'll buy it especially since they gave 40% off above

I don't really understand his role.
https://play.boomstream.net/api/process/295f510606070a39271d2f062130161a191b3b2b5c03550f02 3c045c513e535f55565953395259533b0354520055563b5b5c 5966",IV=0x6862756169474e525539516f626c6959

how to work with it and where to put it.

[2nHxWW6GkN1l916N3ayz8HQoi]

https://play.boomstream.net/api/process/295f510606070a39271d2f062130161a191b3b2b5c03550f02 3c045c513e535f55565953395259533b0354520055563b5b5c 5966",IV=0x6862756169474e525539516f626c6959

how to work with it and where to put it.

Filter the network requests and look for playlist.m3u8, download it. Open it in notepad and go to the 1080p m3u8 link. Download that m3u8, and open it with notepad. You will see [KEY] and [IV]. Replace that line entirely with what I gave you then do the other step.

[vvv84]

https://play.boomstream.net/api/process/295f510606070a39271d2f062130161a191b3b2b5c03550f02 3c045c513e535f55565953395259533b0354520055563b5b5c 5966",IV=0x6862756169474e525539516f626c6959

how to work with it and where to put it.

Filter the network requests and look for playlist.m3u8, download it. Open it in notepad and go to the 1080p m3u8 link. Download that m3u8, and open it with notepad. You will see [KEY] and [IV]. Replace that line entirely with what I gave you then do the other step.

I did it https://disk.yandex.ru/i/pEiE4cKOjOjzSQ

but I had to remove four parts of the video.

I can't logically explain what I did yet, I'll try to sit down after work today to look at some other videos and then I'll report back on what I did.

[vvv84]

https://play.boomstream.net/api/process/295f510606070a39271d2f062130161a191b3b2b5c03550f02 3c045c513e535f55565953395259533b0354520055563b5b5c 5966",IV=0x6862756169474e525539516f626c6959

how to work with it and where to put it.

Filter the network requests and look for playlist.m3u8, download it. Open it in notepad and go to the 1080p m3u8 link. Download that m3u8, and open it with notepad. You will see [KEY] and [IV]. Replace that line entirely with what I gave you then do the other step.

By the way, please explain what is this parameter IV=0x6862756169474e525539516f626c6959 and where did you get it I can not find it (on the screen can show )

thank you very much again for giving me so much time!

[2nHxWW6GkN1l916N3ayz8HQoi]

I did it https://disk.yandex.ru/i/pEiE4cKOjOjzSQ

but I had to remove four parts of the video.

I can't logically explain what I did yet, I'll try to sit down after work today to look at some other videos and then I'll report back on what I did.

I don't think you did it. That is the wrong video, and wrong resolution (even the worst one). And having to remove parts of a video is not really a solution...

By the way, please explain what is this parameter IV=0x6862756169474e525539516f626c6959 and where did you get it I can not find it (on the screen can show )

IV means initialization vector. AES-128 Encryption, CBC mode, uses a pair (key, iv) to encrypt* stuff. You can't do anything if you only have one element of that pair. You get that IV value by debugging the javascript code of that page. I'm sure it can be automated if you understand that code but I was lazy so I just extracted it directly.


[Attachment 77073 - Click to enlarge]

[vvv84]

I did it https://disk.yandex.ru/i/pEiE4cKOjOjzSQ

but I had to remove four parts of the video.

I can't logically explain what I did yet, I'll try to sit down after work today to look at some other videos and then I'll report back on what I did.

I don't think you did it. That is the wrong video, and wrong resolution (even the worst one). And having to remove parts of a video is not really a solution...

By the way, please explain what is this parameter IV=0x6862756169474e525539516f626c6959 and where did you get it I can not find it (on the screen can show )

IV means initialization vector. AES-128 Encryption, CBC mode, uses a pair (key, iv) to encrypt* stuff. You can't do anything if you only have one element of that pair. You get that IV value by debugging the javascript code of that page. I'm sure it can be automated if you understand that code but I was lazy so I just extracted it directly.


[Attachment 77073 - Click to enlarge]

Yes, the fact that downloaded with cut fragments is not good I agree, but the point was that remove the fragment about which the script stumbles can download the video, so the problem is exactly in these fragments and there is some other algorithm to apply.

[2nHxWW6GkN1l916N3ayz8HQoi]

Yes, the fact that downloaded with cut fragments is not good I agree, but the point was that remove the fragment about which the script stumbles can download the video, so the problem is exactly in these fragments and there is some other algorithm to apply.

Did you follow the steps I provided for that original video of yours? The key iv pair will only work for that one. If you say you can see the full 1080p video, it's good to try. I mean this one https://play.boomstream.net/51SDXTqg

[vvv84]

the script stumbles at frame 25.

and the video in good resolution at 25 frames also stopped and won't load any further

what else can I do?


[Attachment 77075 - Click to enlarge]

[2nHxWW6GkN1l916N3ayz8HQoi]

the script stumbles at frame 25.

and the video in good resolution at 25 frames also stopped and won't load any further

what else can I do?

Then I'm afraid that's it. Authenticated or not, I can't watch the full video so I can't assist you further. Also m10 is for 720p I think. m4 in url is for highest.

[vvv84]

Eureka!!!!

on the original video on the site where I am authorised from the 25th frame the encryption code changes!!!!

Look how interesting this is.


[Attachment 77076 - Click to enlarge]

[vvv84]

and it is possible to specify a different encryption key for each fragment (for example)-
https://play.boomstream.net/api/process/295f510606070a39271d2f062130161a191b3b2b5e54510a02 3b0054033c565e560654553b0159593b060f00060e59695a09 0568",IV=0x374f42705834664d30644a6e316d5133

[vvv84]

and now I'm running the video again and the keys won't change.
That's very strange......

[2nHxWW6GkN1l916N3ayz8HQoi]

Seems I was mistaken. It can be downloaded but you gotta edit the m3u8 file to replace the broken fragments with working URLs. The /time:VARIABLE/ and /data:VARIABLE/ in the URL can be removed and the URL works for the broken ones.

https://www.transfernow.net/dl/20240217pkKgBuKz