[Release] Widevine L3 Guesser Extension-Works in 2024 Firefox/Chrome All OS

[stacyy]

[Attachment 80059 - Click to enlarge]
While extracting CDM from my Android I am getting this error with KeyDive script, How can I resolve this?

[keep_it_breezy]

[Attachment 80059 - Click to enlarge]
While extracting CDM from my Android I am getting this error with KeyDive script, How can I resolve this?

https://forum.videohelp.com/threads/414789-KeyDive-Beyond-Android-SDK-33
I would ask on this thread here

[TPD94]

[Attachment 80059 - Click to enlarge]
While extracting CDM from my Android I am getting this error with KeyDive script, How can I resolve this?

I swear nobody does research.

Straight from the devs issues page. Install ADB, it’s a prerequisite, ffs.

[Baldrick]

Thread restored. I accidentally deleted it.

[Baldrick]

@LZAA
Logs? Works on my side


[Release]
Just CDRM-Project, But on Videohelp.com :P

=>Here<=

Admins, update Vbulletin and apache!

I will probably never upgrade this old forum. But I'm trying to fix old xss bugs.

That input should be fixed now. And some more inputs.

[FoxRefire]

Thread restored. I accidentally deleted it.

Thanks
Anyway, is it possible to delete only the top Poll there?
I added it by mistake and I would like to get rid of it if it possible.

EDIT: and thanks for fixing vulnerability

[Baldrick]

Thread restored. I accidentally deleted it.

Thanks
Anyway, is it possible to delete only the top Poll there?
I added it by mistake and I would like to get rid of it if it possible.

EDIT: and thanks for fixing vulnerability

Try click on the edit-image on the poll, https://forum.videohelp.com/poll.php?do=polledit&pollid=9686

[FoxRefire]

Thread restored. I accidentally deleted it.

Thanks
Anyway, is it possible to delete only the top Poll there?
I added it by mistake and I would like to get rid of it if it possible.

EDIT: and thanks for fixing vulnerability

Try click on the edit-image on the poll, https://forum.videohelp.com/poll.php?do=polledit&pollid=9686

Thank you. However, I cannot find the edit icon in the poll.
That link had no permission and could not be edited.

[Attachment 80085 - Click to enlarge]

[Baldrick]

I manually deleted the poll from the admin forum control panel.

And this is a sticky thread now.

[FoxRefire]

@Baldrick
Thanks.

[FoxRefire]

Scam Alert


A new Telly has appeared.
Do NOT buying DRM-Help's extension.
They claim to be using Chrome 2710 CDM for their backend API, however it is actually Android Emu L3.
Here is the proof. I actually contacted the scammer and requested a demonstration and obtained it from there.

https://bin.disroot.org/?0b2adb5d9149dae4#H89u4R21Qq3bjXJM1VahetXC43qCC3qGF5kuEPou1iGh
Dumped challenge

https://bin.disroot.org/?fb5a81e7177b7dd9=#DhSaVTBRRmCjnYqG35Yx5Gu5W568HLeoyAcWdPw1jNHG
Widevine Integration platform Diagnostic response


You really should stop using of any ChromeCDM extension variants or unofficial builds of WVG.


Scammer's links
To prevent accidental access, URLs are Base64 encoded.
Never buy anything from here.

aHR0cHM6Ly9kcm1oZWxwLmNvbS8K
Website

aHR0cHM6Ly90Lm1lL2RybXNjcmlwdHNvZmZpY2lhbAo=
Telegram link

aHR0cHM6Ly9maWxlcy52aWRlb2hlbHAuY29tL3UvMzA5ODE3L0 Nocm9tZUNETS0yNzEwLXYxJTI4VEhJUyUyMElTJTIwU0NBTSUy OS56aXAK
Extension link(Do not use it!)

[ddll]

Will Vdocipher work or not?

[A_n_g_e_l_a]

Scam Alert


A new Telly has appeared.
Do NOT buying DRM-Help's extension.
They claim to be using Chrome 2710 CDM for their backend API, however it is actually Android Emu L3.
Here is the proof. I actually contacted the scammer and requested a demonstration and obtained it from there.

Looks like it could be a chrome CDM to me. Although I never seen one. Straight Widevine L3 does not use VMP (Verified Media Path) although Chrome does. (That's why Chrome CDM's will give higher resolutions). If you shove both bits of base64 data in to a decoder VMPData has this

 ä123.0.6312.123\chrome.dll

And the byte data in the other message is

&application_namecom.android.chrome*origin 43B49EC76BD8CE8B62280CBAF31B602ENpackage_certificate_hash_bytes,8P1sW0EPJcslw7UzRsiXL64w+O50Ed+RBICtay1g24M=company_nameGooglemodel_namesdk_gphone_x86_64architecture_namex86_64device_nameemu64xa!product_namesdk_gphone_x86_64]build_infoOgoogle/sdk_gphone_x86_64/emu64xa:13/TE1A.220922.034/10940250:userdebug/dev-keyswidevine_cdm_version17.0.0$oem_crypto_security_patch_level0Joem_crypto_build_information*OEMCrypto Level3 Code May 20 2022 21:36:442

And

UGoogle10UWidevine10Uwidevine-vmp-codesign

But even so people don't waste your money.

[Obo]

No, it's an Android SDK CDM. Pywidevine is able to decode to License Request and clearly shows that. But yes, it has VMP data in it.

  client_info {
    name: "application_name"
    value: "com.android.chrome"
  }
  client_info {
    name: "origin"
    value: "43B49EC76BD8CE8B62280CBAF31B602E"
  }
  client_info {
    name: "package_certificate_hash_bytes"
    value: "8P1sW0EPJcslw7UzRsiXL64w+O50Ed+RBICtay1g24M="
  }
  client_info {
    name: "company_name"
    value: "Google"
  }
  client_info {
    name: "model_name"
    value: "sdk_gphone_x86_64"
  }
  client_info {
    name: "architecture_name"
    value: "x86_64"
  }
  client_info {
    name: "device_name"
    value: "emu64xa"
  }
  client_info {
    name: "product_name"
    value: "sdk_gphone_x86_64"
  }
  client_info {
    name: "build_info"
    value: "google/sdk_gphone_x86_64/emu64xa:13/TE1A.220922.034/10940250:userdebug/dev-keys"
  }
  client_info {
    name: "widevine_cdm_version"
    value: "17.0.0"
  }
  client_info {
    name: "oem_crypto_security_patch_level"
    value: "0"
  }
  client_info {
    name: "oem_crypto_build_information"
    value: "OEMCrypto Level3 Code May 20 2022 21:36:44"
  }
  client_capabilities {
    client_token: true
    session_token: true
    max_hdcp_version: HDCP_NONE
    oem_crypto_api_version: 17
    anti_rollback_usage_table: false
    can_update_srm: false
    supported_certificate_key_type: RSA_2048
    analog_output_capabilities: ANALOG_OUTPUT_NONE
    can_disable_analog_output: false
    resource_rating_tier: 1
  }

[A_n_g_e_l_a]

No, it's an Android SDK CDM. Pywidevine is able to decode to License Request and clearly shows that. But yes, it has VMP data in it.

And the reference to chrome.dll? On Windows that is chrome.dynamic.linked.library. Never seen that in in any widevine exchange I've ever done.
The source for the CDM is surely an emulator, I agree - but that still doesn't prevent it being a chrome device. It has to be liberated from something - why not an emulator?

And Widevine L3 does not use VMP - it simply doesn't - with no verified media path it is supposedly relegated to SD quality only. Chrome does use VMP and gets HD quality as a consequence although an L3 device.

[FoxRefire]

This is just a messily attached VMPData to the challenge, and such a lousy implementation will not work on many sites.

Also, why are there a few people here and there confusing the Verified media path with the completely completely unrelated VSO Media Player?

VMP is to prevent untrusted software from calling CDM binaries. This forces users to use Windows chrome on a very small percentage of garbage sites.

VMP is not enforced in Linux environments and non-Chrome, but you can watch correctly for services such as Website A and Website N.

Linux Firefox
https://bin.disroot.org/?d9d6fb373db037fb#GXLMdHp5YkNNixfBbtxNa8Ta5WynEkB3CGoW2T71yVHs

Windows Librewolf
https://bin.disroot.org/?68d46853d7a0f7e8#AFZYkrEFZQnpbfxjjhQG1mibSSScbrvzCcNLZymMzZKp

Many people have illusions about VMP, but as far as I know this is largely irrelevant for most sites.

When you develop your own browser, you can pay Big Brother 5000 bucks to have your own browser enforced on this ridiculous VMP.

[A_n_g_e_l_a]

This is just a messily attached VMPData to the challenge, and such a lousy implementation will not work on many sites.

Also, why are there a few people here and there confusing the Verified media path with the completely completely unrelated VSO Media Player?

Talk to Hairless_Richard - the site parses messages and each time you mention a keyword like ffmpeg or VMP it gets linked to the site software repo. It has happened to you too!!

I remain unconvinced. Walks like a duck, talks like a duck... "and such a lousy implementation will not work on many sites." so you say.

Certainly wouldn't buy it but interesting that it exists.

[Obo]

Reply to #555:
Agreed. Although I've yet to come across a service that will profit from such a CDM.

[A_n_g_e_l_a]

Many people have illusions about VMP, but as far as I know this is largely irrelevant for most sites.

Well that's not right is it? AMZN, for example, only gives SD to L3 widevine but HD to Chrome - simply because wth V M P it is regarded as more secure.

[FoxRefire]

This is just a messily attached VMPData to the challenge, and such a lousy implementation will not work on many sites.

Also, why are there a few people here and there confusing the Verified media path with the completely completely unrelated VSO Media Player?

Talk to Hairless_Richard - the site parses messages and each time you mention a keyword like ffmpeg or VMP it gets linked to the site software repo. It has happened to you too!!

I remain unconvinced. Walks like a duck, talks like a duck... "and such a lousy implementation will not work on many sites." so you say.

Certainly wouldn't buy it but interesting that it exists.

Oh, I see. I think such implementation should be dropped as it will only create confusion.

Perhaps it worked by doing this on some vulnerable sites.
However, something like this will soon be counteracted and will simply become unusable.
It is relatively easy to add arbitrary data to the Client info of a CDM keypair by modifying the SignedMessage.

Well that's not right is it? AMZN, for example, only gives SD to L3 widevine but HD to Chrome - simply because wth V M P it is regarded as more secure.

As you can see from the previous reply, VMP is not enforced in Linux environments and non-Chrome browsers, but HD is available on Website A.

This is because the decision to return an HD license is not based on whether or not it is a VMP, but rather on the security level and platform (Chrome or Android).
Try copying the challenge (license request) in Base64 format in a browser other than Chrome and pasting it into WIP Diagnostics.
Alternatively, you can manually parse the SignedMessage to verify the contents of the challenge.

[A_n_g_e_l_a]

...snipped waffle

Is it chrome or isn't it?

[FoxRefire]

The same CDM binary is used for both Chrome and FF.
CDM binaries are automatically downloaded in common from the following URL when the user enables DRM.
https://dl.google.com/widevine-cdm/{version}-{win|mac|linux}-{x64|ia32|arm64}.zip
Versions: https://dl.google.com/widevine-cdm/versions.txt

[A_n_g_e_l_a]

... snipped irrelevance

It has VMPData. It appears to use a chrome.dll. Is it Chrome or isn't?

[FoxRefire]

What does "it" refer to?

If you are referring to the challenge generated by the DRMHelp backend API, it just simply changing the SignedMessage in the Android L3 CDM's client info and forcing it to be embedded.

It may work on some vulnerable sites that does not check the integrity of VMPData properly, but this will only be just fixed soon.

[A_n_g_e_l_a]

snipped more waffle.

Oh come on, babe! You know!
You told everyone 'IT' wasn't a chrome cdm but a Widevine L3 and the seller was a scammer for deceiving people. (But. Yeah, he probably is anyway)

I see what you are up to. It must be hard for you to admit you've made a mistake. But now we have your measure, it doesn't matter. It's just if you puff yourself up like a balloon, sometime or another, you'll likely feel a little prick.
Never mind Babe, probably you'll grow out of it.
Best not go willy-waving in other people's threads though, there's a good boy.

[FoxRefire]

snipped more waffle.

Oh come on, babe! You know!
You told everyone 'IT' wasn't a chrome cdm but a Widevine L3 and the seller was a scammer for deceiving people. (But. Yeah, he probably is anyway)

I see what you are up to. It must be hard for you to admit you've made a mistake. But now we have your measure, it doesn't matter. It's just if you puff yourself up like a balloon, sometime or another, you'll likely feel a little prick.
Never mind Babe, probably you'll grow out of it.
Best not go willy-waving in other people's threads though, there's a good boy.

??
It is simply like this.
In this way, VMPData is forced to be embedded in Android L3 CDM's ClientInfo.
Just prepare client_id.bin and try it.

[A_n_g_e_l_a]

snipped

Oh babe! Is it chrome or isn't it?

[-xigncode-]

wont work i get this error n0suchd3v1c3f113:r3adth3fuck1ngma2ua1

[MPD?]
https://github.com/FoxRefire/wvg?tab=readme-ov-file#instalation

[LittleSoldier]

wont work i get this error n0suchd3v1c3f113:r3adth3fuck1ngma2ua1

[MPD?]
https://github.com/FoxRefire/wvg?tab=readme-ov-file#instalation

Place CDM FILES in the root directory of the extension



Read the manual: https://github.com/FoxRefire/wvg/wiki/Getting-started#pre-setup

[-xigncode-]

do i need a android device?