Hi all,
this is WidevineFetch, a program that just requires a 'Copy as fetch' input (and an L3 CDM of course) and nothing else.
What it does:
The program will parse the given input, and extract the Request URL, headers and body.
It will locate the license request inside of the JSON (if it's not just bytes), extract the PSSH, generate a new license from that PSSH and replace it.
It will also extract the license from the response, if JSON.
The PSSH has to be entered manually if the service doesn't send the license request (just the first request) when blocking the URL (can be seen on the last service in the demo video).
A demo video is available here (or just on the GitHub page, as well as installation and usage instructions).
Finally, no more custom scripts (mostly).
Hope you like it.
Try StreamFab Downloader and download from Netflix, Amazon, Youtube! Or Try DVDFab and copy Blu-rays!
Try StreamFab Downloader and download streaming video from Youtube, Netflix, Amazon! Download free trial.
+ Reply to Thread
Results 1 to 30 of 240
Thread
-
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
-
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
-
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
-
-
thank you for this new guesser, but i've put my cdm on cdm folder but the guesser can't find cdm ...
what's wrong ?Last edited by whs912km; 1st Aug 2024 at 16:15.
-
That's such a PyCharm issue. I had my 'cdm' folder in the same dir as the python file, but then decided to move all of it to a separate folder as there were some other files inside the project directory (except the 'cdm' folder). The problem is, PyCharm just silently refactored the code without me knowing.
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2 -
That has been fixed, see the updated file on GitHub.
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2 -
another wonderful guesser, very easy to use. a big thank you @larley for this new tool
-
@larley
I've tried several sites and they all work perfectly, but I found one that crashes because it doesn't detect pssh, and a site with no login do you want to check it? -
The funny thing is that I just updated the script to fix that exact problem, so try again with the updated version (this was changed).
But I'd still like to know what that site is...Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2 -
-
The Challenge sent by that service can't be parsed as a SignedMessage for some reason (will investigate).
I've pushed an update out so that the .ParseFromString() function is also inside of a try/catch block. It works now by specifying the PSSH manually, but again, this shouldn't happen (parsing the Challenge logged by EME works of course).Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2 -
yes I confirm you, I just used your latest release and it asks me for the manual pssh I enter it and it works. I wanted to edit it and do the exact same thing, what can I say you did an excellent job. You passed as well [Release] Widevine L3 Guesser Extension you eliminated so all the patterns to run
-
Thanks for the feedback!
The Challenge from the EME Logger contains 'conax.com' in the providerId field, whcih redirects to Nagra Kudelski, so this is gonna get interesting...Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2 -
signed_message.ParseFromString(message)
google.protobuf.message.DecodeError: Error parsing message
There is a message error -
That has already been fixed, so the program won't crash (so get the lastest version). It shouldn't though, send your input fetch.
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2 -
The script has been updated, so you don't have to paste anything anymore, just click process. This also lead to Discovery+ and Zee5 (and surely many others) working, as the QTextEdit box wasn't taking non-breaking spaces (0xa0).
The TextEdit box is now locked, so you can't edit its text and the font has been set to a monospaced font, so the keys will be displayed currectly with the new window start-size.
Be sure to also install the updated requirements.txt file, as it was changed too.
[Attachment 81152 - Click to enlarge]Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2 -
[Attachment 81154 - Click to enlarge]
[Attachment 81155 - Click to enlarge]
I'm getting cdm error
await fetch("https://widevine.tvplus.com.tr:8063/?deviceId=NzM0NzNhNDktYTA3YS0zMjc1LWFhMzYtZDAzOWVi ODM1Zjdl", {
"credentials": "omit",
"headers": {
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0",
"Accept": "*/*",
"Accept-Language": "tr-TR,tr;q=0.8,en-US;q=0.5,en;q=0.3",
"Sec-Fetch-Dest": "empty",
"Sec-Fetch-Mode": "cors",
"Sec-Fetch-Site": "same-site",
"Priority": "u=4"
},
"referrer": "https://tvplus.com.tr/",
"body": "\b\u0001\u0012,\u0012h\nf\nP\b\u0001\u0012\u0010 \b^rݏl\\a\u0007EZf\u001a#https://widevine.tvplus.com.tr:8063\"\u000er=54828&s=1070* \u0005SD_HD\u0010\u0001\u001a\u0010\u000e7,@2 _\u0005\u0018\u0001 Ķ\u00060\u00168vB+\n\u0014license.widevine. com\u0012\u0010\u0017\u0005\u0017\u0012\u0004\ u00063:/w*\u001a(ʢY C)ɖ@м;z%4}1c_˸0f\u0004\nk q\u001d\u0015v\u0006ܟ,E\u001f0Pb֩F\u001d a\u0001\u000e\u0011R5\u0006P<o%Y7\u001e7 +%\u001c67Cp\u001b\u001eqz\u0004R \u0004`+rR\u00007R\u0005\u0010{ N\u0006\u000bBfL=\u00140⪶1u>e3N# \u000e0b\u001eʷ\u0002(9R\u0013MSy\r\u00 0e\u001c/Pe';{S857NJBj)#|xAkihκ/Til\u0016e\u001a]et^*D$P+t?D嘧S\u000e1\\\u0 01e@\r7O\u0016\r#;A*ޮ\u001a֏v\u0011f\u0017 n\tC礏\u0007:%BJ7\u0019Cc\tY4ut~\ u0003\u0010*\u0000N{rp|NJ]\u0013.\u001e|e&0\u0014~7B\u0002\u0002 t;[\u001869ˢf\u0015n(E~v\u001a\u000 3PE\u0013\u0019eO|}\u000fv\"\u0016 \r\n֗]2+@t9/?z|L\u00166\u0000\u0017rV~s\u0006MM ۘ\u000bYS1+;`H\u000eV\u0004ʇF\u0019CLT* \u0011w\u001da\"TJ\u0011-Ĉ-\u0007\u0001_p.H\u0011\nI\\@\u0002s\u00 03\u0013uHKJSҵZ\f}؋a.ŕ\u0013/~d3ͦH^\u001e@bO#[&oLy\u0004\rZQQ,dR&\u001bUJWH\u00 11&֛7\u0001D]\u000beYj0P\u001e\u0017ܞ*C;\u000bg \b6\u0017tb\nF&E+UpB1LV\fv3o\u0018 \u0011):<;\rܛq !Q\u000b6\u001fOB^\f\td\"\u0003\ u0002m\\2X&x|\"-!S\u000bոf$e\u000e]QF:dh%YhR\u001c\u0001qh$gv\u0015Ɲ} \u0002WWPOV\t[\u000eo$ψH\u001bB*om{KЧ.˘~/\u0014i\t\u001f\u000f\u0011Op)[*Ao-48fg`\u001fY\t0\bI,n__\u0014=`Z\u001 7#Tƿ\u0017l*I6AsΜ\u001d<\u0018\u0002 *ϊ/Af\u0013'D%ZL,q\u0003f!p\u001b[\u0007f*:\u0016%R(bG\u000bm\u001 c\u000f\u001c5\t*Sԝ\u001b\u001d?ݸ \rv8\u0013Xp\u0003BS۩Dו\"\u0014!\u00 0e\ri\u0012\u0012\u0007уFde2\u0015\u 001dhxbKH\u0014R)kQ\f)Ѝh\u001f)$(BJ sQh\\׆\u00001*\u0005D\u001dCf!N^7\b A\u0006!Eݹ#\fy-êA&0iψIжܞpQP\u0004N\u001eȕm%\u0000R\u 000b3/s\u0006;ui{\u001c-b(\u0018~U{lmw`pCd L\r-\u0011*\u001a\u0003w_\u001aJ@*\u00038 _XxP\u0019)[t{ <Ytf6RT%W\u001bs\u0013\u0012\u0003]Jͪ(i(Q1w*\u0003ms:\u000e:uĽB I*g8G:(S4nm?;\u001e9\u0003\tY\u001d \u0006\f\u0015n-PZ\f?nȣ\u0007m\u0003B\u0010\u00065{*V \tVI\u0016ipVQ*DdQFs\rөI\u001ae Cq]S\u001e%2\u0017gE{ȶr~~a嘧@ή\u001fvç\u0 018\u001bL[Vn\u000fA>4R*\u001d}L$Z\u001d,GqX\ u001f>/Q!M\u0005\u001cnt6^q\u0003\u000f&e:y ?\u0000NǢ\u0001Adg<\u0014\u0016\u001eJ=pF& A}I\u001c'w\u0004,\u001a\\0:\u00040LJ< S=-$`qk!\u0000}pH\u000ftXpSВ\u000b*\t v\u001aVtrXބOxͼf\u0012sݞ\u0019 EٖV\u000bz\u0017\u0007$\u0017Gr##\u000f\ u0019<\u000br\u0002yI+I*?L#E`\f\tNɗc' `:Bf\u0005SFԶjNjZThվ\u0016y@~*\u00 19t\u00156?ic,o\u0004:Lt\\v啋\u0003\ u0006Ib-\u000e{?\u001f1c?\t8DJ¿Jr14\u00 01o)䀰1:Z!`~s\nW0ggo0\u0003m ͨ<H*#΅85\\6~\u000b\f3f\u0018X̂% JFӖ*ޤ\u000f#Y5x/44'Ptr\u00000\u0016u\u001cutncU\u0 01b\u001dL\u000e\u0010Cϧ\u0000\u0000#>:_VdO \u001e\u0004s&ᑝ&7\u0016o\u0007\u001a ҫI1IݙN\u0014Ƽ+?^F,\u0005\u0011 \f8>D^\u001dg\u0016eke\u001a!\u0016\\t 97\u0004\u000bKv/\u001aoz0&16\u0014hD\u001e*=v瘦i\u000 0UV*ij~y-\u0000ć)E;v#P,\tR\u0012t^Ѥqc\u001b* :\u0012\n#6*pZLLvƟZǒRBy\u0019q\u 0007\u001eؼ~\u0010ՂRn,\u0012\u0015\u000f #\u000fsAN6=&\b\f\u0015E3C\rdٷ\u00 0b\fcQQEU\u0019)֞fa\u0006pTN\u00 1d*2Ë`Q\u00106Ha<}\u001dĚDTH \r5oRB\u0016\nt<\u001f~>NڻB\u0003,\ u0001F^aN+2ul5A}U2QK^\u0006\u001d\u001e =戨,6HaY7\r G\u000e\u000e-I\u0011詴i^\u001dW\u0010]0^}OU~/QK'nb.WpQ\u0005E鷯*$#[H\u0018\u0017Lxe$p2vN(\fU3e=C\ f\b{[{1\u0002ՋX\u0000+*|*n<ܣYu)>\ n\u0011\u0001\u0019amO0>\u0015v \u0007XjY4*t\u001dk\u001bo\bQ411\u001 a{@?e.\u000eSk1\u0007d;5ͥ+Q\u0011s\u 0011\u0016\u0007륾#&DF9tU,.q~) %,ᱟm\f[u&t!\u0018|Kd%C֛&\u001aKKoPENQLvb j\u0016<{y\u0019/Rl1b%<7>TKNZ#'5h\u0019P\f\u0003m\u000 5E\u00196\u001a#ܮ*\r)IC\f{zE\u0005ޱ\u00 11\\5o6u\u0013e\u00033FOԶ\u0011%\u0003 >iyE9Gf^*\b<\"vx\u001e;i\n\b\u 0001F3\u0004\u0002_*ή\\\bF1\tX%vLqp Id%Pa\u0001R»O})*Jw\u0013u5'!(V\u00 1d\u0005\u000bnO\u001ayUwj\u0015*o{`I\u 0007SI\f\r\nJx\u0005AFJ\"oaFדEεſ\u 0006xzE`M\t-E\u0012}\u0001\u0017\b\u0011z3f\u0004 p}LiΟKPt\u0015]\tC1T0rʔ\"r5\u0002\u000f!q2LMʀC\r[dI\u0019ӗE\u0018$o\u001d(uH*w8!Ϙm\u001aB =SMےiMP5\fJU\u001d*G\t?ĖБ RA\r,$m::\u0001(S҆ϙYc\u001fw\u001d#l #\u0006'\u0004.'AT*D\u000b\ \+ȡ<h3\u001d\u001e*2.89^wu$\u0000\tHc \u0014\u0019ȼ\r&PDȼPwi0\n*\u000b j[!|JcquD\u000exƅ*cߑQ\u001e=3\u0006 ܌AVw}VP6\u0014\u000f\bͷ(/egYf07!4i\u0019*\u0010s,g%W\f5*v8,\u 0010n6\u0007ka\u0015k\u00120$\u001a sO\u0010R\u0015}h2\u000f3OM]JOaR)\\@)vf|.y6&Kx\u0005u\u0005]`P=\u001b\r\u0019W:i.\u0013\u001f9SهS\ u000e'\u000b^A>P,S[-#1o\u0017]W6t(oYTE\u0004ǔa:YR\u0019{\u0011\"K(z\u001 c\u0002g:**T!\u00121\u0017pI\\Y_\u0 00fRC@:Cs\u0018kG(F~\u0014C8.\u000 4qdj\u001c?'KxA\u001c:.\u0003f _L\n\u00147d\u0006\t$9i0iXd S\u001fTH\u0001\u000fp«9T\u0002ƴ1**J L\u00142\u001bK\"n+/fu\u0005^O\u0002y8\u001b71$*Uac\u001a 08\u000f'AO'\u001f\u001b59WN{ljS v@OԹ\u001c<LIP\u0012_Wf0[\u0013pcMh2gX㔮i_b?}\u001fR#\u0014\f\u00 03\u001e{*(b'\u0018W\u000eVE`\u001bI?| __Sg&8\n72voKVan*[!\u0011B?J\u0011{7'f*d\u0003g\u0010\u001 eq\u0003\u0016/}1\u0014+eJ>ꤣ*T\u001d%c҄Td\u0006 |)jsz9\u0007J'L\u001f'K\u00 1b_)\u0018`C`q%1iZ\\#a\u0011oe rO`\u0007Rt;:n\u001a=t\u0019hKf8\u0 015c*kڗL/[J\u0012\u0013cU0<Xԛ\f)<{\u0000\u001f\ u000f^Q}\u0004}E6>w\u00179NKo'sO \u00123\u0010?c;\u0019&H,\t3'GL O:EUw\u001f}Վ\u0012\u001c8i\u0003\"s#5ʨ 2\u001bM!\u001bA%4cvJ\tf9Pb\b\u000 3\\\u0005\u0012x=\u001ff0d\u0019 E˺,\u0013߃w_Ƽ\u0007N~u?~£8x}{ \u001da{w{\u001e!\u0011@,\t?SJ`\u0001\u 001e\u001b:9W/XqTal݆)\u0002\u00131E\u001f/I0\u0004^Y,\u000e]X\u0003s\u0005LJ\u0014k[SعB1FԆXPFK\u0005\u0014\fl\u0005x}7k\u00 17,E\u001d+az2wq\u0000F`A\u0002>Ė\r ^4!YFCzG\u001fb\u0018\u001c%ř gnj<9-\u0000\\pGg{8xL`я@\u0019\\4/R}.:JkPjU\u001e_Ɵy;:m\u0014%.P\u 000bh*Raٸ\u0003\u0017w(F~\u0011ӄS$8#j|\ u0013\u0001\u0013gF\u0001z\u0003z\u0005H\u001b (A,e\u001bťb5m+]:ɗ\u0003!Ae3\u0006\n\u001a*\u000b'\u 0002*5^\u001d\fKgix팯3y\u001d\u0001\u0011\u 0010\u001ch\u001en\"&\u0000\u0018J%i\u00 1a@\u0019u~+\u0014Ɔk)\u001bǤ\u000f#} vy\u0005\u001evP\u0016\nUC!SF/#O2Ayܞ**959|ήЌ忓s9s/ދ8|\u00011\u0006\u00024\u0017W\u000b\ u001cw<0\f\\\u0011\bWz\n\u001aV^TD\u00 0b\u001bԟ\u0015\u0013\u0016ľ\u0012mJWHb \u0001gTC2`s\u001f\u0010ݱ0% w`/$9\u0007\u0014}fZ>uV!Ծ$ݷ\u0019ڷ+s v&7ֶԞ\u001ew+]Ր5FUNur!8n>$Gt\u0018uBl\"\ u0010͂Ŋf\u0003\u0006*\u0002iVM#l0` N\u001e\u0000 /w\u00126I߬;~\"B\nXiA*N1@TY\u001bGR\ u001e\u0011a\u001d\u0019V\u0011l_kf3jX$Ҝ8Ra \u0004\u0012si\u0011V\u001e0݀ad:j\f2fL \u0012\u001e*\u0000.s\b#5\u001d +&m\u0014'Mʔfgc%\bdLC\u0005zo.l} t\u001c\u001dW}&\u0002s-a6v\u0005\u0018<x罹*&e%\u001eT-\u001b҅@ӌ\u0015V&0p[\".34\u000f%\bJ\u000b4.10.2710.0\u001a\u00 01\u001b\u0017\u0016O'\fk*uxfP*72аVJ y7\u001eb8\u0013C'J\u001a]~\u0006\u001el\u0012\u0015v%\u0002R\u00 00M2\u0018J\u001eބR\u0003\u0006u\u000 7u֟\u000eF-\f\\9kP%Io2\u0014J\u0014\u0000\u0000 \u0000\u0001\u0000\u0000\u0000\u0014\u0000\u0005\u 0000\u0010\u000eѝrU",
"method": "POST",
"mode": "cors"
});Last edited by MastersTR; 3rd Aug 2024 at 07:21.
-
Yep, that fixed it for me as well when using brave browser. But as you wrote, it's probably independent of the site, but rather dependent on the payload, if the culprit was breaking spaces. I guess it took some brain work to find the issue - nice find!
-
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
-
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
-
Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
Similar Threads
-
Need help with lic.drmtoday.com license server
By TheGreatUnknown90 in forum Video Streaming DownloadingReplies: 51Last Post: 20th May 2024, 14:33 -
help with new license server for get decryption keys. (i have cdm keys)
By savi4u in forum Video Streaming DownloadingReplies: 11Last Post: 11th May 2024, 03:30 -
Same PSSH, different license gives differnet keys?
By Devilman in forum Video Streaming DownloadingReplies: 8Last Post: 15th Jul 2023, 09:03 -
can somebody help me with lic url?
By dkdb in forum Video Streaming DownloadingReplies: 0Last Post: 18th Dec 2021, 23:37 -
How to obtain mpd url and license url
By pepperx in forum Newbie / General discussionsReplies: 0Last Post: 1st Oct 2021, 16:05