[release] AllHellGui

[Axymeus]

I have a video that is protected by cenc but allhell is giving me a 400 bad request error. I might be doing something wrong, but I'm also not sure my video is supported? This is what the encryption looks like in the manifest. There are no mentions of widevine, and the licence server has clearkey in its url. The two seems pretty similar, is there any chance it could work?

<ContentProtection schemeIdUri="urn:mpeg:dash:mp4protection:2011" value="cenc" cenc:default_KID="5D2B6D8F-8D85-390F-9892-106A61EC75B0" />
      <ContentProtection schemeIdUri="urn:uuid:1077efec-c0b2-4d02-ace3-3c1e52e2fb4b">
        <cenc:pssh>{edited for simplicity}</cenc:pssh>
      </ContentProtection>
      <ContentProtection schemeIdUri="urn:uuid:9a04f079-9840-4286-ab92-e65be0885f95">
        <cenc:pssh>{edited for simplicity}</cenc:pssh>
      </ContentProtection>
      <ContentProtection schemeIdUri="urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed">
        <cenc:pssh>{edited for simplicity}</cenc:pssh>
      </ContentProtection>

[Obo]

There IS actually a mention of widevine here: "urn:uuid:edef8ba9-79d6-4ace-a3c8-27dcd51d21ed" - this uuid identifies a widevine pssh.

[Axymeus]

Ah, nevermind, it seems the response from the license server has an additional layer of encryption. It does return a json that looks like proper clearkey stuff, but the values are further hashed. It looks similar to this old thread, which is actually not solved https://forum.videohelp.com/threads/405098-%5BSolved%5D-How-to-decrypt-the-clearkey

So I won't be able to decrypt that anytime soon sadly… Anyway, the request error is still relevant to this thread perhaps?

[larley]

You would be able to download your video if you just posted the response here (and maybe mention the site if it's a free one because it might require debugging of the player to locate the decoding function)

[Axymeus]

You would be able to download your video if you just posted the response here (and maybe mention the site if it's a free one because it might require debugging of the player to locate the decoding function)

Sorry, I didn't want to derail the thread too much. I'll follow through in the other thread.

[2nHxWW6GkN1l916N3ayz8HQoi]

Great tool @angela. Would it be possible to extend the input to m3u8 as well? For example
https://www.nba.com/watch/video/game-recap-lakers-120-timberwolves-109

Uses widevine and m3u8. The pssh can be found near the string base64 in one of the m3u8s. Or if parsing the m3u8 is inconvenient, maybe yt-dlp and first fragment init may work?

[larley]

There's an 'm3u8' python module, which makes parsing really easy. Just make sure to also check the EXT-X-MAP tag for init files

[2nHxWW6GkN1l916N3ayz8HQoi]

There's an 'm3u8' python module, which makes parsing really easy. Just make sure to also check the EXT-X-MAP tag for init files

Oh I know how to implement it myself. This was more of a suggestion for @angela in case she wants to make the hell tool even more generic. Since widevine isn't really tied to mpd only. Good part of sites use m3u8 as well. If not, then oh well. Not the end of the world

[A_n_g_e_l_a]

Oh I know how to implement it myself. This was more of a suggestion for @angela in case she wants to make the hell tool even more generic. Since widevine isn't really tied to mpd only. Good part of sites use m3u8 as well. If not, then oh well. Not the end of the world

I can see your logic. But it is an m3u8. This method of using Widevine encryption with an m3u8 is a bit of an outlier. And, so as not to confuse the punters, I feel this site would be best having its own down-loader so as to leave AllHell3s to deal with mpd that follow Widevine's specification. . If more sites spring up using this hybrid I may reconsider,, but for now I know you're fully able to code this yourself.

[2nHxWW6GkN1l916N3ayz8HQoi]

If more sites spring up using this hybrid I may reconsider

Uh, sure ok, why not. Here are some other sites that caught my eye. I'm sure I missed some of them.
-> https://www.adultswim.com/videos/apollo-gauntlet/eros
This one needs a US IP. It's easily viewed with any random browser proxy addons that let you pick USA. You can use it just to check that it indeed uses widevine and m3u8.
-> https://tubitv.com/movies/100007598/firefighter
Same thing with US IP and browser addon.
-> https://veeps.com/artistfriendly/6da4a3b9-6f05-400b-a1f2-16209bc70a6c
This one needs a free account. It can be made with any random fake temp email.
-> https://v.youku.com/v_show/id_XNjQyNjY4MTEzNg==.html
-> https://online.familyclub.jp/s/jno/page/live_player_test
-> some guy posted a m3u8 here from who knows what site
The m3u8 URL and widevine key can be found in post #4

There's a clear difference between the number of widevine mpd vs widevine m3u8. But they're not exactly as rare as a unicorn.

for now I know you're fully able to code this yourself.

There's already a downloader for nba.com. As for allhell3.py this is a lazy quick edit I came up with. The original

    except ET.ParseError as e:
        print(f"Error parsing MPD content: {e}")
        return None

I changed it to

    except ET.ParseError as e:
        try:
            pssh = get_pssh_from_mpd(mpd_url)  # init.m4f method
            return pssh
        except:
            pass
        print(f"Error parsing MPD content: {e}")
        return None

Basically, if an mpd can't be parsed, just let yt-dlp handle it. Now I know you already made up your mind, but just for the sake of discussion, even those widevine m3u8s have some form of specification. The main/master/playlist/index/etc. m3u8 points to video/audio m3u8s either through absolute or relative URLs.

And those video/audio m3u8s contain the pssh near the string "base64," and they may contain the kid as well, so you could generate pssh from it. So if someone doesn't wanna rely on yt-dlp and init fragment, basic parsing can be achieved.

Just thought it was best to let you know about this type of widevine that's currently overlooked.

[A_n_g_e_l_a]

Just thought it was best to let you know about this type of widevine that's currently overlooked.

Thanks.

My reluctance also stems from the fact I have forsworn the use of VPN after a bad experience whilst living in NZ and needing access to the rest of the World.

But if as you say the init.m4f follows Widevine practice I am happy to update - with the proviso that I'll have made no error checking of any of the sites you mention. If the code fails to find pssh in any init.m4f at least it will still fail gracefully.

[2nHxWW6GkN1l916N3ayz8HQoi]

No problem. Glad to be of help in improving this tool.

My reluctance also stems from the fact I have forsworn the use of VPN after a bad experience whilst living in NZ and needing access to the rest of the World.

I hate VPNs too and I only use free ones and only for site accessing, not downloading. For the sites I mentioned you can even use a random browser addon for proxy. You don't need a good IP to make any requests, just to see what's the m3u8 URL and the right headers. Not even for downloading.

But if as you say the init.m4f follows Widevine practice I am happy to update - with the proviso that I'll have made no error checking of any of the sites you mention. If the code fails to find pssh in any init.m4f at least it will still fail gracefully.

Well that works for veeps, adultswim and youku. But I'm sure there must be some where it fails. Because it definitely fails for mpd as well if you rely only on init fragment. The solution for that would be a basic parsing.

Check if pssh is already in input -> if not find all audio/video m3u8 -> build them accordingly to relative/absolute URL -> iterate over them and search for each one until you find the pssh -> additional if kid is found and pssh not, just generate it

Edit: but even with yt-dlp only and no parsing, it's still good for m3u8 as a last resort

[A_n_g_e_l_a]

I've updated the release to cope as above. see my sig and thanks @ 2nHxWW6GkN1l916N3ayz8HQoi

I'll not mention m3u8 capability anywhere in the documentation as I really don't need a parade of "it dun't work for me with https://pornoweekly.com/mybigpornfest.m3u8?x=geroutofit" from the proles on VH

[A_n_g_e_l_a]

Check if pssh is already in input -> if not find all audio/video m3u8 -> build them accordingly to relative/absolute URL -> iterate over them and search for each one until you find the pssh -> additional if kid is found and pssh not, just generate it

No that is a step too far. m3u8 needs its own universal down-loader. Expecting an mpd down-loader to do it just because an m3u8 happens to be using widevine encryption is something I see as beyond HellYes' remit. I've made the recent change as it seemed churlish not too - but I still feel it doesn't belong.

Edit: Added to my sig to clarify the issue.

[2nHxWW6GkN1l916N3ayz8HQoi]

Nice. Thanks for the update. Apologies if I seemed "pushy". Not my intention and I don't mind if you take the change back if it doesn't belong there. I'll just use it as a custom edit for my own use in that case

[A_n_g_e_l_a]

Nice. Thanks for the update. Apologies if I seemed "pushy". Not my intention and I don't mind if you take the change back if it doesn't belong there. I'll just use it as a custom edit for my own use in that case

No apologies needed @趒馳n啇輊鱚嵼餿; and I need a good shove sometimes!

[Playready Pete]

[Attachment 82211 - Click to enlarge]
"CODEHOUND: Sniffing Out Streams, Hacking the Future"

He never went away, he just moved to another plain.

[A_n_g_e_l_a]

He never went away, he just moved to another plain.

He lived upon the moor..his bed would be the brown heath turf, and his house was out of doors!
Which plain would that be be then? Salisbury Plain, Canterbury Plain or even the Great Plains? ... But I thought he lived in the UK Midlands somewhere.

[Lip]

hello
i can't make allhell3 v6 work on a comcast site. Works well with other sites but still getting the 403 error with Comecast :


Any idea on that ?

[A_n_g_e_l_a]

hello
i can't make allhell3 v6 work on a comcast site. Works well with other sites but still getting the 403 error with Comecast :


Any idea on that ?

A 403 on the license response makes your cURL suspect. Have you actually copied what you thought you copied and is it correct?

[Lip]

i copy the curl {posix} on firefox, just like i do with other sites

[A_n_g_e_l_a]

i copy the curl {posix} on firefox, just like i do with other sites

You've shown me the error message and I've told you the license isn't being accepted. If it is accepted when the browser uses the license there is probably something going on with the transfer of the license data to allhell3. Now, since I cannot see over your shoulder, and also since you've told me absolutely nothing else, just what do you expect from me? If you are going to ask a question it is helpful to think about the information needed to arrive at an answer - and then provide it!

403 errors mean 'Forbidden'. There is a small possibility a one time token is in use on the site. But I'm not familiar with Comcast.

Paste the video link and others may perhaps be willing to help you.

[z1269925944]

I have this error when I click on get keys


[Attachment 81520 - Click to enlarge]

your problem isn't with script itself, nowtv's licenses expired after 5 seconds so you better do it fast
anyway here is you key for now news channel 332

 2e20eb9aafa33ef5a5279c3994812ead:09ab6682efeee58b7c884f03a4915bbc

and channel 331a

 1e580dfa91d834a1b9eae0d39d92d078:3d96297d4cfa9ab2412deb4c2bd7e3fb

[senkron24]

I have this error when I click on get keys


[Attachment 81520 - Click to enlarge]

your problem isn't with script itself, nowtv's licenses expired after 5 seconds so you better do it fast
anyway here is you key for now news channel 332

 2e20eb9aafa33ef5a5279c3994812ead:09ab6682efeee58b7c884f03a4915bbc

and channel 331a

 1e580dfa91d834a1b9eae0d39d92d078:3d96297d4cfa9ab2412deb4c2bd7e3fb

5 seconds mamamia thad realy amazing you must be quick

[z1269925944]

I have this error when I click on get keys


[Attachment 81520 - Click to enlarge]

your problem isn't with script itself, nowtv's licenses expired after 5 seconds so you better do it fast
anyway here is you key for now news channel 332

 2e20eb9aafa33ef5a5279c3994812ead:09ab6682efeee58b7c884f03a4915bbc

and channel 331a

 1e580dfa91d834a1b9eae0d39d92d078:3d96297d4cfa9ab2412deb4c2bd7e3fb

5 seconds mamamia thad realy amazing you must be quick

no,I use fully automated script to do that

[A_n_g_e_l_a]

no,I use fully automated script to do that

And it would be very friendly, and enter into the spirit of this thread, I you could share your nowtv script..

[z1269925944]

no,I use fully automated script to do that

And it would be very friendly, and enter into the spirit of this thread, I you could share your nowtv script..

there is one already in the forum
ps it's not nowtv UK it's now HK

[A_n_g_e_l_a]

no,I use fully automated script to do that

And it would be very friendly, and enter into the spirit of this thread, I you could share your nowtv script..

there is one already in the forum
ps it's not nowtv UK it's now HK

Link? And my error!

[z1269925944]

no,I use fully automated script to do that

And it would be very friendly, and enter into the spirit of this thread, I you could share your nowtv script..

there is one already in the forum
ps it's not nowtv UK it's now HK

Link? And my error!

https://forum.videohelp.com/threads/409782-How-to-get-NOWE-correct-PSSH-and-DRMtoken

[Sistema]

when grabbing the curl URL, what do I need to be copying?


[Attachment 82277 - Click to enlarge]

When I copy as cUrl bash and paste into the cUrl of license URL I get this


[Attachment 82278 - Click to enlarge]


I was (4 weeks ago) able to grab this all manually using the old.cdrmproject.com site with cache unticked...that seems to have gone now?