+ Reply to Thread
Page 1 of 21
1 2 3 11 ... LastLast
Results 1 to 30 of 618

Thread: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrapping

  1. #1

    [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrapping

    WidevineProxy2
    Hi all, this is the release of my newest creation: WidevineProxy2.
    A browser extension for Chrome/Firefox that intercepts challenges/licenses right after/before EME. Its Widevine implementation is completely JavaScript based (huge thanks to node-widevine), easy to use and works almost any browser-based service.
    The text below is a copy of the README from its GitHub repository:

    Demo
    A demo video can be found here

    Features
    + User-friendly / GUI-based
    + Bypasses one-time tokens, hashes and license wrapping
    + JavaScript native Widevine implementation
    + Supports Widevine Device files
    + Manifest V3 compliant

    Widevine Devices

    This addon requires a Widevine Device file to work, which is not provided by this project.
    + Follow this guide if you want to dump your own device.
    + Ready-to-use Widevine Devices can be found here.

    Compatibility
    + Compatible (tested) browsers: Firefox/Chrome on Windows/Linux.
    + Works with any service that accepts challenges from Android devices on the same endpoint.

    Installation
    + Chrome
    ‎1. Download this repository as a ZIP file
    2. Navigate to `chrome://extensions/`
    3. Enable `Developer mode`
    4. Click `Load unpacked` and the select downloaded file

    + Firefox
    + Persistent installation
    1. Download the XPI file from the releases section
    2. Navigate to `about:addons`
    3. Click the settings icon and choose `Install Add-on From File...`
    4. Select the downloaded file

    + Temporary installation
    1. Download this repository as a ZIP file
    2. Navigate to `about:debugging#/runtime/this-firefox`
    3. Click `Load Temporary Add-on...` and select the downloaded file

    Setup
    + Once installed, open the extension, click `Choose File` and select your Widevine Device file.
    + The files are saved in the extension's `chrome.storage.sync` storage and will be synchronized across any browsers into which the user is signed in with their Google account.
    + Due to the sync storage limit of 100KB, the maximum amount of installable of devices at the same time is ~30.
    + Check `Enabled` to activate the message interception and you're done.

    Usage
    All the user has to do is to play a DRM protected video and the decryption keys should appear in the `Keys` group box (if the service is not unsupported, as stated above).
    Keys are saved:
    + Temporarily until the extension is either refreshed manually (if installed temporarily) or a removal of the keys is manually initiated.
    + Permanently in the extension's `chrome.storage.local` storage until manually wiped or exported via the command line.
    Note: The video will not play when the interception is active, as the Widevine CDM library isn't able to decrypt the Android CDM license.
    + Click the `+` button to expand the section to reveal the PSSH and keys.

    Issues
    + DRM playback won't work when the extension is disabled and EME Logger is active. This caused by my fix for dealing with EME Logger interference (solutions are welcome).

    Hope you like it!
    Last edited by larley; 25th Oct 2024 at 14:20.
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  2. #2
    Feels Good Man 2nHxWW6GkN1l916N3ayz8HQoi's Avatar
    Join Date
    Jan 2024
    Location
    Pepe Island
    Posts
    2,099

    Re: [Release] WidevineProxy2 - Bypass Lic. Wrapping, Hashes and one-time-to

    Nice. Would it be possible for a new feature that copies to clipboard a generated N_m3u8DL-RE command? Basically N_m3u8DL-RE "manifest" --key "keys" --save-name "video" and all the rest of the headers. Kinda like what stream detector does. I know I can combine the 2 addons but was wondering if it's possible for an all in one solution.

    Amazing addon
    --[----->+<]>.++++++++++++.---.--------.
    [*drm mass downloader: widefrog*]~~~~~~~~~~~[*how to make your own mass downloader: guide*]
    Quote Quote  

  3. #3

    Re: [Release] WidevineProxy2 - Bypass Lic. Wrapping, Hashes and one-time-to

    (deleted since it's a feature now)
    Last edited by larley; 22nd Jan 2025 at 08:33.
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  4. #4
    Member
    Join Date
    Sep 2020
    Location
    Pakistan
    Posts
    479

    Re: [Release] WidevineProxy2 - Bypass Lic. Wrapping, Hashes and one-time-to

    Good work
    discord=notaghost9997
    Quote Quote  

  5. #5
    Banned
    Join Date
    Jun 2024
    Posts
    43

    Re: [Release] WidevineProxy2 - Bypass Lic. Wrapping, Hashes and one-time-to


    best
    Last edited by ddll; 22nd Oct 2024 at 23:09.
    Quote Quote  

  6. #6
    Member
    Join Date
    Jan 2019
    Posts
    2,761

    Re: [Release] WidevineProxy2 - Bypass Lic. Wrapping, Hashes and one-time-to

    wonderful tool. thanks for share it
    Quote Quote  

  7. #7

    Re: [Release] WidevineProxy2 - Bypass Lic. Wrapping, Hashes and one-time-to

    oooops issue here

    tried your last tool from here https://mediasetinfinity.mediaset.it/movie/thenextthreedays/the-next-three-days_F303277101000102

    but
    1) can't play video with your tool ON. put OFF i can play without problem
    2) i'm stuck here, no key, no play video ... (tried with Brave browser latest stable version)

    Image
    [Attachment 83029 - Click to enlarge]
    Quote Quote  

  8. #8

    Re: [Release] WidevineProxy2 - Bypass Lic. Wrapping, Hashes and one-time-to

    Everything is working as it's supposed to. I should put that into the Usage guide:
    + Videos can't be played when the intercepting is ON, because the WidevineCDM library can't decrypt the license generated by the Android CDM. Sometimes videos are playable, but that's just because the website might try to request the license again and WidevineProxy2 won't intercept it again because the keys were already obtained.
    + The keys are right in front of you, just press the `+` button to expand the section ;D
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  9. #9
    Member
    Join Date
    Jul 2024
    Posts
    68

    Re: [Release] WidevineProxy2 - Bypass Lic. Wrapping, Hashes and one-time-to

    Excellent. Thanks for the share.
    Quote Quote  

  10. #10

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    fantastic work it would be nice if you could also add MPD url/link display
    Quote Quote  

  11. #11

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    That unfortunately not possible, as I don't (or won't soon) have access to the webRequest API (see post #3)
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  12. #12

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    yes, yu're right. all work fine

    Videos can't be played when the intercepting is ON: nice to know

    just press the '+' button to expand the section: also this nice to know. I thought '+' was used to add a link or something else, as generally happens. I thought the key was automatically generated like in widvFetch
    Quote Quote  

  13. #13
    Member LZAA's Avatar
    Join Date
    Dec 2017
    Posts
    1,978

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Installation.

    Code:

    "background": {
    "scripts": ["background.js"],
    "service_worker": "background.js",
    "type": "module"
    },

    Error: ,,The "background.scripts" key cannot be used with manifest_version 3. Use the "background.service_worker" key instead."

    Work code:

    "background": {
    "service_worker": "background.js",
    "type": "module"
    },
    Quote Quote  

  14. #14

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Both are required to allow for Chrome and Firefox support at the same time: `service_worker` is for chrome, and `scripts` is for Firefox, as it doesn't support service workers yet. If you leave out the `scripts` property, you'll get:
    Code:
    Extension is invalid
    Reading manifest: Error processing background: Value must either: contain the required "page" property, contain the required "scripts" property, or not contain an unexpected "type" property
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  15. #15
    Member LZAA's Avatar
    Join Date
    Dec 2017
    Posts
    1,978

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    I edited 'manifest.json' only for 'Chromium' browsers because it gives an error during installation.
    Quote Quote  

  16. #16

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    That's indeed an error but it doesn't stop the extension from working. It's shown under `Errors` but it's actually just a warning.
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  17. #17
    Member
    Join Date
    Oct 2023
    Location
    Afghanistan
    Posts
    262

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Quote Quote  

  18. #18

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  19. #19

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    first of all i would like to thank you for this new tool, i appreciate your work and your efforts for this.

    just one question: why did you make this new tool when there was already have FoxRefire/cdrm guesser that both do the same stuff?
    what's vantage of this latest work?
    mine does not want to be a negative criticism, but just a simple curiosity question
    Quote Quote  

  20. #20

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Some advantages:
    + Works on any site, regardless of the challenge encryption on the API endpoint (if the API accepts android challenges), so even Peacock, Vodafone TV, Fastevo, etc. out of the box
    + Will survive if Manifest V2 is deprecated soon by Chrome
    + Faster, because it uses a JavaScript native Widevine implementation (courtesy of node-widevine)
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  21. #21

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    I accidentally broke the video being allowed to play when the keys were already retrieved in v0.3. This was fixed in v0.4
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  22. #22

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Quote Originally Posted by larley View Post
    Some advantages:
    + Works on any site, regardless of the challenge encryption on the API endpoint (if the API accepts android challenges), so even Peacock, Vodafone TV, Fastevo, etc. out of the box
    + Will survive if Manifest V2 is deprecated soon by Chrome
    + Faster, because it uses a JavaScript native Widevine implementation (courtesy of node-widevine)
    Thanks for the explanation.

    and thanks again for your wonderful new tool
    Quote Quote  

  23. #23

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Big thanks larley for your work. This one works on sites that none of previous extensions worked. Appreciated for your work!
    Quote Quote  

  24. #24
    Member
    Join Date
    Oct 2024
    Location
    Silchar
    Posts
    1

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Wow this works like a charm. Thanks developer🙏🙏🙏
    Quote Quote  

  25. #25

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Good job. Thanks.
    Quote Quote  

  26. #26

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    great this extension works on homeofhorror THX !
    Quote Quote  

  27. #27

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    For anybody that noticed any kind of freezing of webpages: This has been resolved as of version 0.5.
    Bypass HMACs, One-time-tokens and Lic.Wrapping: https://github.com/DevLARLEY/WidevineProxy2
    Quote Quote  

  28. #28

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Very good extension, I love it, the only thing is that it doesn't show the mpd link (mov**tar) well, but for the rest it's more than great
    Quote Quote  

  29. #29
    Member
    Join Date
    Jan 2019
    Posts
    2,761

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    all current guessers no longer show mpd links because the devs realized that many times the link was wrong so they preferred to not showing mpd detected
    Quote Quote  

  30. #30
    Member
    Join Date
    Dec 2021
    Location
    Belarus
    Posts
    5

    Re: [Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrap

    Thanks for your enormous efforts and the extension done! Marvellous to see it working.
    Quote Quote  

+ Reply to Thread

Similar Threads

  1. Replies: 257
    Last Post: 8th Aug 2025, 00:34
  2. [Release] Widevine L3 Guesser Extension-Works in 2024 Firefox/Chrome All OS
    By FoxRefire in forum Video Streaming Downloading
    Replies: 785
    Last Post: 16th Jul 2025, 14:04
  3. MY5:- HMAC and AES: NO BROWSER REQUIRED Stand-alone script.
    By A_n_g_e_l_a in forum Video Streaming Downloading
    Replies: 10
    Last Post: 22nd May 2024, 09:18
  4. Lic with jsondata
    By sangoku in forum Video Streaming Downloading
    Replies: 3
    Last Post: 21st Feb 2022, 14:02
  5. help decrypting drm dash hmac
    By filipino in forum Video Streaming Downloading
    Replies: 3
    Last Post: 11th Aug 2021, 05:07

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts