[Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrapping

[Tifosodoc]

Ok I will try to change cdm

[stacyy]

This extention works like a charm, huge thanks for this.

I tried this on VdoCipher with physical device CDM and there's one issue :

Here the extension works - (https://player.vdocipher.com/v2/?otp=20160313versUSE323jY1qx5Lr0GEQo3rlTutTEpeOQskuUC2...I5MGNhYzkifQ==)

but

Here the player says Error 2074 (please open in Android app) - (https://player.vdocipher.com/v2/?otp=20160313versASE313OBf30sv4l1mQqthl9UgWl5MDHdMWzoX...JkNDJlYWYifQ==)

PS : First copy link to the clipboard and then paste it in URL box, otherwise second link shows error in loading.

--------------------------------------------------------------------------

Is it due to my CDM being from an old device or am I doing something wrong which can be fixed?

Hi larley, could you please give your insights on this extension works for some VdoCipher links but on some it shows error and instructs to play it on their app based player Is it due to my CDM being from an old device as I played that video on that mobile device too and it asks to play it on app while video is getting played on other mobile devices (which are relatively new) w/o their app based player.

[larley]

The license acquisition probably works a bit different or is using L1 (??) on app players. I've never been able to look at apps because simply don't of any VdoCipher app that is free. Have you heard of one so I can try?

[stacyy]

The license acquisition probably works a bit different or is using L1 (??) on app players. I've never been able to look at apps because simply don't of any VdoCipher app that is free. Have you heard of one so I can try?

Zen Player, this is their official player app. I don't think they use L1 as my older device doesn't support WV L1 still through app the video is being played. Have you tried the extension on two links which I shared, issue is with the second one, are you facing same issue with the second one?

[larley]

I've tried with Zen Player but I'm always getting a 2113 error code, which should indicate an API block, but changing servers doesn't help

[Asdfgf]

wowwww!!! thank you so much!!!

[stacyy]

I've tried with Zen Player but I'm always getting a 2113 error code, which should indicate an API block, but changing servers doesn't help

Thanks for your efforts; I believe they offer various levels of security from which their clients can choose what to deploy. Is there a way to bypass the current issue of being unable to play videos in a PC browser (with your extention) and having to use an app? I've been looking for a way to do this for a long time, and your extension is the one that can get keys for some of the videos hosted by them. VdoCipher appears to be a difficult problem to solve; hopefully, you will be able to provide some solution.

[larley]

The addon won't be able to solve this, but I found out that the 2113 error code also indicates a "connection issue", which was caused by my interception using HTTP Toolkit. I don't know why but it's impossible to intercept this app

[stacyy]

The addon won't be able to solve this, but I found out that the 2113 error code also indicates a "connection issue", which was caused by my interception using HTTP Toolkit. I don't know why but it's impossible to intercept this app

I do not intend to intercept the app, but if we can play the video on PC with the extension enabled, the work is done, as the extension works on other VdoCipher videos like this (https://tinyurl.com/ywbfyz8d). The problem is with these types of videos (https://www.vdocipher.com/video-security/), the player is the same for both case, but looking at their website, it vaguely states that there is an optional feature (for their client) to support older devices for which Zen Player is used. I still believe it can be solved by using CDM of a device running Android 12 or higher. What is the Android version of your CDN device?

[larley]

I actually wasn't able to get the keys even from your first video, but a CDM that once worked for me is Widevine CDM version 16. There's no Android version in Client ID.
I don't think that you'll be able to play VdoCipher videos in the browser (that are meant to be played in the app) because they require an additional "integrityToken" which I'm pretty sure is generated by the Android App.

[stacyy]

I actually wasn't able to get the keys even from your first video, but a CDM that once worked for me is Widevine CDM version 16. There's no Android version in Client ID.
I don't think that you'll be able to play VdoCipher videos in the browser (that are meant to be played in the app) because they require an additional "integrityToken" which I'm pretty sure is generated by the Android App.

For me it works on the first link, seems that VdoCipher has robust systems and it's quite tedious to crack for most on this forum. Anyhow is it possible to try getting keys through ChromeCDN?

[[ss]vegeta]

Amazing work! Thank you for providing this extension for the public! Keep up the good work, and keep up fighting the cancer that is DRM.

[impersic]

Interesting coincidence. Been doing a similar browser extension for a while now and posted it the other day too.

[MartinTH]

Interesting coincidence. Been doing a similar browser extension for a while now and posted it the other day too.

Which Extension and where to find ?

[Silv3r]

Interesting coincidence. Been doing a similar browser extension for a while now and posted it the other day too.

Which Extension and where to find ?

check his signature -> Azot - pentesting toolkit for Widevine

[ehurdler]

larley This is great! Thank you. Finally had a time to test this out! Works great!

[larley]

Manifest detection is on its way

[MartinTH]

Manifest detection is on its way

Great to hear!

This would makes your Extension really perfect.

[Spectrumhsm]

Manifest detection is on its way

Great.


Adding N_m3u8DL-RE link would be further bonus.

[larley]

Manifest detection has been released: https://github.com/DevLARLEY/WidevineProxy2/releases/tag/v0.8

[Goku73]

You are great!!!

[m0n4t]

Great, great, great

everything correct, manifest included.

[Tifosodoc]

great job, thank you so much! Is there any way how to copy manifest? I can't do it with mouse or ctrl+c.

[MartinTH]

It would be great if you could simply copy the Keys and the Manifest URL.

Perhaps both in a .txt File or in the Clipboard.

[larley]

What else would you do with the manifest URL then downloading it with N_m3u8DL-RE?

[sesamap159]

good evening larley,
why don't you make a batch file to download the video file without copying and pasting? you also added a txt file for the directory that the user can add into it.

[larley]

The extension cannot access the file system

[sesamap159]

if possible save your order in a batch file in CMD.
in panel.js

const command_copy = logContainer.querySelector('.command-copy');
        command_copy.addEventListener('click', (e) => {
            e.preventDefault();
            const batchContent = `@echo off\n${command.value}\ndel "%~f0"\n`;
            const file = new Blob([batchContent], { type: 'text/plain;charset=utf-8' });
            try {
                if (window.navigator.msSaveOrOpenBlob) {
                    window.navigator.msSaveOrOpenBlob(file, "DownloaderVideo.bat");
                } else {
                    const a = document.createElement("a");
                    a.href = URL.createObjectURL(file);
                    a.download = "DownloaderVideo.bat";
                    document.body.appendChild(a);
                    a.click();
                    URL.revokeObjectURL(a.href);
                    document.body.removeChild(a);
                }
                alert("✅ Le fichier batch a été téléchargé avec succès !");
            } catch (error) {
                alert("❌ Une erreur s'est produite lors du téléchargement : " + error.message);
            }
        });

dsl translation into French

[ddll]

I actually wasn't able to get the keys even from your first video, but a CDM that once worked for me is Widevine CDM version 16. There's no Android version in Client ID.
I don't think that you'll be able to play VdoCipher videos in the browser (that are meant to be played in the app) because they require an additional "integrityToken" which I'm pretty sure is generated by the Android App.

For me it works on the first link, seems that VdoCipher has robust systems and it's quite tedious to crack for most on this forum. Anyhow is it possible to try getting keys through ChromeCDN?

https://www.vdocipher.com/blog/zenplayer-android-explanation/

I think if Zenplayer works on rooted Android - everything is possible?

[stacyy]

I actually wasn't able to get the keys even from your first video, but a CDM that once worked for me is Widevine CDM version 16. There's no Android version in Client ID.
I don't think that you'll be able to play VdoCipher videos in the browser (that are meant to be played in the app) because they require an additional "integrityToken" which I'm pretty sure is generated by the Android App.

For me it works on the first link, seems that VdoCipher has robust systems and it's quite tedious to crack for most on this forum. Anyhow is it possible to try getting keys through ChromeCDN?

https://www.vdocipher.com/blog/zenplayer-android-explanation/

I think if Zenplayer works on rooted Android - everything is possible?

I figured out why Zen Player is used; basically, HD-quality videos hosted on VdoCipher require ZenPlayer to stream on rooted or WV L3-supporting devices. You can easily play SD videos hosted on VdoCipher without ZenPlayer, and you can also get keys for them using this extension.

and bypassing WV L1 is a less discussed topic on public forums.