[Release] WidevineProxy2 Extension; Bypass HMAC, 1-timetokens, Lic wrapping

[LuckyBold]

Hello,

Should this tool work on CBS.com? And with or without a proxy?

[2nHxWW6GkN1l916N3ayz8HQoi]

It shouldn't work. Read https://forum.videohelp.com/threads/407820-Can-I-download-from-CBS-com/page10#post2760749

[midnightsky]

WidevineProxy2
Hi all, this is the release of my newest creation: WidevineProxy2.
A browser extension for Chrome/Firefox that intercepts challenges/licenses right after/before EME. Its Widevine implementation is completely JavaScript based (huge thanks to node-widevine), easy to use and works almost any browser-based service.
The text below is a copy of the README from its GitHub repository:

Demo
A demo video can be found here

Features
+ User-friendly / GUI-based
+ Bypasses one-time tokens, hashes and license wrapping
+ JavaScript native Widevine implementation
+ Supports Widevine Device files
+ Manifest V3 compliant

Widevine Devices
This addon requires a Widevine Device file to work, which is not provided by this project.
+ Follow this guide if you want to dump your own device.
+ Ready-to-use Widevine Devices can be found here.

Compatibility
+ Compatible (tested) browsers: Firefox/Chrome on Windows/Linux.
+ Works with any service that accepts challenges from Android devices on the same endpoint.

Installation
+ Chrome
‎1. Download this repository as a ZIP file
2. Navigate to `chrome://extensions/`
3. Enable `Developer mode`
4. Click `Load unpacked` and the select downloaded file

+ Firefox
+ Persistent installation
1. Download the XPI file from the releases section
2. Navigate to `about:addons`
3. Click the settings icon and choose `Install Add-on From File...`
4. Select the downloaded file

+ Temporary installation
1. Download this repository as a ZIP file
2. Navigate to `about:debugging#/runtime/this-firefox`
3. Click `Load Temporary Add-on...` and select the downloaded file

Setup
+ Once installed, open the extension, click `Choose File` and select your Widevine Device file.
+ The files are saved in the extension's `chrome.storage.sync` storage and will be synchronized across any browsers into which the user is signed in with their Google account.
+ Due to the sync storage limit of 100KB, the maximum amount of installable of devices at the same time is ~30.
+ Check `Enabled` to activate the message interception and you're done.

Usage
All the user has to do is to play a DRM protected video and the decryption keys should appear in the `Keys` group box (if the service is not unsupported, as stated above).
Keys are saved:
+ Temporarily until the extension is either refreshed manually (if installed temporarily) or a removal of the keys is manually initiated.
+ Permanently in the extension's `chrome.storage.local` storage until manually wiped or exported via the command line.
Note: The video will not play when the interception is active, as the Widevine CDM library isn't able to decrypt the Android CDM license.
+ Click the `+` button to expand the section to reveal the PSSH and keys.

Issues
+ DRM playback won't work when the extension is disabled and EME Logger is active. This caused by my fix for dealing with EME Logger interference (solutions are welcome).

Hope you like it!

Thank you for this incredible extension! Just a thing, I'm using Opera (Chrorium) and it's impossible to load the wvd file, once i press the "Select file" option, no menu comes up. Is there any other way to load the file, like copying it to some especific directory?

[LZAA]

Update 'Opera'.

[Babuino]

Thank you very much, Larley. It works almost flawlessly (or at least I think so, in my case).

I’m having an issue with live streams on Prime Video, both on Chrome and Firefox. While I have the extension open (with the others closed), when I press the play button, it shows an error (video not available), although it retrieves the data correctly, but only in low quality (SD).

If I turn off the extension, it shows this message:

"Your browser does not support High-Definition playback due to content restrictions. Please update your browser for the best Prime Video experience."

I have to use the "Clear Site Data" extension to watch the channels in HD again, log in to Prime Video, etc.

Run for the first time after clearing the site data:

N_m3u8DL-RE "https://otte.live.ll.ww.aiv-cdn.net/dub-nitro/live/clients/dash/enc/fx6zubsovz/out/v1/eabbafa4b209459da45bdde8298676e6/cenc.mpd" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -H "Accept: */*" -H "Origin: https://www.primevideo.com" -H "Referer: https://www.primevideo.com/" --key b770d5b4bb6b594daf985845aae9aa5f:b0cb46d2d31cf044bc73db71e9865f6f --key ae427ddca28a8158059b5ab680bc2246:6d669a658d4e3ba382d7aa40a1eb4497 --use-shaka-packager -M format=mkv

Run after:

N_m3u8DL-RE "https://otte.live.ll.ww.aiv-cdn.net/dub-nitro/live/clients/dash-sd/enc/nvqfsxjk0e/out/v1/6205c01f7eb542a8b98e170258323cff/cenc-sd.mpd" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -H "Accept: */*" -H "Origin: https://www.primevideo.com" -H "Referer: https://www.primevideo.com/" --key b770d5b4bb6b594daf985845aae9aa5f:b0cb46d2d31cf044bc73db71e9865f6f --key ae427ddca28a8158059b5ab680bc2246:6d669a658d4e3ba382d7aa40a1eb4497 --use-shaka-packager -M format=mkv

It seems that the first link (HD) is getting the clearkey from the second one (SD).

Any solution? or alternative.

[LuckyBold]

It shouldn't work. Read https://forum.videohelp.com/threads/407820-Can-I-download-from-CBS-com/page10#post2760749

Thanks for the redirection—I missed that answer. I'm still a bit confused, though. Does this mean other tools won't work as well? By tools, I mean e.g. Devine, Angela's allhell3, or your own Widefrog. I've tried allhell3 but it returns the same error as getwvkeys (httpx.HTTPStatusError: Client error '403 Forbidden' for url).

I'm unsure if the issue is with the token or because the content I want to get is geo-blocked for me. I saw iamghost's screenshot from Devine that it works, however the content isn't geo-blocked for them. May I assume that using Devine with a vpn solves this?

Or is this related to the one-time tokens mentioned here: https://forum.videohelp.com/threads/415090-All-H***-Let-Loose!/page2#post2741593?. If so, would the solution be to use an auth bearer from the app that can be obtained as explained in https://forum.videohelp.com/threads/408031-Dumping-Your-own-L3-CDM-with-Android-Studio#post2676315?? In other words, using e.g. allhell3 with my own cdm instead of the one in starter pack? But will my own cdm work if the content is geo-blocked? I've tried some cdms that were provided somewhere here for WidevineProxy2 but they did not work as well.

I'd appreciate pointing me in the right direction, thanks

[2nHxWW6GkN1l916N3ayz8HQoi]

I'd appreciate pointing me in the right direction, thanks

Use devine. If you have questions about it, you can ask them on the devine sticky post
https://forum.videohelp.com/threads/414154-Devine-Modular-Movie-TV-and-Music-Archival-Software
If you're curious about the process, you can also look in the service source code
https://cdm-project.com/stabbedbybrick/devine-services/src/branch/main/services/CBS

Browser endpoints are not useful anymore because of the cbs change. So everything must be done with android endpoints

[LuckyBold]

Browser endpoints are not useful anymore because of the cbs change. So everything must be done with android endpoints

Thanks for the tips
As for android endpoints - is it enough to copy the endpoints after just configuring the remote debugging between my device and chrome (following https://developer.chrome.com/docs/devtools/remote-debugging) or do I need to follow Cedric's post and use android studio?

[october262]

Browser endpoints are not useful anymore because of the cbs change. So everything must be done with android endpoints

Thanks for the tips
As for android endpoints - is it enough to copy the endpoints after just configuring the remote debugging between my device and chrome (following https://developer.chrome.com/docs/devtools/remote-debugging) or do I need to follow Cedric's post and use android studio?

are you trying to download from cbs.com & paramount plus ?? see this thread post #39 - https://forum.dvdfab.cn/forum/streamfab-support/streamfab/455797-decryption-key/page3
paramount plus and possibly cbs has changed something on their end and now require VMP (Verified Media Path ) streamfab has this already fixed.

[2nHxWW6GkN1l916N3ayz8HQoi]

or do I need to follow Cedric's post and use android studio?

You need to use devine. You can get a cdm from the stickies or by following @cedric's tutorial.

[spectral_other]

I can't get it to work with https://jfc.org.il/, is it an issue with the DRM they use?

[ddll2]

I can't get it to work with https://jfc.org.il/, is it an issue with the DRM they use?

no
example:

https://jfc.org.il/news_journal/27673-2/91680-2/

--key 02806506069450949975240ab9f6d950:c412d3f2408eb662258ec1fb6b328ba9
--key 62d63a63bacb50c2a10c02f49b3f6bc6:26cf1a186916b923bc5204d833d55b24
--key 2d9b824ab85850e096ea09a69d5d840e:f5496b796cf71f2effe4c95f51f8f294
--key e620323bd5655e989a56b9975d161152:28ea2dbda2f3990e8e7cdad435ced03a

[spectral_other]

Hmm, maybe it's an issue with the CDM then. Doesn't seem to work with the ones here:
https://forum.videohelp.com/threads/413719-Ready-to-use-CDMs-available-here%21

It just gives me "Error, 60072104. Device not supported" and doesn't generate anything.

[faccta]

Thank you very much, Larley. It works almost flawlessly (or at least I think so, in my case).

I’m having an issue with live streams on Prime Video, both on Chrome and Firefox. While I have the extension open (with the others closed), when I press the play button, it shows an error (video not available), although it retrieves the data correctly, but only in low quality (SD).

If I turn off the extension, it shows this message:

"Your browser does not support High-Definition playback due to content restrictions. Please update your browser for the best Prime Video experience."

I have to use the "Clear Site Data" extension to watch the channels in HD again, log in to Prime Video, etc.

Run for the first time after clearing the site data:

N_m3u8DL-RE "https://otte.live.ll.ww.aiv-cdn.net/dub-nitro/live/clients/dash/enc/fx6zubsovz/out/v1/eabbafa4b209459da45bdde8298676e6/cenc.mpd" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -H "Accept: */*" -H "Origin: https://www.primevideo.com" -H "Referer: https://www.primevideo.com/" --key b770d5b4bb6b594daf985845aae9aa5f:b0cb46d2d31cf044bc73db71e9865f6f --key ae427ddca28a8158059b5ab680bc2246:6d669a658d4e3ba382d7aa40a1eb4497 --use-shaka-packager -M format=mkv

Run after:

N_m3u8DL-RE "https://otte.live.ll.ww.aiv-cdn.net/dub-nitro/live/clients/dash-sd/enc/nvqfsxjk0e/out/v1/6205c01f7eb542a8b98e170258323cff/cenc-sd.mpd" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -H "Accept: */*" -H "Origin: https://www.primevideo.com" -H "Referer: https://www.primevideo.com/" --key b770d5b4bb6b594daf985845aae9aa5f:b0cb46d2d31cf044bc73db71e9865f6f --key ae427ddca28a8158059b5ab680bc2246:6d669a658d4e3ba382d7aa40a1eb4497 --use-shaka-packager -M format=mkv

It seems that the first link (HD) is getting the clearkey from the second one (SD).

Any solution? or alternative.

I have the same problem, have you found it a solution? I wish to get a movie but i download a mp4 of 17GB that doesn't works

[skipmack46]

https://d1v1gqjht5uu1.cloudfront.net/media/MwPH41dO6tQWH/f7cfe44b/stream.mpd

[faccta]

I tried with this, but doesn't works, because the video is 17GB and If i try to play the video, I can see only that logo amazon and the phrase that this content have some ads interruption. Then the video is impossible to watch the movie.
The audio is mute.
Please can you help me to understand?

URL: https://www.primevideo.com/region/eu/detail/0J3T9F2TTWMYUSW8IPR79ELLZ9?pageTypeId=B087...eIdSource=ASIN
PSSH: AAAAeXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAFkIARIQRf wXOfBNRGWYdVeG4JzifhoGYW1hem9uIjVjaWQ6THd2S0NJaEJU cXVaUzNmcHRwaU02Zz09LFJmd1hPZkJOUkdXWWRWZUc0SnppZm c9PSoCU0QyAA==
Key: --key b770d5b4bb6b594daf985845aae9aa5f:b0cb46d2d31cf044b c73db71e9865f6f --key 2f0bca0888414eab994b77e9b6988cea:2c1f8abfb8e777a22 406479b342bcf89 --key 45fc1739f04d446598755786e09ce27e:997dd23f7684a0440 c1cf15d72f35935

MPD
https://abfcoewaaaaaaaamf3zting6u6rrj.s3-dub-2.cf.dash.row.aiv-cdn.net/dm/3$0CiMIAhIFCgNISEggJTABSAFSBoDAAoHwA3oDgLgXggEBAYg BBBgB/1@f2499713b4deb730c588ba5729c33ebe/c8f5/d36c/ce8f/4bc9-a7a9-bfc0c1f38905/1198bd97-50d6-4613-995e-955c789f5827_corrected.mpd?custom=true&encoding=se gmentBase&amznDtid=AOAGZA014O5RE&encoding=segmentB ase

There are 2 mpd, but no luck anyway.
MPD 2
https://abfcoewaaaaaaaamf3zting6u6rrj.s3-dub-2.cf.dash.row.aiv-cdn.net/dm/3%240CiMIAhI...ng=segmentBase

[LZAA]

https://mega.nz/file/tOpnxIpK#tTrSBO85yflv0hCSluX1VvXUpPuuhEbXLO6SB4YCCPE

[ddll2]

Hmm, maybe it's an issue with the CDM then. Doesn't seem to work with the ones here:

The problem has been discussed many times, at different times

[spectral_other]

Okay...so what is the problem? It would help to know what I'm doing wrong and if I can fix it

[faccta]

https://mega.nz/file/tOpnxIpK#tTrSBO85yflv0hCSluX1VvXUpPuuhEbXLO6SB4YCCPE

Thanks, but the movie is in HD. And we can take only sd version...How can we take HD version?

If I clear data from the webiste, and i login again, I have this, and there is the HD, but if you try to download, doesn't works, seems that the key aren't good.

N_m3u8DL-RE "https://abfcoewaaaaaaaamf3zting6u6rrj.s3-dub-2.cf.dash.row.aiv-cdn.net/dm/3%240CiMIAhIFCgNISEggJTABSAFSBoDAAoHwA3oDgLgXggEBAYgBBBgB/1@1004b4e78c45863cfcb06b9da5db3891/c8f5/d36c/ce8f/4bc9-a7a9-bfc0c1f38905/1198bd97-50d6-4613-995e-955c789f5827_corrected.mpd?custom=true&encoding=segmentBase&amznDtid=AOAGZA014O5RE&encoding=segmentBase" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -H "DNT: 1" -H "Accept: */*" -H "Origin: https://www.primevideo.com" -H "Referer: https://www.primevideo.com/" --key b770d5b4bb6b594daf985845aae9aa5f:b0cb46d2d31cf044bc73db71e9865f6f --key 2f0bca0888414eab994b77e9b6988cea:2c1f8abfb8e777a22406479b342bcf89 --key 45fc1739f04d446598755786e09ce27e:997dd23f7684a0440c1cf15d72f35935 --use-shaka-packager -M format=mkv

[LZAA]

This 'manifest' does not have the full video. Another URL is needed.

[faccta]

This 'manifest' does not have the full video. Another URL is needed.

But in this there is the HD version...

[Attachment 84442 - Click to enlarge]

N_m3u8DL-RE "https://abfcoewaaaaaaaamf3zting6u6rrj.s3-dub-2.cf.dash.row.aiv-cdn.net/dm/3%240CiMIAhIFCgNISEggJTABSAFSBoDAAoHwA3oDgLgXggEBAYgBBBgB/1@1004b4e78c45863cfcb06b9da5db3891/c8f5/d36c/ce8f/4bc9-a7a9-bfc0c1f38905/1198bd97-50d6-4613-995e-955c789f5827_corrected.mpd?custom=true&encoding=segmentBase&amznDtid=AOAGZA014O5RE&encoding=segmentBase" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -H "DNT: 1" -H "Accept: */*" -H "Origin: https://www.primevideo.com" -H "Referer: https://www.primevideo.com/" --key b770d5b4bb6b594daf985845aae9aa5f:b0cb46d2d31cf044bc73db71e9865f6f --key 2f0bca0888414eab994b77e9b6988cea:2c1f8abfb8e777a22406479b342bcf89 --key 45fc1739f04d446598755786e09ce27e:997dd23f7684a0440c1cf15d72f35935 --use-shaka-packager -M format=mkv

[ddll2]

Google search
I'm sure you'll figure it out
good luck

[spectral_other]

Google search
I'm sure you'll figure it out
good luck

What should I Google, oh wise one

[iamghost]

I tried with this, but doesn't works, because the video is 17GB and If i try to play the video, I can see only that logo amazon and the phrase that this content have some ads interruption. Then the video is impossible to watch the movie.
The audio is mute.
Please can you help me to understand?

URL: https://www.primevideo.com/region/eu/detail/0J3T9F2TTWMYUSW8IPR79ELLZ9?pageTypeId=B087...eIdSource=ASIN

region?

[ddll2]

###

[faccta]

I tried with this, but doesn't works, because the video is 17GB and If i try to play the video, I can see only that logo amazon and the phrase that this content have some ads interruption. Then the video is impossible to watch the movie.
The audio is mute.
Please can you help me to understand?

URL: https://www.primevideo.com/region/eu/detail/0J3T9F2TTWMYUSW8IPR79ELLZ9?pageTypeId=B087...eIdSource=ASIN

region?

italy

[iamghost]

italy

no problem

N_m3u8DL-RE "https://ablstb5aaaaaaaamf3zting6u6rrj.s3-dub-2.cf.dash.row.aiv-cdn.net/dm/3$0CiEIARIFCgNISEggJTABUgaAwAKB8AN6A4C4F4IBAQGIAQQYAQ/1@f638b15e67885c0ca177105010929144/c8f5/d36c/ce8f/4bc9-a7a9-bfc0c1f38905/1198bd97-50d6-4613-995e-955c789f5827_corrected.mpd?custom=true&encoding=segmentBase&amznDtid=AOAGZA014O5RE&encoding=segmentBase" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" -H "Accept: */*" -H "Origin: https://www.primevideo.com" -H "Referer: https://www.primevideo.com/" --key 2b7fe5b326194774a87300f4112eb9de:0b54726c5413deac5022dca8c6ff7d73 --use-shaka-packager -M format=mkv

[faccta]

italy

no problem

N_m3u8DL-RE "https://ablstb5aaaaaaaamf3zting6u6rrj.s3-dub-2.cf.dash.row.aiv-cdn.net/dm/3$0CiEIARIFCgNISEggJTABUgaAwAKB8AN6A4C4F4IBAQGIAQQYAQ/1@f638b15e67885c0ca177105010929144/c8f5/d36c/ce8f/4bc9-a7a9-bfc0c1f38905/1198bd97-50d6-4613-995e-955c789f5827_corrected.mpd?custom=true&encoding=segmentBase&amznDtid=AOAGZA014O5RE&encoding=segmentBase" -H "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" -H "Accept: */*" -H "Origin: https://www.primevideo.com" -H "Referer: https://www.primevideo.com/" --key 2b7fe5b326194774a87300f4112eb9de:0b54726c5413deac5022dca8c6ff7d73 --use-shaka-packager -M format=mkv

In first thanks, but I don't understand why i have another key and url. How is possible?

[iamghost]

In first thanks, but I don't understand why i have another key and url. How is possible?

what tool did you use? WidevineProxy2 Extension?
mine is playreadyProxy.

[Attachment 84462 - Click to enlarge]
other tool for hevc

N_m3u8DL-RE -M format=mkv --key d92b5549aff7416f858dd3c611fbb55c:f367339c58afe31ecf048860efcfc216 --key d3aad436a99548929793365d30a6aaee:cf83c882fa4f9276ba2a6d47523676af "https://ablstb5aaaaaaaamf3zting6u6rrj.s3-iad-2.cf.dash.row.aiv-cdn.net/4e8d/995f/c828/4bd4-885b-8a6567e7f379/af3d385e-7973-4264-bee2-f4ec9ada8908_corrected.mpd" --header "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" --header "Referer: https://www.primevideo.com/" --save-name "Love Shooting"