This repo created for bypassing Widevine L3 DRM and obtaining keys.

Overview

First run:

Copy headers (with cookies) of POST license request from browser to headers.py like dictionary.

pip install -r requirements.txt # if doesn't work try pip3
py l3.py
Input MPD URL: https://site.ru/.../.../filename.mpd
License URL: https://cms.35mm.online/umbraco/api/products/473/drm/widevine?platform=BROWSER&type=MOVIE

Works only if the site does not require specific json-formatted data in the license request. And if it requires and you want to add its support, write to issues specifying the required json-formatted fields and the algorithm for their formation (if not static).
Examples:

  1. Normal work:
    Normal work
  2. Server did not issue a license, as it requires additional json-formatted data: error_teapot
  3. If "Unable to find PSSH in mpd" - write about this error to issues attaching a link to mpd.

Further about kinopoisk (hello to compatriots):
Not working yet. It is necessary to find out how the POST request is signed (the signature field in the request payload). It looks like a simple hash of sha1, but from the looks of it, this is not it, but the Amazon's AWS Signature Version 4. Or I am doing something wrong and everything is much easier... Any ideas are appreciated, write to issues.

Parsed payload of license request

Comments
  • Could you offer support for rte.ie

    Could you offer support for rte.ie

    Not sure what information you would require to enable this. But the license url seems to require a token, see https://widevine.entitlement.eu.theplatform.com/wv/web/ModularDrm?token=eyJhbGciOiJSUzUxMiJ9.eyJzdWIiOiJydGUtcHJkLXByZC10cnQvYW5vbnltb3VzX25ncnBfcGxheWVyQHJ0ZS5pZSIsImlzcyI6IjEiLCJleHAiOjE2MzkyNDUyMDMsImlhdCI6MTYzOTE1ODgwMzY2MCwianRpIjoiM2VhZjkzNTMtOWMyZi00NDI1LTgwNDAtYTMwNWQ5MzhmYjFkIiwiZGlkIjoicnRlLXByZC1wcmQtdHJ0IiwidW5tIjoiYW5vbnltb3VzX25ncnBfcGxheWVyQHJ0ZS5pZSIsImN0eCI6IntcInVzZXJOYW1lXCI6XCJhbm9ueW1vdXNfbmdycF9wbGF5ZXJAcnRlLmllXCJ9XG4iLCJvaWQiOm51bGx9.B0M0t-VS44ELtmMa-8YW0e-I4-0CFR6FaLpwkXB7ys25QLiXpdOXFjhBoi_xeuB-wraDXuc8uJ2WlLc2_tEDAMfrVZ6QZvvERXep0j9oha0zH3GoagIbwvfXbcuQICh3D9pIDsbeVzNTSBww-LLoGQFZOXiAa60YiueZdua9TMpfo8BtLgaB7xp-cGx0UVbyRgo_Vs_o55CBWk6csrWPpL-PQZCUjAGYLIPhzRin6TjECtP1dWOLN_1tHgpVOEPUhrzDLemX6wgYlRw74xlHbuYzFvwruHQYxJcHzJ-xtmnFllkOF3JEieFai-eVIF5WusHzWcDsBifZp4spbnZbTw&account=http://access.auth.theplatform.com/data/Account/2700894001&form=json&schema=1.0 and when entered into your script it offers up the error message

    PSSH obtained.
    AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQ7iYSc3cNGm7XKPe3hSn3MhoIdXNwLWNlbmMiGDdpWVNjM2NOR203WEtQZTNoU24zTWc9PSoAMgA=
    
    license response status: <Response [200]>
    
    unable to parse license - check protobufs
    
    
    opened by Lusephur 36
  • Add [okko] support

    Add [okko] support

    Input MPD URL: https://msk-cdp25.playfamily.ru/data/cid/270886532-1639247632-oq164-LMcrgS_x7AghuslQ/storage106/clr/m/sp/73a54bfc-2d55-4755-a5b9-195cd4e9537e/output.ism/Manifest.mpd

    License URL: https://drm.playfamily.ru/widevine/cenc/ZHBtbLOZoWsAaEKcn-6QtOvfrb0/getlicense

    image image

    image

    add site support 
    opened by ST02-droid 23
  • Add [wink] support

    Add [wink] support

    MPD: https://s35761.cdn.ngenix.net/mdrm/hd_2021_korolevskaya_igra__ar6_xTRh8rJezTb_film/9eff5806/manifest.mpd?profile=web_auto License URL: https://s95951.cdn.ngenix.net/license PSSH: AAAAYXBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAEEIARIQSa2Www42TAW6Xwz5oOEEthoFQ29uYXgiJGEyMmEzYjE5LWQwZjYtNDRjMC05Y2NhLTM4Y2JiOWI1OGU4Nw== Screenshot

    add site support 
    opened by Joker179250 13
  • It doesn't work

    It doesn't work

    I got the following error. What is the solution?

    C:\Users\○○\Desktop\DRM\widevine_keys-main>C:\Users\○○\Desktop\DRM\widevine_keys-main\l3.py
    Traceback (most recent call last):
      File "C:\Users\○○\Desktop\DRM\widevine_keys-main\l3.py", line 11, in <module>
        from cdm import cdm, deviceconfig
      File "C:\Users\○○\Desktop\DRM\widevine_keys-main\cdm\cdm.py", line 10, in <module>
        from cdm.formats import wv_proto2_pb2 as wv_proto2
      File "C:\Users\○○\Desktop\DRM\widevine_keys-main\cdm\formats\wv_proto2_pb2.py", line 20, in <module>
        _LICENSETYPE = DESCRIPTOR.enum_types_by_name['LicenseType']
    AttributeError: 'NoneType' object has no attribute 'enum_types_by_name'
    
    opened by tatata17 10
  • Vdocipher license issue

    Vdocipher license issue

    I do have CDM keys which I got from my mobile. I had to add one line in l3.py file in WV_Function as following so my request will be made to vdocipher server -

    responses.append(requests.post(url=lic_url, headers=headers.headers, json=headers.data))

    My header file looks like following -

    import requests

    headers = { 'authority': 'license.vdocipher.com', 'sec-ch-ua': '" Not;A Brand";v="99", "Google Chrome";v="97", "Chromium";v="97"', 'sec-ch-ua-mobile': '?0', 'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.71 Safari/537.36', 'sec-ch-ua-platform': '"Windows"', 'content-type': 'application/json', 'accept': '/', 'origin': 'https://d1z78r8i505acl.cloudfront.net', 'sec-fetch-site': 'cross-site', 'sec-fetch-mode': 'cors', 'sec-fetch-dest': 'empty', 'referer': 'https://d1z78r8i505acl.cloudfront.net/', 'accept-language': 'en-US,en;q=0.9', }

    data = { "token":"TOKEN CODE': '" }

    // these 2 lines are commented // response = requests.post('https://license.vdocipher.com/auth', headers=headers, json=data) // params inserted below will be passed to data-raw

    token = '' provider = '' releasePid = ""

    When I run l3 file, output comes as following - image

    My CDM key is L3 key

    Anyone help me to solve this issue.

    Thanks in advance

    opened by akkishay 9
  • Add [sokmil] support

    Add [sokmil] support

    Hello, I’m not sure what data you need. This is an adult website.

    MPD : https://idc104.candl.jp/watch/?a=c1LsAlPLnq01XHDCHmI7s1-beZV.LcFGar0zaZDoq0E&h=205&f=ing0342_00_3m.vismv&style.mpd License : https://license.candl.jp/sokmil/widevine/ Pssh : AAAAMnBzc2gAAAAA7e+LqXnWSs7jyCfc1R0h8QAAABISEB0tbK4Y1U1wpJ/wf7eklJ8= 000333 11996600 990088 {"status":"OK","status_message":"","license":"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","license_metadata":{"content_id":"ZXlKaGMzTmxkRWxrSWpvaU1XWXlaRFpqWVdVeE9HUTFOR1JtTUdFME9XWm1NRGRtWWpkaE5EazBPV1lpZlE9PQ==","license_type":"STREAMING","request_type":"NEW"},"supported_tracks":[{"type":"HD","key_id":"Hy1srhjVTfCkn/B/t6SUnw=="}],"make":"Google","model":"ChromeCDM-Win-x64-7","security_level":3,"internal_status":0,"session_state":{"license_id":{"request_id":"5hyBygBtzixiPbUsxM32Eg==","session_id":"5hyBygBtzixiPbUsxM32Eg==","purchase_id":"","type":"STREAMING","version":0,"original_rental_duration_seconds":86397,"original_playback_duration_seconds":86397,"original_start_time_seconds":1639249663},"signing_key":"+vc7ir7rWH1ItVig9lfY9a92SQ7TcV68O2XLu4LaSsANrIebaSMldljwPlGSZLcQokhol4NZuDbMKO/5ag6NuQ==","keybox_system_id":21889,"license_counter":0},"drm_cert_serial_number":"NDY4NWI0OTk3YjI3MmNjNmFkNDUyMGZjYmZiMDNjMGE=","device_whitelist_state":"DEVICE_NOT_WHITELISTED","message_type":"LICENSE","platform":"windows","device_state":"RELEASED","pssh_data":{"key_id":["Hy2srhjVTfCkn/B/t0SUnw=="],"content_id":"ZXlKaGMzTmxkRWxrSWpvaU1XWXlaRFpqWVdVeE9HUTFOR1JtTUdFME9XWm1NRGRtWWpkaE5EazBPV1lpZlE9PQ=="},"client_max_hdcp_version":"HDCP_V1","client_info":[{"name":"architecture_name","value":"x86-64"},{"name":"company_name","value":"Google"},{"name":"model_name","value":"ChromeCDM"},{"name":"platform_name","value":"Windows"},{"name":"widevine_cdm_version","value":"4.10.2391.0"}],"platform_verification_status":"PLATFORM_SECURE_STORAGE_SOFTWARE_VERIFIED","content_owner":"castlabs","content_provider":"castlabs","system_id":21889,"oem_crypto_api_version":16,"resource_rating_tier":0,"service_version_info":{"license_sdk_version":"16.5.0 Built on Nov 3 2021 21:41:01 (1636000836)","license_service_version":"widevine_license_wls_20211103_212427-RC00"},"soc":"x64","client_capabilities":{"session_token":true,"video_resolution_constraints":true,"supported_key_type":[]}}

    add site support 
    opened by jerryandtom007 9
  • l3.py doesnt finish

    l3.py doesnt finish

    I'm no expert in this so I may make a beginners mistake. I tried your project on channel 4 and get the main script doesnt finish. After entering the license URL it waits forever - interrupting at some point results in the following traceback.

    Screenshot from 2021-12-11 20-28-45

    I'm unsure about the URLs are correct and the chosen header is the right one. From DevTools I got this for the header and license URL:

    Screenshot from 2021-12-11 20-25-54

    and this for the MPD URL:

    Screenshot from 2021-12-11 20-26-15

    I hope someone knows what the issue could be.

    opened by kfriddy 8
  • Add [redefine.pl] support

    Add [redefine.pl] support

    Input MPD URL: https://hls.redefine.pl/6EFF0E23/1712/0/dash_iptv/live.mpd License URL: https://b2c-www.redefine.pl/rpc/drm/

    PSSH obtained. AAAAZHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAEQIARIQsckmWr/9a0OY0dX9OfwZCBoNY3lmcm93eXBvbHNhdCIZNkVGRjBFMjMvMTcxMi8wL2Rhc2hfaXB0dkjj3JWbBg==

    license response status: <Response [200]> server reports: {"error":{"code":-32600,"message":"Invalid Request"},"id":null,"jsonrpc":"2.0"} server did not issue license, make sure you have correctly pasted all the required headers in the headers.py. Also check json/raw params of POST request.

    add site support 
    opened by jaca233 7
  • python version?!

    python version?!

    Hello,

    Can you mention in requirements txt file which python version needed?!

    python l3.py File "l3.py", line 33 print(f'{chr(10)}PSSH obtained.\n{pssh}') ^ SyntaxError: invalid syntax

    Thanks

    opened by oOBigManOo 6
  • Please Add galaxyplay.vn support

    Please Add galaxyplay.vn support

    python l3.py

    Input MPD URL: https://a30-fcdn.glxplay.io/25aa1cfb-0565-4509-8226-ff7394e6c620/4e32a7c2-c748-43ff-88a8-dbf0a94b8b10/5/d8dd0528fbe07990e5431f58bdd1325e/h264/manifest.mpd

    License URL: https://lic.glxplay.io/license-proxy-widevine/cenc/

    Unable to find PSSH in mpd. Edit getPSSH.py or enter PSSH manually: AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQJe+p+2yBV4ecVjXp9J3jIRoIdXNwLWNlbmMiGEplK3ArMnlCVjRlY1ZqWHA5SjNqSVE9PSoAMgA=

    PSSH obtained. AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQJe+p+2yBV4ecVjXp9J3jIRoIdXNwLWNlbmMiGEplK3ArMnlCVjRlY1ZqWHA5SjNqSVE9PSoAMgA=

    license response status: <Response [400]> server reports: HTTP Status 400 – Bad Request

    HTTP Status 400 – Bad Request

    server did not issue license, make sure you have correctly pasted all the required headers in the headers.py. Also check json/raw params of POST request.

    This header:

    import requests

    headers = { 'authority': 'lic.glxplay.io', 'sec-ch-ua': '" Not A;Brand";v="99", "Chromium";v="96", "Microsoft Edge";v="96"', 'dt-custom-data': 'eyJ1c2VySWQiOiIyNWFhMWNmYi0wNTY1LTQ1MDktODIyNi1mZjczOTRlNmM2MjAiLCJzZXNzaW9uSWQiOiJwcm9kdWN0aW9uX2ExMGNiYmNlLWEyZjQtNGEzZC1iZjhhLTgyNjRkNzViYzk3YyIsIm1lcmNoYW50IjoiZmltcGx1cyJ9', 'sec-ch-ua-mobile': '?0', 'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.93 Safari/537.36 Edg/96.0.1054.53', 'sec-ch-ua-platform': '"Windows"', 'accept': '/', 'origin': 'https://galaxyplay.vn', 'sec-fetch-site': 'cross-site', 'sec-fetch-mode': 'cors', 'sec-fetch-dest': 'empty', 'referer': 'https://galaxyplay.vn/', 'accept-language': 'en-US,en;q=0.9', }

    params = ( ('platform', 'BROWSER'), ('type', 'MOVIE'), )

    params inserted below will be passed to data-raw

    token = 'PFYtFSqWMYIROJYywBp0rbKvpD3z6N6E6UezNrZmCeKHkcJ5BiH4J8qwO0kfWOmrSsyFJMg9OqKKEwvuQiXL4qdDTa6ZYplNV9IQt6eEuveglDxjVlYd0vAecS5TZKn5mIs01YxcYNlTC7tu3BIk63JhMykMWEMmj1oEqaLa7N3ZrfU2VTlEPaWXBQV6PxnFeD022Yi298GOX/lDik7sXt5u4duT0aKIYbz0HPmjoh8b9Uy8bvzJUa0/SlgRcsW8RNTNjRJHM6N7BESCBGFEZcWoSXeDLEblEfRoBKro2iDGB1neLfRdY1fj7tJX1Rn9lj+OJwRTrBV4XoTQFuSsFwvYCeQfkAoRHXnze9njI5pY7sYgIGxuM4Zh3Wqaps6kxdO53QMm0jJ/L41X6r5CikSGKQ3Rcps8eQccZb9svEuyXMof2nm+eYL+AVPPrfmAf/BrmUHfiuF9CmNsF9pI7PjJfLeASmh3KDI/5gUuC4uJB7rjTzHVWNRz8MSvYjJ37/5V9+FTihpu04+0jFZ1AlGRks2dzk2IGvm5WcwUhsW2l/oQXlh7AgsksIl2DT0wH11WeG+h1/ijymMcG9AZzsxtkC53eLJ8bl55/Aag0TJfX4N6KvV7UhglXxkLifb06bLK/wlcGCfb01b4cnngcjPJEMxh2+Q7sJSnbyrtsfodzNah8JXITmx5kTkFFZkdtga1ha9jAb+Z40VMQfbrCLgh0GEe2G3VczcIt8QHAWAeS91TkzLbMRAugbgLvdbI8yQXtM15uo+TXrV4PNFprug33AnvnQu7IpNxlmgPMZhEn4Qqc/V++OFIpz/JYEMnLFvjYcXE2+sPc4uKnoE0xk33+IgZKtWtDhxRg2SJKyKOYxXucXybUuqPP/d+Nq1VNhD84Of+EfVvBjs1u75pNz/kmu5ms9ppRMkafq0/2311hbYi6VXmp6AeJweGJWkGKEFxw7xADuC8iM7xWnXW5aiNvhbsXBOwuTK8b2ioxjrg6OFhiMck+z9M5FHg+ktY7YB8iY+0V6B/Op2cQGtLaZ2E9lsomlQpxL+LiPI7UWEqmALEGH/Pk5tdLnlFRjEk2PPc8YURw+/nkP9tqJ/AXQwaXc9iwC5yxlYPCsp/Tc4=' provider = 'kakaotv'

    releasePid = "_qVpiY31v_oU"

    response = requests.post('https://widevine-proxy.ott.yandex.ru/proxy', headers=headers, cookies=cookies, data=data)

    print(f'{chr(10)}widevine_license: {response.content}')

    #NB. Original query string below. It seems impossible to parse and #reproduce query strings 100% accurately so the one below is given #in case the reproduced version is not "correct".

    response = requests.options('https://api.ott.kinopoisk.ru/v12/license-affected-content-metadata?contentIds=4b63db58ab27e92b90a457e533b00007&serviceId=25', headers=headers)

    dash-cenc/hdr10_uhd_hevc_ec3.mpd

    https://strm.yandex.ru/vh-ottenc-converted/vod-content/4315082489d87677b21f7c83593fcb73/8614535x1631802676x41611665-4e76-41ac-93a7-5070b77b5f3c/dash-cenc/sdr_uhd_hevc_ec3.mpd

    'GET /certificate HTTP/1.1'

    add site support 
    opened by kendyx1 5
  • server reports: {

    server reports: {"code":100100,"message":"The request is invalid. Error while parsing: contentId. Parameter null not expected as an array"}

    Issue

    When I query the following license server https://rbm-rtbf.live.ott.irdeto.com/licenseServer/widevine/v1/rbm-rtbf/license, I got as response the following error messages

    server reports: {"code":100100,"message":"The request is invalid. Error while parsing: contentId. Parameter null not expected as an array"}
    server did not issue license, make sure you have correctly pasted all the required headers in the headers.py. Also check json/raw params of POST request.
    

    URL used:

    VIDEO URL: https://www.rtbf.be/auvio/detail_cobalt-l-envers-du-reve-electrique?id=2943776&t=649
    MPD URL :  https://c9851ec-az-westeurope.fsly.cdn.ebsd.ericsson.net/rtbf/auvio/assets/2943776_6BA97Bb/materials/KaFVNUi0Gg_6BA97Bb/vod-idx-2.ism/.mpd?
    License URL:  https://rbm-rtbf.live.ott.irdeto.com/licenseServer/widevine/v1/rbm-rtbf/license?contentId=2943776_6BA97Bb&keyId=7832df7f-bbd8-4082-9fb9-a1552efe6238&ls_session=eyJ0eXAiOiJKV1QiLCJraWQiOiIwOGIzODQwZS0wYThhLTQyYTItODNhNC03ZGM0Mzc0ZDJmYmEiLCJhbGciOiJIUzI1NiJ9.eyJhaWQiOiJyYm0tcnRiZiIsInN1YiI6IjhmZmZmNmYwMDI4ZTQ1ZmE5OTRmYTRlMDRiZTM0ZDJjXzZCQTk3QmIiLCJpYXQiOjE2NjUxNTk4MTksImV4cCI6MTY2NTE2MzQxOSwianRpIjoicE1abzlKd08wa2M4OFJyOFNjOU1vcWVMOUwxc1B3ZzVXS0lxUHVQbjVYVT0iLCJlbnQiOlt7ImVwaWQiOiJkZWZhdWx0IiwiYmlkIjoiYmVsZ2lhbl82QkE5N0JiIn1dLCJpc2UiOnRydWV9.T7NS1LasInS7QHczeOts6IfDpYqb2yFxZFNFo9mz4Ro
    
    PSSH obtained: AAAAXHBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAADwIARIQeDLff7vYQIKfuaFVLv5iOBoIdXNwLWNlbmMiGGVETGZmN3ZZUUlLZnVhRlZMdjVpT0E9PSoAMgA=
    

    Headers.py file

    import requests
    
    headers = {
        'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Firefox/91.0',
        'Accept': '*/*',
        'Accept-Language': 'en-US,en;q=0.5',
        'Origin': 'https://www.rtbf.be',
        'Connection': 'keep-alive',
        'Referer': 'https://www.rtbf.be/',
        'Sec-Fetch-Dest': 'empty',
        'Sec-Fetch-Mode': 'cors',
        'Sec-Fetch-Site': 'cross-site',
        'Content-Type': 'application/x-www-form-urlencoded',
    }
    
    params = {
        'contentId': '2943776_6BA97Bb',
        'keyId': '7832df7f-bbd8-4082-9fb9-a1552efe6238',
        'ls_session': 'eyJ0eXAiOiJKV1QiLCJraWQiOiIwOGIzODQwZS0wYThhLTQyYTItODNhNC03ZGM0Mzc0ZDJmYmEiLCJhbGciOiJIUzI1NiJ9.eyJhaWQiOiJyYm0tcnRiZiIsInN1YiI6IjhmZmZmNmYwMDI4ZTQ1ZmE5OTRmYTRlMDRiZTM0ZDJjXzZCQTk3QmIiLCJpYXQiOjE2NjUxNTk4MTksImV4cCI6MTY2NTE2MzQxOSwianRpIjoicE1abzlKd08wa2M4OFJyOFNjOU1vcWVMOUwxc1B3ZzVXS0lxUHVQbjVYVT0iLCJlbnQiOlt7ImVwaWQiOiJkZWZhdWx0IiwiYmlkIjoiYmVsZ2lhbl82QkE5N0JiIn1dLCJpc2UiOnRydWV9.T7NS1LasInS7QHczeOts6IfDpYqb2yFxZFNFo9mz4Ro',
    }
    
    data = '\bé+T\nR\n<\bx2ß»Ø@‚Ÿ¹¡U.þb8\busp-cenc"eDLff7vYQIKfuaFVLv5iOA==*2\0H‡ÉjÌ|ì½:Œ,:ò—ý ¥š08Ô٪B€+\nlicense.widevine.com¹Ì†‹3:/w*ŒÀ(¶5\nJC‡&()ë$Uõhýß´ÈèHÖh\0zoyôÀôTMßØøÖ<šŽ‡“W;qÌ]ý´5L\bʐE«\xA0òÓî\0HÁûnÈo/õ–ˆs何!úÕMÈ ‘JíUÖÑÃktٓ£šcøÀc9i¦¥ëςÀåÆ6ÔÂV’y¬ƒ<jÓRævބ¢À…ëÈÂá[ÑSl\f‚é¬Ý£¦(Ef&þË}æ²éûëëf2Àÿ¼1ž\fR|$*L§*®¡ÌÒá%?比Ó~%n;ám{é]ƒZé–K†òyt\nF€“´°•¼½ûòjgÇ\\»ð§õðìYŠ³;ÿ­Ý@#ì6áÝL½íÁö”}ÐtžÐÚvSK’:ŽMdì{°²/oJ)ó>m冔`páÖoˆaبR«9Ëz)CŒæ°ï‘`p­«QC›¬—“†zÔwmSz§€™|=oýpC@Í.¢ðAicýd6B*áà&ÊL6noEÆÜþNpZŠ‚…ŠƒX.]›¾ÈÚԇzõñÑöl^|ŸØ@õ.ƒ5Ï!¨Ö&ïÕh÷ˆ,T{H¦§jôöiâÀ½†‡^*R_l臟ô„©°uZh—÷AŒ«„óªõ"“zÙSñ‹ôf=E“E\\p‡Îc§\xA0=¯@-Jkmú<KG›\xA0’u…BÕ\'nFüOóÌ÷æ"Ý-Gƒºxìª\f/0©J©Ô”àhM+á$óLäÏ¡»†9ӋUìdJò‹\r\'„Iä?¸Õj“•_Íb§Ðý\\+Yp;÷raÞ7)}qî­D6ÞYüæ[iaØ*¡\'ç?nç.]ט@æQٗjeJÕZÝͅ,QjYÖîœ.khˆéîËtéåGìBôžèâ‰é‡‹êlœš`þ—\\ŸKÐd‡í@{qàÑZÂۗn"©š´7ßïl¥hK鱖,˜pöç´:ÜôègMÀxq.û\'öóxçXQÇÜÿ¯s!§(Ø[†Ûi1ëà‡\0ºAèZû”ƒ=ò òó\\Ô?»Œ¢¤^Dˆ5Rý5\n¥°Bü=ãk\\ìglF²ïÝÔ%ôØV˜àë9AÛ®;‡s×ËÕóæ„ýâÙlá¦IN†ÒMtëí:ÖYšTš\0œ~N^^ßì\xA0ÃïÍÂ%§3>ýR|?w%r`\t¯yà³Ýt¹J9¡?ù{ë°ègþ7\0;âÅ4Uû_exSá¸åâ²ËílÞl{±6Þ\rI´…]Ãߝòƚ<{œÖ”\tÎèÃ÷/IÀkšò¬÷ݨIËü=‚w˜#Q’fv—6¤œ‰§‘ïšñ¾É·¶ãYbþïÝ¢/u•­è§zØÌ`÷Iùê×<ne0ʢꆝ*"†i£*!ÿ«wì›à±R0Ν£\baè25¿F´ÿ€DX†\n‰á(®®×f锔O\f-_Ó5´´auÔÊG^ÆWGqªÁ‘-•ÃŒ¤.UržÁQ:­½1~ómË´"¯o@µ­9¾6x³¹Å¼“Àd|ãRþÕ2ËÄ4Ú­^N=€ýÖꃇó¢ÆßAï¿SŸÖ«–§C\nέÈLRérÿ0OÇwë¹ÌnœÈÖüVÀz…ÍMÆím¯¬CÖ^\'ý»^I‰am;­A¨$\feNâœëfÖϝ¨¢jq£/d¤=äÄC;гcEÉ·y׎›;Õ+œi½rŸÖ¢ÕªDºpø¤R…ŒÅ!þÿŕ)ÖÃ*Ì[¿©R¥‚ÝCØ¿sÕbÈΪº+5ÙpÖ´Øаc—€¾\b€u1Zo΁¢\\0+Á\bÖ´x‘Ê4…d^1Ïù¢¸P‹B¥ÍøÜRN®·¶ÅpýÍǕʾf*pê>M# 6*÷à_î,·¡Ÿ6ê&ðÖ¦ûŸJÁ\'YNøÉÛG-šdMü-}b˜¥¸ôÒ.Q\f+ÿFú˜Jxƺª]ëÅГ‘Ü!R6ÕgŸ;‹Ŝ¼ù/ËÛ[^\tà;yèU"RÖªíh[`#Ëm¤rÔÕa…`Ã؁3¼•÷0+Ÿvfá±mvªü%%íõg‘\\ى˜s@xášÉl¶^25xt„xNÂcf¼ÝÆ´Û]ëø̆hÑJßÞ2t2o:EïX,ÖòÓÛ0~:vuoq¤‘£ÇL8æ€2^ŽAR•*íò(|GUÿÿÇ$íaýÔ«ØJµ}\xA0†\tZ¼B Ä,z÷ââK‡UþNw‚À¯ÄϘ‹MÍ4‚BIñ)¬\0\0*J8¨J¾UT4Ubr,Õ´Ü­"þ/Ôù+&oàä­d€ñ¹Ùñ$˜¢aöùÙ!¡hÙhŠ.Q`18«AcNO\b·¥k$°-<Ã\')À=_$Ùê‰x]™`IÄÔðÉ 1µ\xA0\0’Ó;ž lSCIàÜ«ïKºcjµÏ5Þ4nŒ­—.JzŽazðë5×é¨8W¹Èû›v(Ê)Új)"QÊ»õ­Ëíuhƒ·óí5–c8Þ¡\\¼¥ÙXE\bÝPrŠÑ43iVM1Ì\tq>üHF®õsS‚Ð<V†…˜8;øp¾¤´^W¯­Â\xA0Ñú1¯BÈ6OW½ÂaÌ%B^ÀìÃó˜uúà]¥hx*dRp?^Zb¦V*æÛzN^.\0hhhm\'n/õïŮ艝!—ðì†W³³\0ùdíN!TäLûO½YYï\b¯X*_–ûW<#Žº•>(—Ç®=Õìg¨“k.´Bxª9S”ûéZô7 Ó1&éd5{–„€Î5”|ä[bp\bü´œq"íYŠ@QÏEx£ëæâk>ÀÈ©ýQ,b’Ï`Œ‡ÄOsbÕpojßäsÅRáA܊ø\nm×iÓMç3Û섆«U?ñÁàéXðÉ\r"ƒ±²\f›êd«ÿøVÑâc!D&n+£§8vò´ñ#XțJi ÊÔߦù\b¾ú\b‹ۚ%ô‘€ûg2ž#Ñaåô½®ÊQÍʒ­.§`ªsc\fRâ Dýf–O“}äzdß¾×9ø|F†”«žéÁ\rÍ-Ÿö]\n“Ù\fM©Ÿˆ§ì„¶Ñýê¡Q\0¶«ç¯]š"È~ÿJÇat1øs°¦Õ¾}ºg-}½Êw‰T“´¾õ¾e\txã•Œ!\r§–3í6†aºÂ?P~}© \r %\t«XáCÈŠ>“ë/dùø¦Ð®éÿÞ\\¡3K2Ö¹m×£)ó8ɶøº«Nw¿m\\9ü\n[KŸa¿g’ÖFgLuš¢a“æ9—":£1¯ZGcçÔýB¨^µL\b.$l¹líkG¯Ù–N[[YHEÎBܪË5C±/£ÆAÿù\t½l@­§û@q¹ÏM"\ròQ\0EÍ}6Þe²ˆ,-((‚üDRŽQ㊦ւVJ@\\ßñoÞ[ä)3mf*W±¼N@òª[„«G…ï쿅×zŠ0¢›á7(\'âfãG‡ž\'T”\t\\¡ýú¦±ÉŒï¿:]0e£˜y¶c\t²J¡2ÑuÓûFaNÎÉ.*»€3˜Õt¶ÒKˆš[0á_㣡ÿ^zß¡R4‹Yzß#Ljü´\':GìuÊZA[w÷\bp~ŸN]Ò°ÅVøZjî#5œ¤/Æû<]J°VÉë!2=IÆj7›+¼ŠË—¾íùØ{û°óñÖàwpûòÙ®ì\xA0íÐJ´H¥uЩLÇ?Öù5#â4>ižÝÿ*wy¥Å\r\xA0_à—¬Þ]‡ytÍîd›©9ºEâ—dÞ§wð¶ï°û&D‡W5)b¿à¾\'½©]{0„ûÇ(¯ÛM-Ë@wÿabBv\rÁôÙGµˆt÷ž]?\niÜjÜî8‚‚KÁlæTÇ;žunµ}©>Æÿ~×~ø}õãÖ±SP=/ÿ+n³–¤1óZ@¢Ó>HKX]oä˜\fu`–H²µç©¢íQl¿1p“Ê°ûÒ#ÿ%÷=•§ Ï{CF·Ñ¯Iù"YpÒ#9\0±É¹D@_±ƒ#I‹ZÂ<ÊÆn;®í¯·åŽ[.à÷C\r†º,e¤~ìfjÝ!ہxR-¯:Ú\t¡aèA6B4¬³Ð¹Ï´ԔÉø&ºNYß{«Ív„3]wHl˅@ö==\ts7kRWݞæ(ü<=\n&gms0ç\fÏB\b$–_jC÷fò´Ý|JˆwW–*Çbډ[%Z´?œ¥tvÈA\\ï;†_Ñ[ööù9ÆéOËÔø@ŽâŸñWó@\0¯g3+Y‡(ß °ï¼ë€Íš3áæ‡ù\r0‰3ÂN1ƒ8M\xA0o;-úÎ*胑éu«9?ƒ7€8\r­ÇR“‘…$Ü!óÏ¢¦îHԒ(pTâ]6\\‚¥0 ߆´r%¨xC»Ä¢R\xA0ä݉E“À̇üõ.&$äh§¾h®î\0&{¢«XµE?„û1N?„@ø##ofª5¤\xA0Û«\0è‚Á^m¶ü­pÁ¦.<É{*\xA0ÛðÂÜ\n:ʼn¼¨çkÓ.߇¯\r‘ȝAÿè\0k¶\nøÕtXË1:¹;åìaž‡“öҜPó„_…b¾pŸ÷§}ÜÐ`áÖÁƒ-™+;⦀|&õY–Ô©Ÿ“*g#DØáñJûŽ¦£ô3}™\xA0nûËFeÿÉC½ÏK/!ùZ¤eËZCóWþò\tŒ\bι+k‹ji©1R…¾QÝ$™ðäàòãLCùÖE–SU9Ñ%„+¢â_õÿ^«P6mfփŒ¼ïnl¹Ý6tm;8Xåã+rëZ¼½3sÔóS\tî.!"5ÿé ÂÏ;>ð\n¨w9njï@Î[‡p¿›nÌð^;Iø/ùç+PݔàÅK-NZ¦!Ñ9ô©5_\b©IULýK÷3À¢¸Íÿqš¿MÙS-b‘F¨3 ò£¤˜ìb7fÃûßÃRò5ÐL°Ë\tm›e”uS–±·ŽÁ‡ú–®{ëóõï\n“*,>hžCvk[8•ÒÊ*\'wU:Òkªñ†½)=Y¨²ÿºeUÝx,Ÿ}­‹\b^ƒÈkºÞˆåªiC“J‡c-o*8xÀ»Ð“~93]È\f¦Ôº.t6Üùi¼"ã[ïЕµz‚N„Uü¡ÏÁœVížGÙ1r¡}‡(h‘iœ±îÓ¦Uþ¯c/wbþÄm5–¿Q±èñ\'o9¡¾ÌToÞÝÌñ@Ș1äuר/—#w…_ž·:nA’ÎqDÕ>àc7ã%#žÆ]³´¢‡T6k7_=t–/lë¢ë ajêfhøkp¢dWNçËØN\'‚ï›g­‘^¾ô“\tlàð].Òü<n=Go«ù˜@VjòX\f§ùewVp&òܝ=¬B3³î\\T× ^ÞS†’å\xA0wØ83õ"m‰‹ŽˆÆL,áVGþ–zd@í‹s$õþó›À~\nºšòM\0&¾hk?×òßÇHÄg{N2RÔÈб7O;/Ov:Ó×\fÁ†;¯O¶ k!=Óø\f2­[~#4­<­Î¸†6#”ýþ‘ñüX”ב\r:\0ìr×èr+TT˜k<ߣûªV¸LSxßÈA1»÷¾iR7¹JS¤\bŸ tV‚]YM\rÝÇ.â\bBRžÅ{\t‰ŒáÆ®\'ËÆþyÊCtçð·\r υóàâA\f­‘„à„ØO¤\\6Ã"”?ÃPKEh®Pôú÷BF¤K•*•?ÿü_¥ÚQ Gì—hf“8<˜s<\bXÔ9»À=\\Bٗ&¸¿Áb•NV­0H˟i”„âmsh`€%6ØË))3Þ±lÒ\tÈÀ“‡ÇÅó}“&š›ÕØÑ\0\xA0¤f\b*?xvKñ‹úÎ͛5A8fêÜÿ#ooâ Äö<.R‚&ŸâtðDuÎàpñ¬•H¿xíHTPÏ–™˜A-ŸÑ˜Æ7Ý`β¤ßF»6T‡Ô¤5#þH¥¸«zt8gîD¡?Æ\0î½&ùã5ƒŠª,»NŽ-:ÎåbÕ\b‰V¨Nû\f™P$mNXƒ˜ÚQª½QKøû´¯"ç˜Rð§/…å7Ю½ûVXe䘑ÆlÈҊ”âÚÉà:=ú+øñ•ý›pTóÙ¢Â2dÚK]÷_Û\\§¼QíüCL~,n"v,ûÄbÂuÖì‰ÄÏ=ÅJ&l§tÆ¡þkÇrù衏Z-¹ëk#´aw¹G\\GÄ\\õœ‚hf®GÀ¹Ú׏·•Rs=¤¾í½iúQ<>Ñ&ÕT§Ü\tlæú@ë¸ãýH›^çˆÂ•àl¯úWáÈPÚÿBfg>Öú¨ÿCI7Qõû݇•ÙÛ?´Œ®Pb[ß\b÷o½ÏLþüNí›ßív~ÞÜ¿éQ통žK!ÀíŸE\0ÇåyÂ6/‚nW¶üÔ°…§ƒúXzu\xA0gq,a\\–󦐨;Æ:4ӋÃ2¤Qc¥@\'Óé4é@¦‹­‹RSw›ð\'iV"™aؽj“¼T€($<g\'C-ÁŒEƓ5¬¼ÿ^N¦°·à~õn,ÒnÀûm˜ð{ŒÈëÑÒ¡ÓÙxÍòPÎ`? ™ä1%ïòVÜt×Ø?âKŬ¨öñ&v‘@DàZ×\'ÏÙL¾Îõ~ÜD±ïC³+?Qמ€9Š‡)øzn‘tÖéTh1àS§¨üD*$Àâštèƒ˜û„ÏŽÃÙv\0§\xA0x‰«ðZ&™ÿÿ-¢’:m°ø¶ûs\\ò(ÖÉ/@\fŠ„¬˜¹hLÄتï¶%ÉZ3)GHºMÒ\0:”²\'(¡ºgY˄‹«Ý,}꽔ôã&w²¾æzÛåççÛ}luH"$ñU ©K\r´WqßCý¼*€lÅÞæÚ§³Š“@nèîGƒ…²ÇvÍ:dRA…„‘_Võ¼ßÅ[e‘|–IYíp{d]{%UbE¬â“P:,\r(a˵X^ò‹ŸAúÛG£ì4HGnMµGý#°¹\\Hà~±¼´\fú\xA0éúcZj¬\rWááßórQˆW‡_7C¶í)û3Z,[“Ì¿vûŠåôb: »`ܛèïV¿-=òV–¤9Æ7’ßM"\n÷Éo|rB‚ͳ‘¬ß7ëêk9¦Ò6nÂ@5¸DÖ¥ã<\r”×oIDfí¶Í\0$`Ě:°e©i‘‚ÞAŠð›m".®ß×óÌÚZni®í[Å\f€A¼0-\fÓ\b \0ëc‹FG––Íç"®2tM!ôöÝi¥Q{J¦mÄUÝùrlƋ&\'µ|ºç4^ʘÝ£}#²aÛS[\n*v~X\b÷Œ“7ú™:"3„Ǿw™Œ=9SÛ\n¦P€]ï¼\0”-4\fÇ<d¼­P†38ɖÂ6×NQJ\0\0\0\0\0\0\0\05VJC-ýiS'
    
    response = requests.post('https://rbm-rtbf.live.ott.irdeto.com/licenseServer/widevine/v1/rbm-rtbf/license', params=params, headers=headers, data=data)
    # params inserted below will be passed to data-raw 
    
    token = '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'
    provider = 'kakaotv'
    
    
    releasePid = "_qVpiY31v_oU"
    # response = requests.post('https://widevine-proxy.ott.yandex.ru/proxy', headers=headers, cookies=cookies, data=data)
    
    # print(f'{chr(10)}widevine_license: {response.content}')
    #NB. Original query string below. It seems impossible to parse and
    #reproduce query strings 100% accurately so the one below is given
    #in case the reproduced version is not "correct".
    # response = requests.options('https://api.ott.kinopoisk.ru/v12/license-affected-content-metadata?contentIds=4b63db58ab27e92b90a457e533b00007&serviceId=25', headers=headers)
    # dash-cenc/hdr10_uhd_hevc_ec3.mpd
    # https://strm.yandex.ru/vh-ottenc-converted/vod-content/4315082489d87677b21f7c83593fcb73/8614535x1631802676x41611665-4e76-41ac-93a7-5070b77b5f3c/dash-cenc/sdr_uhd_hevc_ec3.mpd
    
    # 'GET /certificate HTTP/1.1'
    
    opened by cmoulliard 3
  • Facing Error

    Facing Error " unable to parse license - check protobufs "

    Hey, Admin @medvm Can u check this what happens here ??

    Error Problem : [ unable to parse license - check protobufs ]

    IS THIS SCRIPT STILL WORKING or I'M DOING ANYTHING WRONG ??

    Screenshot 2022-08-05 151706

    add site support 
    opened by Ayu5hixD 0
  • ValueError: Ciphertext with incorrect length.

    ValueError: Ciphertext with incorrect length.

    Hello , I ran the l3.py eyerything looks good and I get the license_content.bin file but I got this error .

    Traceback (most recent call last):
      File "C:\widevine\l3.py", line 130, in <module>
        correct, keys = WV_Function(pssh, lic_url)
      File "C:\widevine\l3.py", line 94, in WV_Function
        wvdecrypt.update_license(license_b64)
      File "C:\widevine\wvdecryptcustom.py", line 58, in update_license
        self.cdm.provide_license(self.session, license_b64)
      File "C:\widevine\cdm\cdm.py", line 285, in provide_license
        session.session_key = oaep_cipher.decrypt(license.SessionKey)
      File "C:\Users\PEO.MAD\AppData\Roaming\Python\Python310\site-packages\Cryptodome\Cipher\PKCS1_OAEP.py", line 167, in decrypt
        raise ValueError("Ciphertext with incorrect length.")
    ValueError: Ciphertext with incorrect length.
    

    I don't know how to solve this issue.

    opened by bassamh1977 2
  • l3.py getting error

    l3.py getting error

    py l3.py /usr/bin/py:16: DeprecationWarning: Using or importing the ABCs from 'collections' instead of from 'collections.abc' is deprecated since Python 3.3, and in 3.9 it will stop working from collections import Iterable Traceback (most recent call last): File "/usr/bin/py", line 167, in result = eval(args.expression) File "", line 1, in l3.py NameError: name 'l3' is not defined

    add site support 
    opened by maanich 0
  • TypeError

    TypeError

    Traceback (most recent call last): File "/home/user/widevine_keys/l3.py", line 130, in correct, keys = WV_Function(pssh, lic_url) File "/home/user/widevine_keys/l3.py", line 39, in WV_Function wvdecrypt = WvDecrypt(init_data_b64=pssh, cert_data_b64=cert_b64, device=deviceconfig.device_android_generic)
    File "/home/user/widevine_keys/wvdecryptcustom.py", line 33, in init self.session = self.cdm.open_session(check_pssh(self.init_data_b64), deviceconfig.DeviceConfig(self.device)) File "/home/user/widevine_keys/wvdecryptcustom.py", line 19, in check_pssh pssh = base64.b64decode(pssh_b64) File "/usr/lib64/python3.9/base64.py", line 80, in b64decode s = _bytes_from_decode_data(s) File "/usr/lib64/python3.9/base64.py", line 45, in _bytes_from_decode_data raise TypeError("argument should be a bytes-like object or ASCII " TypeError: argument should be a bytes-like object or ASCII string, not 'dict'

    Got this error while attempting to derive keys for a show on BYUtv (free) for a friend. Any help would be appreciated.

    opened by f0n1x 1
Owner
Mikhail
Mikhail
This exploit allows to connect to the remote RemoteMouse 3.008 service to virtually press arbitrary keys and execute code on the machine.

RemoteMouse-3.008-Exploit The RemoteMouse application is a program for remotely controlling a computer from a phone or tablet. This exploit allows to

Podalirius 25 Dec 4, 2022
Script to calculate Active Directory Kerberos keys (AES256 and AES128) for an account, using its plaintext password

Script to calculate Active Directory Kerberos keys (AES256 and AES128) for an account, using its plaintext password

Matt Creel 27 Dec 20, 2022
A bitcoin private keys brute-forcing tool. Educational purpose only.

BitForce A bitcoin private keys brute-forcing tool. If you have an average computer, his will take decades to find a private key with balance. Run Mak

Gilad Leef 2 Dec 20, 2022
This tool was created in order to automate some basic OSINT tasks for penetration testing assingments.

This tool was created in order to automate some basic OSINT tasks for penetration testing assingments. The main feature that I haven't seen much anywhere is the downloadd google dork function where this function first perform basic google dorking to find the targets public documents. These documents will then be downloaded to the attackers computer and can be used further to identify metadata about the client.

Tobias 5 May 31, 2022
This is an advanced backdoor, created with Python

Backdoor This is a Backdoor, created with Python 3. Types of Commands: Downloading / Uploading files. Launching / Deleting / Reading file's content. S

swagkarna 28 Oct 28, 2022
Port scanning tool that uses Python3. Created by Noble Wilson

Hello There! My name is Noble Wilson and I am an aspiring IT/InfoSec coder practicing for my future. ________________________________________________

null 1 Nov 23, 2021
Pass2Pwn: a simple python3 tool created to assist penetration testers generate possible passwords for a targeted system based solely on the organization's name

Pass2Pwn is a simple python3 tool created to assist penetration testers generate possible passwords for a targeted system based solely on the organization's name

Nirmal Dahal 10 Oct 15, 2022
A set of blender assets created for the $yb NFT project.

fyb-blender A set of blender assets created for the $yb NFT project. Install just as you would any other Blender Add-on (via Edit->Preferences->Add-on

Pedro Arroyo 1 May 6, 2022
Automated tool to find & created Exploit Poc for Clickjacking Vulnerability

ClickJackPoc This tool will help you automate finding Clickjacking Vulnerability by just passing a file containing list of Targets . Once the Target i

Chirag Agrawal 24 Dec 19, 2022
MD5-CRACKER - A gmail brute force app created with python3

MD5-CRACKER So this is my first app i created with python3 . if you guys downloa

null 2 Nov 10, 2022
😭 WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464.

?? WSOB (CVE-2022-29464) ?? WSOB is a python tool created to exploit the new vulnerability on WSO2 assigned as CVE-2022-29464. CVE-2022-29464 details:

0p 25 Oct 14, 2022
A collection of over 5.1 million sub-domains and assets belonging to public bug bounty programs, compiled into a repo, for performing bulk operations.

?? Public Bug Bounty Targets Data By BugBountyResources A collection of over 5.1M sub-domains and assets belonging to bug bounty targets, all put in a

Bug Bounty Resources 87 Dec 13, 2022
This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit

CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, re

ASL IT Security 168 Nov 9, 2022
Colin O'Flynn's Hacakday talk at Remoticon 2021 support repo.

Hardware Hacking Resources This repo holds some of the examples used in Colin's Hardware Hacking talk at Remoticon 2021. You can see the very sketchy

Colin O'Flynn 19 Sep 12, 2022
This repo explains in details about buffer overflow exploit development for windows executable.

Buffer Overflow Exploit Development For Beginner Introduction I am beginner in security community and as my fellow beginner, I spend some of my time a

cris_0xC0 11 Dec 17, 2022
This repo is about steps to create a effective custom wordlist in a few clicks/

Custom Wordlist This repo is about steps to take in order to create a effective custom wordlist in a few clicks. this comes handing in pentesting enga

null 2 Oct 8, 2022
RedTeam-Security - In this repo you will get the information of Red Team Security related links

OSINT Passive Discovery Amass - https://github.com/OWASP/Amass (Attack Surface M

Abhinav Pathak 5 May 18, 2022
RedDrop is a quick and easy web server for capturing and processing encoded and encrypted payloads and tar archives.

RedDrop Exfil Server Check out the accompanying MaverisLabs Blog Post Here! RedDrop Exfil Server is a Python Flask Web Server for Penetration Testers,

null 53 Nov 1, 2022
Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage and potential attacks.

Dependency Combobulator Dependency Combobulator is an Open-Source, modular and extensible framework to detect and prevent dependency confusion leakage

Apiiro 84 Dec 23, 2022