Re: Adobe HDS Downloader

karlo2105 · #81 03-21-2013, 07:58 PM

You are right it doesn't work.

Code:

php AdobeHDS.php --manifest "http://daserste_live-lh.akamaihd.net/z/daserste_int@91203/manifest.f4m?hdcore&hdcore=2.10.3&g=OWWZULMGVPCN" --delete --auth "pvtoken=st%3D0000000000%7Eexp%3D9999999999%7Eacl%3D%252f%252a%7Edata%3DZXhwPTEzNjM5OTk3MTJ+YWNsPSUyZip+ZGF0YT1wdmMsc35obWFjPTI1ODI3MzAyNmVmMThjZjI5YzYwYjI3Yjg3NDM5NDIxNDZiMzdlYzQ0MjkyOTRkNzY1NWJjNGQ4NmZhNWI3YmE%3D%212h9klBy593CyIgKa8MHTYJIh7SgV9vPM5hKFVK+wywA%3D%7Ehmac%3D76872EAE24E6459F7455DDDDCBCAD0AFBD6DA54215431205CEB2D4D844BFA00D&hdcore&als=0,8,0,4,0,NaN,0,0,0,47,f,8583656,8583666.33,t,s,OWWZULMGVPCN,2.10.3,47&hdcore=2.10.3" --useragent "Mozilla/5.0 (Windows NT 5.1; rv:19.0) Gecko/20100101 Firefox/19.0"

                            KSV Adobe HDS Downloader

Processing manifest info....
Quality Selection:
 Available: 1600 960 576 320 160
 Selected : 1600
^Cdating bootstrap info, Retries: 1

# Netscape HTTP Cookie File
# http://curl.haxx.se/rfc/cookie_spec.html
# This file was generated by libcurl! Edit at your own risk.

.daserste_live-lh.akamaihd.net	TRUE	/z/daserste_int@91203/	FALSE	0	_alid_	2h1lcECr0mI7g2JUUDGeNw==
.daserste_live-lh.akamaihd.net	TRUE	/	FALSE	0	PV-IDENT	exp=1364000243~acl=%2f*~hmac=0b95a14d9a70b0b6c84fcb127d87a7db5f503b240ee93a3d3e201cea412830a6
daserste_live-lh.akamaihd.net	FALSE	/z/daserste_int@91203/	FALSE	315576000	PV-IDENT	exp=1364000191~acl=%2f*~hmac=7de53083b2dca9e7651af7f224aecbdfe43be0b06828883328278264cad1b628

KSV · #82 03-22-2013, 02:13 AM

Quote:

Originally Posted by biashead

What can be the problem with the HDS Link Detector?

HDS Link Detector works as expected and detects proper url with all required parameters.

Code:

php AdobeHDS.php --manifest "http://daserste_live-lh.akamaihd.net/z/daserste_int@91203/manifest.f4m?hdcore&hdcore=2.10.3&g=TYFYBYPBCUZW" --delete --auth "pvtoken=st%3D0000000000%7Eexp%3D9999999999%7Eacl%3D%252f%252a%7Edata%3DZXhwPTEzNjQwMjIzNzV+YWNsPSUyZip+ZGF0YT1wdmMsc35obWFjPWVmYjUzMzAwY2U2NWU3NDA2NmU4Yzc3NzkxYmRjOGEwZDMyNmMxMzQxYzQ5ZjgyNWU0ZmI2ZTA4MjhkNjhlM2M%3D%212h9klBy593CyIgKa8MHTYJIh7SgV9vPM5hKFVK+wywA%3D%7Ehmac%3DA94A96FB21B91C6ECB0F74FA9271F3BE1F4AD12AAE933CDB7548053BF628664E&hdcore&als=0,8,0,0,0,NaN,0,0,0,58,f,8606330,8606340.34,t,s,TYFYBYPBCUZW,2.10.3,58&hdcore=2.10.3" --useragent "Mozilla/5.0 (Windows NT 5.1; rv:19.0) Gecko/20100101 Firefox/19.0"

Code:

                            KSV Adobe HDS Downloader

Processing manifest info....
Quality Selection:
 Available: 1600 960 576 320 160
 Selected : 1600
Downloading 227322688/227322688 fragments

There was a little bit of security trick involved. script wasn't using the auth parameter with bootstrap requests and server was sending wrong bootstrap info in that case. i have fixed that in my repo. update your script either manually or

Code:

php AdobeHDS.php --update

Dream_Team100 · #83 03-25-2013, 08:08 AM

Hi

Is it possible to take this stream via X-Forwarded-For. It works for me only with "--proxy --fproxy", but the proxies are too slow.

http://live.stream.vrt.be/vrt_sporza...p/manifest.f4m

The stream is not always online.
http://sporza.be/cm/sporza/matchcenter/mc_wielrennen

Thanks in advance

sunj · #84 03-25-2013, 12:59 PM

Hi KSV, your HDS link dectetor working perfect for http://www.cielotv.it/cielolive.html but the stream not start, i past batch process:

Code:

C:\PHP>php AdobeHDS.php --manifest "http://cieloslive-f.akamaihd.net/z/test_4@27
985/manifest.f4m?hdnea=st=1364232758~exp=1364233058~acl=/z/test_4*~hmac=39d7c431
d76a00552d307d556a23c4f17d591112c0cf0f6473066ba9ea1cfa17&hdcore=2.7.6&g=EZMNTADH
MZVO" --delete --auth "hdntl=exp=1364319159~acl=fzftest_4*~data=hdntl~hmac=c914d
0b88babeb63f4cbefa0739930994e202d7fb0467e2865e6b3e813061290&als=0,2,0,1,0,NaN,0,
0,0,24,f,28451024,28451034.17,t,s,EZMNTADHMZVO,2.7.6,24" --useragent "Mozilla/5.
0 (Windows NT 6.1; WOW64; rv:19.0) Gecko/20100101 Firefox/19.0"

                            KSV Adobe HDS Downloader

Processing manifest info....
Quality Selection:
 Available: 1064 564
 Selected : 1064
Access Denied! Unable to download fragments.

C:\PHP>pause

Any solution?
Tanks

Velcro · #85 03-25-2013, 01:12 PM

Quote:

Originally Posted by KSV

@IV
following is the info i posted long ago in now deleted thread. This is only related to custom encryption used by Akamai CDN (Packet type 10 & 11) not FlashAccess DRM (Packet type 40 & 41).

==========
I am just posting it publicly. this info is based on actual reversing i tried few months ago. global key is different for each session. SessionID and KeyUrl are not of much relevance because they are only used to retrieve GlobalKey. mysterious salt block in each packet header can be broken into 4 different blocks. first was always 01 and third block was always all zeros.

Code:

SessionID: 010075cd3e8441c5f40f4427ae4f93e8b2b00a1b6740eda2fd0049958d1532318bd1423ec94a2c3f4074ede220dd615b9d588f6ad1ef
GlobalKey: acfab40e035ee120520fc77d1e532c20

FirstTag:
Header: 0c000000004fae27440000ffff IV: e7b25c7a1d67280a8681ba4314e1e66d KeyUrl: /z/0809/20090106_1_dvorak_slavonic-dance/h264_high_,0700,1100,1500,2000,2500,.mp4.csmil/key_AQB1zT6EQcX0D0Qnrk+T6LKwDRtnQO2i%2fQBJlY0VMjGL0UI+yUosP0B07eIg3WFbnViPatHv
Salt?:  01 b7199175c7c7dbea80f9eda39a5b6b0abf2b17dac035636c6667331243aefdec 0000000000000000000000000000000000000000 dc11391dd7c0211c95c3c1e597665f850f01d2c0

EncryptedBlock:      2df9494fdac3355db2cb942258641fe0 2709b1ec662e8897bf78ad0acf14184b e5c7e47f9e95d918bd6dad1560f2c6a2 31c1da18311e01000568e98d3525
DecryptedVideoFrame: 170000000001640028ffe10029676400 28ac2ca703c045fbc05a808080a00000 0300200000065c1400186a0000e4e17e 31c1da18311e01000568e98d3525

SecondTag:
Header: 0c000000004fae27440000fffb IV: e7b25c7a1d67280a8681ba4314e1e66d
Salt?:  01 25bfbacb92b3c6b837ca6a47ef20a8a77defbc631124bfa5b5e6b2cc0c58fe6d 0000000000000000000000000000000000000000 46d3344f230830a040d4fc6d3751f6ff83f8cbea

EncryptedBlock:      af0011900000
DecryptedAudioFrame: af0011900000

Encryption scheme used is AES-128-CBC. i couldn't figure out the KDF (key derivation function) used to derive individual packet decryption key from global key using the salt block as shown above. KDF function is executed inside Alchemy VM (a method used to execute c code from ActionScript VM) which makes it very hard to reverse engineer from disassembled code.
==========

KSV, what about FlashAccess DRM? Do you have an idea on a how protection scheme works, and to break it?

Thanks

TorresRJ · #86 03-26-2013, 06:44 PM

This message appears at the end. Waiting eagerly for the updates, it seems that the time to break encryption is near! Good job, KSV!

Code:

Processing manifest info....
Quality Selection:
 Available: 658
 Selected : 658
This stream is encrypted with Akamai DRM. Decryption of such streams isn't currently possible with this script.

KSV · #87 03-26-2013, 11:19 PM

Quote:

Originally Posted by sunj

but the stream not start, i past batch process:
.....
Any solution?
Tanks

You need to be little quick while using the command provided by add-on. for some websites manifest url is only valid for few seconds.

Quote:

Originally Posted by Velcro

KSV, what about FlashAccess DRM? Do you have an idea on a how protection scheme works, and to break it?

No, but FlashAccess uses even better methods to secure it's communication with Authentication Server unlike Akamai which sends global key in plain text.

Quote:

Originally Posted by TorresRJ

Waiting eagerly for the updates, it seems that the time to break encryption is near!

Don't get your hopes too high. he has actually quoted a very old post.

Velcro · #88 03-27-2013, 12:49 AM

Quote:

Originally Posted by KSV

No, but FlashAccess uses even better methods to secure it's communication with Authentication Server unlike Akamai which sends global key in plain text.

Here is a link to an HLS protected stream played under Android: http://vod-and.llnw.cdn.m6web.fr/phl..._600k.mp4.m3u8 I know HLS != HDS but you may find some answers here...

AwwwYeeah · #89 04-02-2013, 03:06 AM

I'm in waaaay over my head here. Most of what I've read in this thread and on the AdobeHDS github wiki might as well be messages from aliens, since I'm comprehending all of this at about the same level.

I started a thread here, and was directed to AdobeHDS as a possible solution. But like I said, this stuff isn't making any sense to me. So let me talk this out. These are the steps I'll need to perform, correct me if I'm wrong (I'll be wrong... especially since I don't even know where the php code goes).

1. copy the code at github into a file called AdobeHDS.php (??)
2. install php 5
3. install the Firefox addon
4. run php from command prompt
5. navigate to video page
6. copy the pop-up url and paste it into the command prompt window
7. download begins
8. ???
9. PROFIT

Is this right? It can't be. There has to be something missing (probably lots of somethings) since there was more stuff on the wiki page that I don't understand, along with the fact that I don't know where the php code goes. Do I put it in the php folder?? Do I paste it into the command prompt? Does php run on any Windows OS without any additional requirements? WTF?? I'm so confused.

Sorry for being a total moron. Any clarification would be appreciated.

tstolik · #90 04-02-2013, 09:56 AM

please
it is possible to download fragments from rutube.ru?

like this one
http://rutube.ru/video/dba279a5b89df...d060b0ac63221/

can saomebody to write all steps to doanload.
the firefox addon didnt give me the links