PDA

View Full Version : About capturing AES-128 encrypted stream


wanch
05-24-2016, 09:55 PM
Part of the network flow

"000124", "五月 25, 11:05:25", "http://iac2.wowza-rr-vod.edgeware.tvb.com/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?sig=99642f69b582b531d0de64e6c8a25b7c&ext_start_limit=1464152725&int_start_limit=1464152725&ts=1464152725", "GET m3u8 file (relative)", "", "37232000", "202.126.53.21"
"000127", "五月 25, 11:05:25", "http://202.126.56.113:80/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?token=0c2e803e0e65de834f43fc9c77eb8a 6b_1464152725_1464152725", "http m3u8 file", "", "37232264", "202.126.53.21"
"000128", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?token=0c2e803e0e65de834f43fc9c77eb8a 6b_1464152725_1464152725", "GET m3u8 file (relative)", "", "37232352", "202.126.56.113"
"000129", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzE vNjk3MDIyLzI0MDgyOC50dG1s.m3u8", "GET m3u8 file (relative)", "", "37232440", "202.126.56.113"
"000132", "五月 25, 11:05:25", "mysp://kms.mps.tvb.com/kms/playback?contentid=697022&segmentid=0", "mysp", "", "37232704", "202.126.56.113"
"000133", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b48000_ao_slCantonese_t64Q2FudG9uZXNl_cf dmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG 1s.m3u8", "GET m3u8 file (relative)", "", "37232792", "202.126.56.113"
"000134", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlelist_lzho_b48000_slCantonese_t64Q2FudG9uZX Nl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyO C50dG1s.m3u8", "GET m3u8 file (relative)", "", "37232880", "202.126.56.113"
"000136", "五月 25, 11:05:25", "http://crl3.digicert.com/ssca-sha2-g5.crl0", "http crl0 file", "", "37233056", "202.126.60.231"
"000137", "五月 25, 11:05:25", "http://crl4.digicert.com/ssca-sha2-g5.crl0L", "http crl0L file", "", "37233144", "202.126.60.231"
"000138", "五月 25, 11:05:25", "https://www.digicert.com/CPS0", "https", "", "37233232", "202.126.60.231"
"000139", "五月 25, 11:05:25", "http://ocsp.digicert.com0F", "http", "", "37233320", "202.126.60.231"
"000140", "五月 25, 11:05:25", "http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt0", "http crt0 file", "", "37233408", "202.126.60.231"
"000141", "五月 25, 11:05:25", "www.digicert.com1", "domain/unknown", "", "37233496", "202.126.60.231"
"000142", "五月 25, 11:05:25", "http://ocsp.digicert.com0{", "http", "", "37233584", "202.126.60.231"
"000143", "五月 25, 11:05:25", "http://crl3.digicert.com/DigiCertGlobalRootCA.crl07", "http crl07 file", "", "37233672", "202.126.60.231"
"000144", "五月 25, 11:05:25", "http://crl4.digicert.com/DigiCertGlobalRootCA.crl0=", "http crl0= file", "", "37233760", "202.126.60.231"
"000150", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b904000_vo_0.ts", "GET ts file (relative)", "", "37234288", "202.126.56.113"
"000163", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b48000_ao_slCantonese_t64Q2FudG9uZXNl_0.aac", "GET AudioMedia file (relative)", "", "37235520", "202.126.56.113"
"000164", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlechunk_lzho_b48000_slCantonese_t64Q2FudG9uZ XNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgy OC50dG1s_0.webvtt", "GET webvtt file (relative)", "", "37235432", "202.126.56.113"
"000165", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b904000_vo_34.ts", "GET ts file (relative)", "", "37235784", "202.126.56.113"
"000166", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b48000_ao_slCantonese_t64Q2FudG9uZXNl_34.aac", "GET AudioMedia file (relative)", "", "37235608", "202.126.56.113"
"000167", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlechunk_lzho_b48000_slCantonese_t64Q2FudG9uZ XNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgy OC50dG1s_25.webvtt", "GET webvtt file (relative)", "", "37235872", "202.126.56.113"


This is the video file

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzE vNjk3MDIyLzI0MDgyOC50dG1s.m3u8


This is the audio file

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b48000_ao_slCantonese_t64Q2FudG9uZXNl_cf dmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG 1s.m3u8


This is the subtitle file not encrypted

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlelist_lzho_b48000_slCantonese_t64Q2FudG9uZX Nl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyO C50dG1s.m3u8


Probably the key part?

#EXT-X-KEY:METHOD=AES-128,URI="mysp://kms.mps.tvb.com/kms/playback?contentid=697022&segmentid=0"

Terenz
05-25-2016, 07:05 AM
Post the original link. What method did you use for get the network flow?

wanch
05-25-2016, 08:37 AM
it is URLSnooper
this is all I can provide because it is an android app which is limited in hk and need to login
or any other info that I can provide?

Terenz
05-25-2016, 08:54 AM
I don't know how to help without access to the stream and in this case is impossible, sorry. I have found another thread with the same URI
http://stream-recorder.com/forum/capture-encrypt-m3u8-playlist-t20654.html

But on my side, for the video on the #3 post, i don't see any encrypted content for the "chunks.m3u8"

EXTM3U
#EXT-X-VERSION:3
#EXT-X-ALLOW-CACHE:NO
#EXT-X-TARGETDURATION:5
#EXT-X-MEDIA-SEQUENCE:19713
#EXTINF:2.002,
l_20_59146203_19713.ts?nimblesessionid=etc.

Maybe is changed, i don't know.

wanch
05-25-2016, 10:40 AM
Thanks for your quick reply
I double check the link, I think they are time-bounded
the following is a new link
it is a m3u8 containing the video part
don't know if it can help

or another method for me to extract useful info from the app?
it has android and ios version

http://202.126.56.112/session/d7b77780-2296-11e6-bc74-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzE vNjk3MDIyLzI0MDgyOC50dG1s.m3u8

thaonguyenxanh
07-08-2016, 07:02 PM
Thanks for your quick reply
I double check the link, I think they are time-bounded
the following is a new link
it is a m3u8 containing the video part
don't know if it can help

or another method for me to extract useful info from the app?
it has android and ios version

http://202.126.56.112/session/d7b77780-2296-11e6-bc74-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzE vNjk3MDIyLzI0MDgyOC50dG1s.m3u8


http://202.126.56.116/session/e18f42fc-456d-11e6-88dc-005056b15a5f/kqb4nk/cleardrmv/vipo/_definst_/vipo/mytvsuper5/10448/clear_000001044766.smil/playlist.m3u8?token=ff14f125126db8809c7743d659b0ef 80_1468025191_1468025191
I help get link to you

LAKB8
10-17-2016, 01:17 AM
http://202.126.56.116/session/e18f42fc-456d-11e6-88dc-005056b15a5f/kqb4nk/cleardrmv/vipo/_definst_/vipo/mytvsuper5/10448/clear_000001044766.smil/playlist.m3u8?token=ff14f125126db8809c7743d659b0ef 80_1468025191_1468025191
I help get link to you

how can u get this link?

what kind of tool you use to get this link?

THX!

thaonguyenxanh
10-17-2016, 02:00 AM
how can u get this link?

what kind of tool you use to get this link?

THX!
Get ok. But not down.

LAKB8
10-17-2016, 06:27 AM
Get ok. But not down.

how can u get this part "/cleardrmv/vipo/_definst_/vipo/"

thaonguyenxanh
10-17-2016, 07:08 AM
how can u get this part "/cleardrmv/vipo/_definst_/vipo/"
Github you. But i'm not down. You are down MYTVSUPER down

atzseocom
10-18-2016, 03:20 AM
B?*i Ä‘Ä?ng sao nhiá»?u link thá??. đừng spam nha bá??n