Audio/video stream recording forums (http://stream-recorder.com/forum/index.php)
-   Video stream recording (http://stream-recorder.com/forum/forumdisplay.php?f=4)
-   -  

Decrypt AES-128 encrypted video files from a m3u8

(http://stream-recorder.com/forum/showthread.php?t=18317)

jkg 07-13-2014 07:47 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
I know it's not much but if anyone can help me successfully capture an AES-128 encrypted file, I'll send $5 in Paypal as a gift without fees in return.

I mentioned it briefly about 2 posts above, if anyone thinks they can help then please contact me via PM. Thanks a ton in advance.

jkg 07-16-2014 04:28 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
I'll bump it up to $10 via paypal that I'll send to anyone who could help me successfully capture or get around the encryption. Sounds like other people have done it so it seems possible. If anyone thinks they can help or has experience with it then please PM me, thanks a lot.

jkg 07-17-2014 12:45 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
There was a reply here from someone but it's gone now. To answer those questions, no, it doesn't seem like I can download the m3u8 file when logged out, I think the link expires. Also the m3u8 link has a token number and my username/email address in the URL.

I should also clarify that I don't necessarily know of anyone who has successfully done captures from this site, what I meant was that it seems like some people here on this forum have had success with AES-128 encryption so it seems possible.

I'd greatly appreciate any help and I'm still more than happy to offer that paypal donation if anyone can help me succeed. Thanks a lot.

jkg 07-22-2014 12:49 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Final post. I'm increasing the bounty to $25 paypal donation, which I will give to anyone who can come up with a working method to successfully capture the AES-128 encrypted files that I'm trying to deal with.

The particular file I want the most expires within about 4 days and no one that I've talked to so far has been able to help.

The problem seems to be that they're encrypted with AES-128 but there is no key or link contained within the manifest file so I really have no idea what to do. I tested the trial version of GetFLV, but all that happens is it reports a "m3u8 error" or downloads a file of 0 bytes. FFmpeg also gave an HTTP 403 forbidden error. If anyone else wants to PM me or try to help I'd greatly appreciate it. Thanks a lot.

rubiohiguey 08-07-2014 01:33 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Hello

Anybody can help me with downloading (or better to say decrypting) these .ts fragments?

http://player.ooyala.com/player/ipad...y0V4_1500.m3u8

The link contains URL to fragments and URI to key (though when I access the URI link directly it says invalid key).

As I am not interested in just this single video, but more from the website, if you can show me how to download/decrypt these videos I am willing to give quite a nice donation!

Thank you!

chap 08-07-2014 02:10 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by rubiohiguey (Post 69634)
Hello

Anybody can help me with downloading (or better to say decrypting) these .ts fragments?

http://player.ooyala.com/player/ipad...y0V4_1500.m3u8

The link contains URL to fragments and URI to key (though when I access the URI link directly it says invalid key).

As I am not interested in just this single video, but more from the website, if you can show me how to download/decrypt these videos I am willing to give quite a nice donation!

Thank you!

link page video

addaru 08-07-2014 03:45 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
hi
can you please look also at this?
http://www68.zippyshare.com/v/66365666/file.html

rubiohiguey 08-07-2014 04:02 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by rubiohiguey (Post 69634)
Anybody can help me with downloading (or better to say decrypting) these .ts fragments?
http://player.ooyala.com/player/ipad...y0V4_1500.m3u8
The link contains URL to fragments and URI to key (though when I access the URI link directly it says invalid key).
As I am not interested in just this single video, but more from the website, if you can show me how to download/decrypt these videos I am willing to give quite a nice donation!

Quote:

Originally Posted by chap (Post 69636)
link page video

The very page is this:
http://www.mundofox.com/videos/el-ca...sodio-50-19722

However this page streams F4F fragments (AdobeHDS) which are encrypted (so KVS tool AdobeHDS.php will not work on this)
http://ak.c.ooyala.com/Fib3E1bjoGdZ7..._s25y0V4_1.f4m
with a sample fragment
http://ak.c.ooyala.com/Fib3E1bjoGdZ7...1280Seg1-Frag1

From googling and some trial and error, I was able to replicate the ipad player link, which is in m3u8 format

chap 08-07-2014 04:53 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
1 Attachment(s)
rubiohiguey
try use

rubiohiguey 08-07-2014 05:07 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by chap (Post 69639)
rubiohiguey
try use

I started to grab the stream with ffmpeg, but ffmpeg stopped working on 00:59:58 I guess that is the encrypted packet

I ran "ffmpeg -i 1.m3u8 -c copy ooyala.ts"

Edit: It looks like the problem/shutdown happens when it comes to the second key in the playlist

Any suggestion?

chap 08-07-2014 05:32 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
try use ffmpeg december 2013
work fine
Code:

ffplay version N-58485-ga12b4bd Copyright (c) 2003-2013 the FFmpeg developers
  built on Nov 26 2013 22:01:46 with gcc 4.8.2 (GCC)
  configuration: --enable-gpl --enable-version3 --disable-w32threads --enable-av
isynth --enable-bzlib --enable-fontconfig --enable-frei0r --enable-gnutls --enab
le-iconv --enable-libass --enable-libbluray --enable-libcaca --enable-libfreetyp
e --enable-libgsm --enable-libilbc --enable-libmodplug --enable-libmp3lame --ena
ble-libopencore-amrnb --enable-libopencore-amrwb --enable-libopenjpeg --enable-l
ibopus --enable-librtmp --enable-libschroedinger --enable-libsoxr --enable-libsp
eex --enable-libtheora --enable-libtwolame --enable-libvidstab --enable-libvo-aa
cenc --enable-libvo-amrwbenc --enable-libvorbis --enable-libvpx --enable-libwavp
ack --enable-libx264 --enable-libxavs --enable-libxvid --enable-zlib
  libavutil      52. 55.100 / 52. 55.100
  libavcodec    55. 44.100 / 55. 44.100
  libavformat    55. 21.102 / 55. 21.102
  libavdevice    55.  5.101 / 55.  5.101
  libavfilter    3. 91.100 /  3. 91.100
  libswscale      2.  5.101 /  2.  5.101
  libswresample  0. 17.104 /  0. 17.104
  libpostproc    52.  3.100 / 52.  3.100
[mpegts @ 02a08cc0] Invalid timestamps stream=0, pts=2087, dts=8589930673, size=
8005
[mpegts @ 02a08cc0] Invalid timestamps stream=0, pts=8093, dts=8589933676, size=
323
Input #0, hls,applehttp, from 'C:\Documents and Settings\Admin\╨а╨░╨▒╨╛╤З╨╕╨╣ ╤Б
╤В╨╛╨╗\1.m3u8':
  Duration: 00:44:20.00, start: 0.000000, bitrate: 0 kb/s
  Program 0
    Metadata:
      variant_bitrate : 0
    Stream #0:0: Video: h264 (High) ([27][0][0][0] / 0x001B), yuv420p, 1280x720,
 29.97 fps, 29.97 tbr, 90k tbn, 59.94 tbc
    Stream #0:1: Audio: aac ([15][0][0][0] / 0x000F), 44100 Hz, mono, fltp, 87 k
b/s
Seek to 29% ( 0:12:50) of total duration ( 0:44:20)      B f=0/0
Seek to 29% ( 0:12:53) of total duration ( 0:44:20)      B f=0/0
Seek to 29% ( 0:13:03) of total duration ( 0:44:20)      B f=0/0
Seek to 30% ( 0:13:13) of total duration ( 0:44:20)
Seek to 30% ( 0:13:20) of total duration ( 0:44:20)
Seek to 30% ( 0:13:30) of total duration ( 0:44:20)      B f=0/0
Seek to 31% ( 0:13:38) of total duration ( 0:44:20)
Seek to 31% ( 0:13:51) of total duration ( 0:44:20)
Seek to 32% ( 0:14:03) of total duration ( 0:44:20)      B f=0/0
Seek to 32% ( 0:14:12) of total duration ( 0:44:20)
Seek to 33% ( 0:14:28) of total duration ( 0:44:20)
Seek to 33% ( 0:14:41) of total duration ( 0:44:20)      B f=0/0
Seek to 34% ( 0:14:53) of total duration ( 0:44:20)
Seek to 34% ( 0:15:06) of total duration ( 0:44:20)
Seek to 35% ( 0:15:18) of total duration ( 0:44:20)      B f=0/0
Seek to 35% ( 0:15:28) of total duration ( 0:44:20)
Seek to 35% ( 0:15:35) of total duration ( 0:44:20)      B f=0/0
Seek to 35% ( 0:15:39) of total duration ( 0:44:20)
Seek to 36% ( 0:15:47) of total duration ( 0:44:20)
Seek to 36% ( 0:15:55) of total duration ( 0:44:20)      B f=0/0
Seek to 36% ( 0:16:02) of total duration ( 0:44:20)
Seek to 36% ( 0:16:06) of total duration ( 0:44:20)
Seek to 36% ( 0:16:08) of total duration ( 0:44:20)      B f=0/0
Seek to 37% ( 0:16:16) of total duration ( 0:44:20)
Seek to 37% ( 0:16:20) of total duration ( 0:44:20)
Seek to 37% ( 0:16:29) of total duration ( 0:44:20)      B f=0/0
Seek to 37% ( 0:16:31) of total duration ( 0:44:20)
Seek to 37% ( 0:16:35) of total duration ( 0:44:20)
Seek to 38% ( 0:16:39) of total duration ( 0:44:20)      B f=0/0


rubiohiguey 08-07-2014 06:07 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by chap (Post 69641)
try use ffmpeg december 2013
work fine

Yes Dec version works fine, and I downloaded Zeranoe's one from today which also works fine.
Must have been an issue in July 29 version.

I can confirm it works and I will let it download the whole chapter. Being on relatively slow internet it may take about 30 minutes.

I am now sending you a PM.

Thank you,
George

addaru 08-07-2014 06:56 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
nopt , can you please check the link i posted? you provided a solution earlier , but it doesn't work anymore , can you help please provide a way to decrypt the stream key?

denobis 08-09-2014 11:35 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Mundofox is now supported in atresdowloader. :cool:

rubiohiguey 08-09-2014 12:21 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by denobis (Post 69683)
Mundofox is now supported in atresdowloader. :cool:

Thank you! I can confirm it's working.

Now, on newer videos, they dropped HD resolution in m3u8 manifests. Does your downloader support (or is there a way to support) f4m manifests, where HD chunks are still available?

Also, can you make support for other ooyala-using websites, such as Caracol, and CanalRCN?
I will make sure to make a donation to your project!

sample videos:

RCN: http://elestilista.canalrcn.com/vide...estilista-5791
Manifest: http://player.ooyala.com/player/ipad...I6V-hd1aN.m3u8

Caracol: http://www.caracoltv.com/programas/s...dientes-de-oro
Manifest: http://player.ooyala.com/player/ipad...0NOX-YJf4.m3u8

addaru 08-09-2014 02:40 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
please help with this service , i can't download because the key to stream is encrypted..
here is a link for all the needed info: http://www68.zippyshare.com/v/66365666/file.html
thank you

griller 08-11-2014 01:44 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Hi.
Can somebody please take look at these links and find correct key file url?

Video:
https://www.pickbox.tv/MovieDetails?...To%3d&urlEnc=T
or
https://www.pickbox.tv/MovieDetails/...erenceId=10878

Playlist:
http://pickbox-vod.hls.adaptive.leve.../playlist.m3u8
or
http://pickbox-vod.hls.adaptive.leve.../playlist.m3u8

This is what I get from Fiddler:
https://www.dropbox.com/s/lzevfj8l0ccvy9x/pickbox.saz


Thanks.

surya987 08-12-2014 04:38 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by griller (Post 69735)



open playlist and select your desired bitrate drom palylist....

example..--

http://pickbox-vod.hls.adaptive.leve.../playlist.m3u8

CHANGE LINK into like this.......

http://pickbox-vod.hls.adaptive.leve..._b2096000.m3u8


and inside this here is key link

https://178.218.161.130/CAB/keyfile?r=11421&t=VOD&p=0


thanks....

griller 08-12-2014 04:46 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
I know that, but when I open link I get error 40.

surya987 08-12-2014 04:49 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
i think you must need to login in your browser to download key file.....

as its require login i cant tell you more than this.. please try downloading key while login in your account...

thankss

griller 08-12-2014 04:56 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
I tried, it is same. Doesn't matter if I'm logged in or not.

surya987 08-12-2014 05:07 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
PM please your login info.. only than can able to help you...

otherwise soory....!!!!!

griller 08-14-2014 04:07 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
PM sent.

BlueCop 08-19-2014 11:12 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Some key files require cookies that are set when you retrieve the m3u8. I have a script that handles the downloading and decryption to a single transport stream file for many streams.

If you can log the playback of the stream then you should be able to see what is needed in the request for the key file. It is probably just a cookie.

surya987 08-19-2014 11:56 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
can you share the script so tht we can look into this.....

BlueCop 08-20-2014 12:16 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
If I try to play the streams on an iOS device I get the "the server requires a client certificate"

So it is probably just using the right client certificate. I would have to clean up the script a bit to make it friendly for usage. I mostly just hack around in idle. it works for hulu and some other services pretty well.

I would try to log some sessions and then replicate the traffic. It is pretty simple. just aes in cbc mode and parsing the key and iv. The apple media players uses a 00'd iv if none is provided.

If I can examine a ssl mitm proxied of a playback then I could probably write/update a script to download it.

surya987 08-20-2014 01:59 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Are you using Curl script..... As cookies expire very fast... As it download encrypted stream and keys using cookies and whn comes to decrypt stage mostly key expires.....

Also some keys require secure iOS token to access...!!

Any update to this.....???

BlueCop 08-20-2014 04:02 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
no I am only using python. I just keep a temporary cookie jar in memory for the stream. I tried to replicate the AppleCoreMedia behavior. it is easy to add tokens or special headers to a request.

I just wrote it to save several streams that I couldn't save with any method I tried. It might be my fault because I didn't know how to use the existing utilities for saving them. it calls ffmpeg to remux the decrypted ts to mp4 or mkv.

I will try to get it in a useful form to post. I would love to expand the functionality.

surya987 08-20-2014 06:31 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
will love to see your python script.. whn you are going to share.....

BlueCop 08-20-2014 08:11 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
yea nevermind. i will keep working on my own stuff.

griller 09-25-2014 06:08 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Does anybody here know how to extract a key from Wireshark log or from RAM?

denobis 09-28-2014 03:02 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by rubiohiguey (Post 69686)
Thank you! I can confirm it's working.

Now, on newer videos, they dropped HD resolution in m3u8 manifests. Does your downloader support (or is there a way to support) f4m manifests, where HD chunks are still available?

Also, can you make support for other ooyala-using websites, such as Caracol, and CanalRCN?
I will make sure to make a donation to your project!

sample videos:

RCN: http://elestilista.canalrcn.com/vide...estilista-5791
Manifest: http://player.ooyala.com/player/ipad...I6V-hd1aN.m3u8

Caracol: http://www.caracoltv.com/programas/s...dientes-de-oro
Manifest: http://player.ooyala.com/player/ipad...0NOX-YJf4.m3u8

Caracoltv implemented, wait for the other

kingdis 04-12-2015 09:27 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by denobis (Post 68640)
use atresdownloader, although wait next update which fixes some bugs

Plaese help me here #EXTM3U

#EXT-X-STREAM-INF:PROGRAM-ID=1,BANDWIDTH=230000,RESOLUTION=-2x300,NAME="300p @ 230k"
secure/stream/clips/29318556_bbm_20150412_day21_lets_talk/dstvo-vod-hls-top-32.m3u8?token=69e6ca40-565e-455b-9eaf-f03c770cb7d5

surya987 04-12-2015 10:08 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by kingdis (Post 75717)
Plaese help me here #EXTM3U

#EXT-X-STREAM-INF:PROGRAM-ID=1,BANDWIDTH=230000,RESOLUTION=-2x300,NAME="300p @ 230k"
secure/stream/clips/29318556_bbm_20150412_day21_lets_talk/dstvo-vod-hls-top-32.m3u8?token=69e6ca40-565e-455b-9eaf-f03c770cb7d5


proper link please...

lzy0699 06-19-2015 01:12 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Does anybody here know how to download this video:

http://www.xueersi.com/kc/10624.html

M3U8:https://mega.co.nz/#!GRFzQa5Q!RYOCEv...XCYwtdknGT7Jds

Thanks.

biezom 06-19-2015 01:58 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by lzy0699 (Post 77611)
Does anybody here know how to download this video:

http://www.xueersi.com/kc/10624.html

M3U8:https://mega.co.nz/#!GRFzQa5Q!RYOCEv...XCYwtdknGT7Jds

Thanks.

hi

Code:

http://touch.xueersi.com/kc/10624.html
Code:

livestreamer  --http-header  "Cookie=wx=935d50c84624a50424cac5fe116e8f2am04bx9m4b4"  "hls://http://touch.xueersi.com/video/getVideoPath/136427.m3u8" best -o video.ts
to find cookie in red

tool: firefox
load http://touch.xueersi.com/kc/10624.html
>>>>tools >>>>options



lzy0699 06-23-2015 01:32 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Quote:

Originally Posted by biezom (Post 77612)
hi

Code:

http://touch.xueersi.com/kc/10624.html
Code:

livestreamer  --http-header  "Cookie=wx=935d50c84624a50424cac5fe116e8f2am04bx9m4b4"  "hls://http://touch.xueersi.com/video/getVideoPath/136427.m3u8" best -o video.ts
to find cookie in red

tool: firefox
load http://touch.xueersi.com/kc/10624.html
>>>>tools >>>>options



Thank you so much!You are so kind!:D :D :D

sonnvl 06-28-2015 03:48 PM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Code:

http://hlscache.fptplay.net.vn/livez/smil:vtv3HD_hls.smil/chunklist_b3500000.m3u8
Code:

livestreamer "hls://hlscache.fptplay.net.vn/livez/smil:vtv3HD_hls.smil/chunklist_b3500000.m3u8 pvswf=http://fptplay.net/js/plugins/assets/HLSPlayer.swf" best -o filename.ts
[cli][info] Found matching plugin stream for URL hls://hlscache.fptplay.net.vn/l
ivez/smil:vtv3HD_hls.smil/chunklist_b3500000.m3u8 pvswf=http://fptplay.net/js/pl
ugins/assets/HLSPlayer.swf
[cli][info] Available streams: live (worst, best)
[cli][info] Opening stream: live (hls)
Traceback (most recent call last):
  File "<string>", line 6, in <module>
  File "__main__.py", line 128, in <module>
  File "__main__livestreamer__.py", line 9, in <module>
  File "livestreamer_cli\main.py", line 886, in main
  File "livestreamer_cli\main.py", line 491, in handle_url
  File "livestreamer_cli\main.py", line 378, in handle_stream
  File "livestreamer_cli\main.py", line 245, in output_stream
  File "livestreamer_cli\main.py", line 222, in open_stream
  File "livestreamer\stream\hls.py", line 258, in open
  File "livestreamer\stream\segmented.py", line 185, in open
  File "livestreamer\stream\hls.py", line 125, in __init__
  File "livestreamer\stream\hls.py", line 135, in reload_playlist
  File "requests\sessions.py", line 395, in get
  File "livestreamer\plugin\api\http_session.py", line 128, in request
TypeError: request() got an unexpected keyword argument 'pvswf'
Press any key to continue . . .

Any solution ?

Liluy 11-08-2015 08:31 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
I cannot decode the M3U8 would you have a solution ?

http:%3A%2F%2Fwmvideocdn-wakatest.streaming.mediaservices.windows.net%2F8bb 82a53-ce66-460f-8179-3b2c9510b431%2FWAKANIM_prores_out.ism%2FManifest%2 8format%3Dm3u8-aapl%29&token=Bearer%3DeyJ0eXAiOiJKV1QiLCJhbGciOiJ IUzI1NiJ9.eyJ1cm46bWljcm9zb2Z0OmF6dXJlOm1lZGlhc2Vy dmljZXM6Y29udGVudGtleWlkZW50aWZpZXIiOiI1NDQ5ZDM4Ni 1jYTMxLTQ3YWUtYWI1Zi1lYWE5YzJkZjkzMmQiLCJpc3MiOiJX YWthbmltLlRWIiwiYXVkIjoiaHR0cDovL3d3dy53YWthbmltLn R2IiwiZXhwIjoxNDQ2OTk5Nzg1LCJuYmYiOjE0NDY5OTIyODV9 .HSnK7kO8DXL3TNygRTK6Y5sZJZz7L84afqTX30JMddg&idepi sode=1499&numero=6&idserie=119'

Cordialement.

Liluy 11-08-2015 10:13 AM

Re: Decrypt AES-128 encrypted video files from a m3u8


 
Thank Lesor ! How have you managed to decrypt it ?


All times are GMT -6. The time now is 06:46 PM.