Audio/video stream recording forums (http://stream-recorder.com/forum/index.php)
-   Video stream recording (http://stream-recorder.com/forum/forumdisplay.php?f=4)
-   -  

Decryp adobe access?

(http://stream-recorder.com/forum/showthread.php?t=18422)

mrberni 06-15-2014 01:05 PM

Decryp adobe access?


 
Hello,

On Disney.com, they have the videos encrypted with Adobe-access:

example link:
Code:

http://video.disney.com/watch/disneyxd-dipper-vs-manliness-4c43a1ca811cd68bfbcc3bfe
Code:

http://cdn.secure.videos.dolimg.com/channel_longform/gravityfalls/929066/71abaf-pgravityfalls_e1-06-f006_tdm_h929066_fprhq_v1080p23_a16x9-178_leng-h264h_aac_1920x1080_7840x160.access.mp4?nvb=20140615175215&nva=20140616005215&token=0bb8c10a19e1dbc6641a0
or
Code:

http://cdn.videos.dolimg.com/channel_longform/gravityfalls/929066/71abaf-pgravityfalls_e1-06-f006_tdm_h929066_fprhq_v1080p23_a16x9-178_leng-h264h_aac_1920x1080_7840x160.access.mp4
How can I decrypt Adobe-access?

blimey 06-15-2014 03:58 PM

Re: Decryp adobe access?


 
The disney implementation of adobe access (AA) appears to be similar to the one used in the off-line version of bbc iplayer. The disney mp4 files have CEK metadata that is flagged for off-line decryption and license storage. In theory this should be easier to decrpyt than an implementation of AA that requires active online key exchange. That being said, I haven't seen any compromise for AA - including this off-line method.

Disney still has the non-secure cdn active for mp4 format without AA. Use that until they disable it, or use hls (m3u8).

mrberni 06-15-2014 05:01 PM

Re: Decryp adobe access?


 
OK, but I can only find 480p for non-secure cdn and hls, whereas the encrypted video is available as 1080p.

Or do you now a way, to get the 1080p video for the non-secure or hls video?

blimey 06-15-2014 05:55 PM

Re: Decryp adobe access?


 
I see the non-secure cdn url in memory, but I don't know where it is coming from in terms of network traffic. I suspect the player swf is getting it.

blimey 06-15-2014 06:04 PM

Re: Decryp adobe access?


 
I think the player swf is getting some manifest, smil, or json data that it is not entirely using. This is different than just what is in the page source. It is in memory, but no hint of the network resource from traffic or the decompiled swf.
Code:

http://cdn.videos.dolimg.com/channel_longform/gravityfalls/929066/be22aa-pgravityfalls_e1-06-f006_tdm_h929066_fprhq_v1080p23_a16x9-178_leng-h264h_aac_1920x1080_7840x160.mp4
It is probably not worth a lot of work locating the network source because they are obviously transitioning to flash access.

mrberni 06-16-2014 04:10 AM

Re: Decryp adobe access?


 
Which program do you use to look into the memory?

denobis 06-16-2014 07:46 AM

Re: Decryp adobe access?


 
I can get the links through a kaltura call, although maybe it's not the standard mechanism disney follows.

mrberni 06-16-2014 11:30 AM

Re: Decryp adobe access?


 
denobis, can you explain how you did it?
Or maybe implement the disney site to atresdownloader?

thank you

denobis 06-16-2014 12:30 PM

Re: Decryp adobe access?


 
Quote:

Originally Posted by mrberni (Post 68412)
denobis, can you explain how you did it?
Or maybe implement the disney site to atresdownloader?

thank you

See https://github.com/denobis/4od/blob/...deosdisney.php

blimey 06-16-2014 02:17 PM

Re: Decryp adobe access?


 
Thanks denobis, that does work. I saw references in the page source, but no traffic to there in wireshark, at least for video.disney.com. Looking at disneyxd.disney.com, there is some traffic to kaltura for the hls link, but in a different format from that shown in your script. Nice work!


All times are GMT -6. The time now is 03:31 PM.