Audio/video stream recording forums (http://stream-recorder.com/forum/index.php)
-   Video stream recording (http://stream-recorder.com/forum/forumdisplay.php?f=4)
-   -  

About capturing AES-128 encrypted stream

(http://stream-recorder.com/forum/showthread.php?t=21025)

wanch 05-24-2016 09:55 PM

About capturing AES-128 encrypted stream


 
Part of the network flow
Code:

"000124", "五月 25, 11:05:25", "http://iac2.wowza-rr-vod.edgeware.tvb.com/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?sig=99642f69b582b531d0de64e6c8a25b7c&ext_start_limit=1464152725&int_start_limit=1464152725&ts=1464152725", "GET m3u8 file (relative)", "", "37232000", "202.126.53.21"
"000127", "五月 25, 11:05:25", "http://202.126.56.113:80/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?token=0c2e803e0e65de834f43fc9c77eb8a6b_1464152725_1464152725", "http m3u8 file", "", "37232264", "202.126.53.21"
"000128", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/playlist.m3u8?token=0c2e803e0e65de834f43fc9c77eb8a6b_1464152725_1464152725", "GET m3u8 file (relative)", "", "37232352", "202.126.56.113"
"000129", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8", "GET m3u8 file (relative)", "", "37232440", "202.126.56.113"
"000132", "五月 25, 11:05:25", "mysp://kms.mps.tvb.com/kms/playback?contentid=697022&segmentid=0", "mysp", "", "37232704", "202.126.56.113"
"000133", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b48000_ao_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8", "GET m3u8 file (relative)", "", "37232792", "202.126.56.113"
"000134", "五月 25, 11:05:25", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlelist_lzho_b48000_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8", "GET m3u8 file (relative)", "", "37232880", "202.126.56.113"
"000136", "五月 25, 11:05:25", "http://crl3.digicert.com/ssca-sha2-g5.crl0", "http crl0 file", "", "37233056", "202.126.60.231"
"000137", "五月 25, 11:05:25", "http://crl4.digicert.com/ssca-sha2-g5.crl0L", "http crl0L file", "", "37233144", "202.126.60.231"
"000138", "五月 25, 11:05:25", "https://www.digicert.com/CPS0", "https", "", "37233232", "202.126.60.231"
"000139", "五月 25, 11:05:25", "http://ocsp.digicert.com0F", "http", "", "37233320", "202.126.60.231"
"000140", "五月 25, 11:05:25", "http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt0", "http crt0 file", "", "37233408", "202.126.60.231"
"000141", "五月 25, 11:05:25", "www.digicert.com1", "domain/unknown", "", "37233496", "202.126.60.231"
"000142", "五月 25, 11:05:25", "http://ocsp.digicert.com0{", "http", "", "37233584", "202.126.60.231"
"000143", "五月 25, 11:05:25", "http://crl3.digicert.com/DigiCertGlobalRootCA.crl07", "http crl07 file", "", "37233672", "202.126.60.231"
"000144", "五月 25, 11:05:25", "http://crl4.digicert.com/DigiCertGlobalRootCA.crl0=", "http crl0= file", "", "37233760", "202.126.60.231"
"000150", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b904000_vo_0.ts", "GET ts file (relative)", "", "37234288", "202.126.56.113"
"000163", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b48000_ao_slCantonese_t64Q2FudG9uZXNl_0.aac", "GET AudioMedia file (relative)", "", "37235520", "202.126.56.113"
"000164", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlechunk_lzho_b48000_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s_0.webvtt", "GET webvtt file (relative)", "", "37235432", "202.126.56.113"
"000165", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b904000_vo_34.ts", "GET ts file (relative)", "", "37235784", "202.126.56.113"
"000166", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/media_b48000_ao_slCantonese_t64Q2FudG9uZXNl_34.aac", "GET AudioMedia file (relative)", "", "37235608", "202.126.56.113"
"000167", "五月 25, 11:05:26", "http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlechunk_lzho_b48000_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s_25.webvtt", "GET webvtt file (relative)", "", "37235872", "202.126.56.113"

This is the video file
Code:

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8
This is the audio file
Code:

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b48000_ao_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8
This is the subtitle file not encrypted
Code:

http://202.126.56.113/session/89dae3ba-2225-11e6-88dc-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/subtitlelist_lzho_b48000_slCantonese_t64Q2FudG9uZXNl_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8
Probably the key part?
Code:

#EXT-X-KEY:METHOD=AES-128,URI="mysp://kms.mps.tvb.com/kms/playback?contentid=697022&segmentid=0"

Terenz 05-25-2016 07:05 AM

Re: About capturing AES-128 encrypted stream


 
Post the original link. What method did you use for get the network flow?

wanch 05-25-2016 08:37 AM

Re: About capturing AES-128 encrypted stream


 
it is URLSnooper
this is all I can provide because it is an android app which is limited in hk and need to login
or any other info that I can provide?

Terenz 05-25-2016 08:54 AM

Re: About capturing AES-128 encrypted stream


 
I don't know how to help without access to the stream and in this case is impossible, sorry. I have found another thread with the same URI
http://stream-recorder.com/forum/cap...st-t20654.html

But on my side, for the video on the #3 post, i don't see any encrypted content for the "chunks.m3u8"
Code:

EXTM3U
#EXT-X-VERSION:3
#EXT-X-ALLOW-CACHE:NO
#EXT-X-TARGETDURATION:5
#EXT-X-MEDIA-SEQUENCE:19713
#EXTINF:2.002,
l_20_59146203_19713.ts?nimblesessionid=etc.

Maybe is changed, i don't know.

wanch 05-25-2016 10:40 AM

Re: About capturing AES-128 encrypted stream


 
Thanks for your quick reply
I double check the link, I think they are time-bounded
the following is a new link
it is a m3u8 containing the video part
don't know if it can help

or another method for me to extract useful info from the app?
it has android and ios version
Code:

http://202.126.56.112/session/d7b77780-2296-11e6-bc74-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8

thaonguyenxanh 07-08-2016 07:02 PM

Re: About capturing AES-128 encrypted stream


 
Quote:

Originally Posted by wanch (Post 84489)
Thanks for your quick reply
I double check the link, I think they are time-bounded
the following is a new link
it is a m3u8 containing the video part
don't know if it can help

or another method for me to extract useful info from the app?
it has android and ios version
Code:

http://202.126.56.112/session/d7b77780-2296-11e6-bc74-005056b15a5f/tuui4x/mpsdrmv/_definst_/smil:vipo/mytvsuper2/6971/697022/mps_000000910883.smil/chunklist_b904000_vo_cfdmlwby9teXR2c3VwZXIyLzY5NzEvNjk3MDIyLzI0MDgyOC50dG1s.m3u8

http://202.126.56.116/session/e18f42...191_1468025191
I help get link to you

LAKB8 10-17-2016 01:17 AM

Re: About capturing AES-128 encrypted stream


 
Quote:

Originally Posted by thaonguyenxanh (Post 85365)

how can u get this link?

what kind of tool you use to get this link?

THX!

thaonguyenxanh 10-17-2016 02:00 AM

Re: About capturing AES-128 encrypted stream


 
Quote:

Originally Posted by LAKB8 (Post 88174)
how can u get this link?

what kind of tool you use to get this link?

THX!

Get ok. But not down.

LAKB8 10-17-2016 06:27 AM

Re: About capturing AES-128 encrypted stream


 
Quote:

Originally Posted by thaonguyenxanh (Post 88177)
Get ok. But not down.

how can u get this part "/cleardrmv/vipo/_definst_/vipo/"

thaonguyenxanh 10-17-2016 07:08 AM

Re: About capturing AES-128 encrypted stream


 
Quote:

Originally Posted by LAKB8 (Post 88181)
how can u get this part "/cleardrmv/vipo/_definst_/vipo/"

Github you. But i'm not down. You are down MYTVSUPER down


All times are GMT -6. The time now is 02:32 AM.