Decryp adobe access?

[mrberni]

Hello,

On Disney.com, they have the videos encrypted with Adobe-access:

example link:

http://video.disney.com/watch/disneyxd-dipper-vs-manliness-4c43a1ca811cd68bfbcc3bfe

http://cdn.secure.videos.dolimg.com/channel_longform/gravityfalls/929066/71abaf-pgravityfalls_e1-06-f006_tdm_h929066_fprhq_v1080p23_a16x9-178_leng-h264h_aac_1920x1080_7840x160.access.mp4?nvb=20140615175215&nva=20140616005215&token=0bb8c10a19e1dbc6641a0

or

http://cdn.videos.dolimg.com/channel_longform/gravityfalls/929066/71abaf-pgravityfalls_e1-06-f006_tdm_h929066_fprhq_v1080p23_a16x9-178_leng-h264h_aac_1920x1080_7840x160.access.mp4

How can I decrypt Adobe-access?

[blimey]

The disney implementation of adobe access (AA) appears to be similar to the one used in the off-line version of bbc iplayer. The disney mp4 files have CEK metadata that is flagged for off-line decryption and license storage. In theory this should be easier to decrpyt than an implementation of AA that requires active online key exchange. That being said, I haven't seen any compromise for AA - including this off-line method.

Disney still has the non-secure cdn active for mp4 format without AA. Use that until they disable it, or use hls (m3u8).

[mrberni]

OK, but I can only find 480p for non-secure cdn and hls, whereas the encrypted video is available as 1080p.

Or do you now a way, to get the 1080p video for the non-secure or hls video?

[blimey]

I see the non-secure cdn url in memory, but I don't know where it is coming from in terms of network traffic. I suspect the player swf is getting it.

[blimey]

I think the player swf is getting some manifest, smil, or json data that it is not entirely using. This is different than just what is in the page source. It is in memory, but no hint of the network resource from traffic or the decompiled swf.

http://cdn.videos.dolimg.com/channel_longform/gravityfalls/929066/be22aa-pgravityfalls_e1-06-f006_tdm_h929066_fprhq_v1080p23_a16x9-178_leng-h264h_aac_1920x1080_7840x160.mp4

It is probably not worth a lot of work locating the network source because they are obviously transitioning to flash access.

[mrberni]

Which program do you use to look into the memory?