Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/devlarley/widevineproxy2

An extension-based proxy for Widevine EME challenges and license messages. Modifies the challenge before it reaches the web player. Bypasses Hashes, one-time-tokens and license wrapping.
https://github.com/devlarley/widevineproxy2

chrome-addon chrome-extension drm drm-bypass encrypted-media encrypted-media-extensions firefox-addon firefox-extension forge node-widevine protobufjs pywidevine web-extensions widevine widevine-dl widevine-drm widevine-l3-decryptor

Last synced: 2 days ago
JSON representation

An extension-based proxy for Widevine EME challenges and license messages. Modifies the challenge before it reaches the web player. Bypasses Hashes, one-time-tokens and license wrapping.

Awesome Lists containing this project

README 

        
# WidevineProxy2

An extension-based proxy for Widevine EME challenges and license messages. \

Modifies the challenge before it reaches the web player and retrieves the decryption keys from the response.



## Features

+ User-friendly / GUI-based

+ Bypasses one-time tokens, hashes, and license wrapping

+ JavaScript native Widevine implementation

+ Supports Widevine Device files

+ Manifest V3 compliant



## Widevine Devices

This addon requires a Widevine Device file to work, which is not provided by this project.

+ Use an existing Remote CDM like [this one](https://remote-cdm.cdrm-project.com/remote_cdm)

+ Follow [this](https://forum.videohelp.com/threads/408031) guide if you want to dump your own device.

+ Ready-to-use Widevine Devices can be found on the [VideoHelp forum](https://forum.videohelp.com/forums/48).



## Compatibility

+ Compatible (tested) browsers: Firefox/Chrome on Windows/Linux.

+ Works with any service that accepts challenges from Android devices on the same endpoint.



## Installation

+ Chrome

  1. Download the ZIP file from the [releases section](https://github.com/DevLARLEY/WidevineProxy2/releases)

  2. Navigate to `chrome://extensions/`

  3. Enable `Developer mode`

  4. Drag-and-drop the downloaded file into the window

+ Firefox

  + Persistent installation

    1. Download the XPI file from the [releases section](https://github.com/DevLARLEY/WidevineProxy2/releases)

    2. Navigate to `about:addons`

    3. Click the settings icon and choose `Install Add-on From File...`

    4. Select the downloaded file

  + Temporary installation

    1. Download the ZIP file from the [releases section](https://github.com/DevLARLEY/WidevineProxy2/releases)

    2. Navigate to `about:debugging#/runtime/this-firefox`

    3. Click `Load Temporary Add-on...` and select the downloaded file



## Setup

### Widevine Device

If you only have a `device_client_id_blob` and `device_private_key`, run this command to create a .wvd file:

```

pywidevine create-device -k device_private_key -c device_client_id_blob -t "ANDROID" -l 3

```

Now, open the extension, click `Choose File` and select your Widevine Device file.



### Remote CDM

If you don't already have a `remote.json` file, open the API URL in the browser (if provided) and save the response as `remote.json`. \

Now, open the extension, click `Choose remote.json` and select the JSON file provided by your API.



+ Select the type of device you're using in the top right-hand corner

+ The files are saved in the extension's `chrome.storage.sync` storage and will be synchronized across any browsers into which the user is signed in with their Google account.

+ The maximum number of Widevine devices is ~25 **OR** ~200 Remote CDMs

+ Check `Enabled` to activate the message interception and you're done.



## Usage

All the user has to do is to play a DRM protected video and the decryption keys should appear in the `Keys` group box (if the service is not unsupported, as stated above). \

Keys are saved:

+ Temporarily until the extension is either refreshed manually (if installed temporarily) or a removal of the keys is manually initiated.

+ Permanently in the extension's `chrome.storage.local` storage until manually wiped or exported via the command line.

> [!NOTE]  

> The video will not play when the interception is active, as the Widevine CDM library isn't able to decrypt the Android CDM license.



+ Click the `+` button to expand the section to reveal the PSSH and keys.



## FAQ

> What if I'm unable to get the keys?



This automatically means that the license server is blocking your CDM and that you either need a CDM from a physical device, a ChromeCDM, or an L1 Android CDM. Don't ask where you can get these



## Issues

+ DRM playback won't work when the extension is disabled and EME Logger is active. This is caused by my fix for dealing with EME Logger interference (solutions are welcome).



## Demo

[Widevineproxy2.webm](https://github.com/user-attachments/assets/8f51cee3-50e2-4aa4-b244-afa2d0b2987e)



## Disclaimer

+ This program is intended solely for educational purposes.

+ Do not use this program to decrypt or access any content for which you do not have the legal rights or explicit permission.

+ Unauthorized decryption or distribution of copyrighted materials is a violation of applicable laws and intellectual property rights.

+ This tool must not be used for any illegal activities, including but not limited to piracy, circumventing digital rights management (DRM), or unauthorized access to protected content.

+ The developers, contributors, and maintainers of this program are not responsible for any misuse or illegal activities performed using this software.

+ By using this program, you agree to comply with all applicable laws and regulations governing digital rights and copyright protections.



## Credits

+ [node-widevine](https://github.com/Frooastside/node-widevine)

+ [forge](https://github.com/digitalbazaar/forge)

+ [protobuf.js](https://github.com/protobufjs/protobuf.js)