Added Android 10-12 links.

😄
This commit is contained in:
TPD94 2022-10-12 23:50:25 -04:00
parent 76965fd06a
commit 132cd24fec
1 changed files with 17 additions and 8 deletions

View File

@ -12,7 +12,7 @@ I used all the mentioned tools on windows 10 x64
[ADB Minimal Install](https://www.droidmirror.com/download/minimal-adb-fastboot-v1-4-3-zip "ADB Minimal Install") *Make sure to choose yes when it asks if you would like to add to path*
A (preferably non samsung) Android 7-9 (possibly Android 10) device that is able to be rooted.
An Android 7-12 device that is able to be rooted.
#### Tools used
@ -29,13 +29,16 @@ A (preferably non samsung) Android 7-9 (possibly Android 10) device that is able
[ffMPEG](https://www.gyan.dev/ffmpeg/builds/ffmpeg-release-full.7z "ffMPEG")
#### Android device I used
[Truewell T95 S1](https://www.amazon.com/T95-S1-Android-Amlogic-Ethernet/dp/B07F8X1PQR "Truewell T95 S1")
#### Android devices I used
DumperV1: [Truewell T95 S1](https://www.amazon.com/T95-S1-Android-Amlogic-Ethernet/dp/B07F8X1PQR "Truewell T95 S1")
Pre-rooted, around $30 USD, multiple user success of dumping keys (myself included), good for those who don't have a spare android.
**IF YOU DO USE YOUR OWN ANDROID DEVICE YOU MUST INSTALL MAGISK AND THE FRIDA-SERVER MODULE**
DumperV2: [onn. Android TV 4K UHD Streaming Device](https://www.walmart.com/ip/onn-Android-TV-4K-UHD-Streaming-Device-with-Voice-Remote-Control-HDMI-Cable/636597403 "onn. Android TV 4K UHD Streaming Device")
Cheap and accesable but, needs magisk, frida module, and liboemcrypto disabler installed.
You can find the installation instructions for magisk [here](https://topjohnwu.github.io/Magisk/install.html "here") and the frida module [here](https://github.com/ViRb3/magisk-frida "here").
**IF YOU DO USE YOUR OWN ANDROID DEVICE YOU MUST INSTALL [MAGISK](https://topjohnwu.github.io/Magisk/install.html "MAGISK") AND THE [FRIDA-SERVER MODULE](https://github.com/ViRb3/magisk-frida "FRIDA-SERVER MODULE") OR PUSH THE [FRIDA SERVER ANDROID APP](https://github.com/frida/frida/releases/download/ "FRIDA SERVER ANDROID APP") IF YOU DON'T NEED THE LIBOEMCRYPTO DISABLER.**
**AS MENTIONED IN DUMPER READMES, SOME DEVICES WILL CONTINUE TO USE L1 AFTER ROOT, IF UNSURE USE "DRM INFO", IF STILL ON L1 PLEASE INSTALL [LIBOEMCRYPTO DISABLER](https://github.com/Magisk-Modules-Repo/liboemcryptodisabler "LIBOEMCRYPTO DISABLER") MAGISK MODULE**
# Step 1: Preparing CDM
@ -61,6 +64,8 @@ On your device you should receive a notificatoin to accept the adb connection, c
**IF YOU HAVE MAGISK-FRIDA MODULE INSTALLED YOU MAY SKIP TO THE NEXT STEP**
**THIS METHOD *MAY* BE USED IF YOU ARE RUNNING AT AN L3 LEVEL AND HAVE ROOT ACCESS, THIS IS JUST SPECIFIC FOR THE T95S1**
Let's go ahead and push frida-server to the Android device, for the T95 S1 I used [Frida-Server 15.1.17](https://github.com/frida/frida/releases/download/15.1.17/frida-server-15.1.17-android-arm.xz "Frida-Server 15.1.17") for android. Unnzip the xz file and extract Frida-Server file.
Change directory to where you extracted the file and enter the command `adb push frida-server-15.1.17-android-arm /sdcard/`
@ -81,9 +86,11 @@ Login as super user and create a new environment `su -`
# Step 2: Extracting the CDM
*If you would like to check if frida-server is running connect via adb to your device in new command prompt like in step one, then use `adb shell` and then `su` and then `ps | grep frida` this should show you the process running, if it does not something went wrong*
*If you would like to check if frida-server is running connect via adb to your device in new command prompt like in step one, then use `adb shell` and then `su` and then `ps | grep frida` this should show you the process running, if it does not something went wrong* **NOTE: MAY NOT BE APPLICABLE IF MODULE WAS INSTALLED VIA FRIDA**
Download and extract [Dumper](https://cdm-project.com/cdm-tools/l3-dumper/-/archive/main/l3-dumper-main.zip "Dumper")
Download and extract [Dumper](https://cdm-project.com/cdm-tools/l3-dumper/-/archive/main/l3-dumper-main.zip "Dumper") for android 7-9
Download and extract [DumperV2](https://cdm-project.com/cdm-tools/dumperv2/-/archive/main/dumperv2-main.zip "DumperV2") for android 10-12
Open a new command prompt as administrator and change directories to the newly extracted folder and run `pip3 install -r requirements.txt` and once that's finished, start the program with `python dump_keys.py`
@ -91,6 +98,8 @@ Now play some widevine encrpyed content on your Android device. I suggest using
*Side note: on the T95 S1 I had to do these specific steps to get it to reliably dump. Play the video on bitmovin, stop dumper, start dumper, wait for it to finish booting, then click on the green "load" button in the top right of bitmovin while the video was still playing, so far this method has worked the best for me*
*Side note: on the onn 4k box, I had to install fx file manager and sideload launcher, push a chrome apk, install with the file manager, and run from sideloader, started on a page that wasn't bitmovin (duckduckgo.com in my case) started the script, loaded bitmovin, clicked the "load" button in the top right corner, stopped the script, started the script again, went back to duckduckgo.com, stopped the script and started repeatedly until you see an RSA fingerprint, when you see that you can go back to butmovin and play the video and dump the keys*
Once you have played the content your keys should be dumped in the dumper folder under `/key-dumps/your-device-keys/xxxx/xxxxxxxx/` and should be named `client_id.bin` and `private_key.pem`
Make a copy of these for safekeeping wherever you like but DO NOT LOSE THEM
@ -188,4 +197,4 @@ Hopefully more to come!
Contact me on my telegram or discord (info found on my gitlab profile)
Selling for $35 ($30 for the device I'll have to purchase above, and $5 for labor)
Selling for $35 USD