download videos protected with widevine DRM

widevine-decryption.md

Downloading Widevine content

Specifically from Rakuten TV (live.tv.rakuten.co.jp)

FMI: https://cdm-project.com/How-To/ & https://old.reddit.com/r/Piracy/comments/y30ffr/

Setup

1. Install Tampermonkey: https://www.tampermonkey.net/
2. Install yt-dlp: https://github.com/yt-dlp/yt-dlp#installation
3. Install ffmpeg: https://ffmpeg.org/download.html
4. Download Bento4: https://www.bento4.com/downloads/
5. Have a proxy/VPN if you're not in Japan since stuff is geolocked

Getting your decryption key

Get PSSH

1. Install this userscript: https://greasyfork.org/en/scripts/373903-eme-logger
2. Search browser JS Console for MediaKeySession::generateRequest, then press play on the video and look under "Init Data"
3. Get something like AAAAMnBzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAXXXXXXXXFtoyTEzFOZDD4T9lmTiI=

Get License URL

1. After doing the above, go to your browser developer tools' Network tab and search for Widevine
2. Right click > Copy > Copy link address
3. Get something like https://azcp001.keydelivery.japaneast.media.azure.net/Widevine/?kid=e0c5b68c-9313-314e-6430-f8XXXXXXXX22

Get headers

1. Left click on the Widevine entry from the above steps, under the "Headers tab" scroll down to "Request Headers"
2. Copy the following lines & do some manual formatting, get something like:

Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9,ja-JP;q=0.8,ja;q=0.7
Authorization: blahblah
Cache-Control: no-cache
Content-Length: "blahblah"
Origin: https://live.tv.rakuten.co.jp
Pragma: no-cache
Referer: https://live.tv.rakuten.co.jp/
User-Agent: blahblah

Getting the key

1. Open https://cdrm-project.com/
2. Input the results from the previous steps and press "Send"
3. Hopefully see the "SUCCESS" message along with a key that looks like e0c5b68c93133XXXXXXXX84fd9664e22:499047f36b770957XXXXXXXX9dfc4033

Downloading the encrypted files

2. In the developer console Network tab, search for mpd
3. Find something that starts with Manifest, right click and copy the URL, e.g. https://azclwds01.akamaized.net/9dc3547a-ede5-4aed-841f-5cXXXXXXXX0f/tXyKyP_tab_hd.ism/Manifest(format=mpd-time-csf,encryption=cenc,filter=pc_hd_001)
4. Run the Terminal command: yt-dlp --allow-unplayable [url]
5. Get two files, an .mp4 and an .m4a

Decrypting & merging the files

1. In Bento4's bin/ folder, find the mp4decrypt command line utility
2. Navigate to this folder in your Terminal and run mp4decrypt --key [yourkey] /path/to/corrupted.file /path/to/fixed.file on both files
3. Run ffmpeg -i fixedvideo.mp4 -i fixedaudio.m4a -c:v copy -c:a copy output.mp4
4. The end

Does it work with "channel.rakuten.co.jp"?

Free video example: https://channel.rakuten.co.jp/videos/200973

@2142070 Not sure, no experience with that subdomain/site. Try it and let me know!

@frozenpandaman I was able to do so. Just change the “Headers” and search for “m3u8” (instead of mpd).

...::: PSSH (Init Data Type) :::...

Search (console): MediaKeySession::generateRequest
Example: AAAAP3Bzc2gAAAAA7e+LqXnWSs6jyCfc1R0h7QAAAB8SEKfYZ9e5qkL1sIwuzT3T54UaBWV6ZHJtSOPclZsG

...::: License URL :::...

Search (Network tab): Widevine
Example: https://widevine-dash.ezdrm.com/proxy?pX=97B7F0&token=b5c4e79ce6e5401386376d0260b2a62d

...::: Headers :::...

Only this (Python formatt): {'x-dt-auth-token': 'token',}
Token (from "license url"): b5c4e79ce6e5401386376d0260b2a62d
Example: {'x-dt-auth-token': 'b5c4e79ce6e5401386376d0260b2a62d',}

...::: Key :::...

Example: a7d867d7b9aa42f5b08c2ecd3dd3e785:83ddcbfbae399debe2114884b4ac5b08

...::: Encrypted files :::...

Search (Network tab): m3u8
Example: https://d3lz3061imcwu3.cloudfront.net/avod/Rakuten-TV-Japan-ANIM2-rakutenJP-all-avod/as_153831/as_153831.m3u8?ads.device_make=rchweb&ads.url=channel.rakuten.co.jp&ads.uuid=bfeee50f-0eca-52ee-86f8-8e0bd5cfbe2b&ads.uid_rch=bfeee50f-0eca-52ee-86f8-8e0bd5cfbe2b&ads.episode_id=200973&ads.refid=0

I cant get this working for Rakuten.de for Movie Deadpool for example. CDRM Still says python not correctly formated.

Will this work with Plex?

I cant get this working for Rakuten.de for Movie Deadpool for example. CDRM Still says python not correctly formated.

Use "Copy as cURL (bash)" and paste in this web for get headers in python format: https://curlconverter.com/python/

I cant get this working for Rakuten.de for Movie Deadpool for example. CDRM Still says python not correctly formated.

Use "Copy as cURL (bash)" and paste in this web for get headers in python format: https://curlconverter.com/python/

can you make step by step tutorial how to download 5.1 audio from rakuten?

For those having an issue parsing the headers with CDRM

An error occurred getting headers
invalid syntax (, line 1)

Try right-clicking on the license request in the Network tab, then choose Copy -> Copy As Fetch (Node.js), then click the yellow "Paste from Fetch" button on the CDRM form, then submit.

Note: My Widevine license URL looked like https://ottapp-appgw-amp.prodc.mkio.tv3cloud.com/drm/widevine-license

can we do .mkv?

Note: /path/to/corrupted.file is the encrypted mp4 file. and /path/to/fixed.file is where you want the fixed/decrypted mp4 file to be

@theguy000

i dont understand the /path/to/corrupted.file wdym by corrupter file? the mp4 and m4a?

That's the path to the output from yt-dlp, run the mp4decrypt command for both the mp4 and m4a which are currently unplayable as they are encrypted :)