Jim_Di jimdi

CommonWV

Downloading Widevine content

Specifically from Rakuten TV (live.tv.rakuten.co.jp)

FMI: https://cdm-project.com/How-To/ & https://old.reddit.com/r/Piracy/comments/y30ffr/

Setup

Install Tampermonkey: https://www.tampermonkey.net/
Install yt-dlp: https://github.com/yt-dlp/yt-dlp#installation

GitHub Search Syntax for Finding API Keys/Secrets/Tokens

As a security professional, it is important to conduct a thorough reconnaissance. With the increasing use of APIs nowadays, it has become paramount to keep access tokens and other API-related secrets secure in order to prevent leaks. However, despite technological advances, human error remains a factor, and many developers still unknowingly hardcode their API secrets into source code and commit them to public repositories. GitHub, being a widely popular platform for public code repositories, may inadvertently host such leaked secrets. To help identify these vulnerabilities, I have created a comprehensive search list using powerful search syntax that enables the search of thousands of leaked keys and secrets in a single search.

Search Syntax:

(path:*.{File_extension1} OR path:*.{File_extension-N}) AND ({Keyname1} OR {Keyname-N}) AND (({Signature/pattern1} OR {Signature/pattern-N}) AND ({PlatformTag1} OR {PlatformTag-N}))

Examples:

**1.

Chat GPT "DAN" (and other "Jailbreaks")

Flipper Zero developer Q&A

August 6th 2022

Below are my notes regarding every question asked and answered, covering both sessions.
While the 1st session's audio is lost to time, I have a full recording of the second session.
Stream and download the MP3 here: https://nc.dj.je/s/9FZAqbs9LwcSnio (I'm looking for a better way to host the file, perhaps I might upload the next one to archive.org)

NOTE: The transcription of questions and answeres may contain errors, take it all with a grain of salt.

	import struct
	import pefile
	import re
	import capstone
	from tqdm import tqdm

	CACHE_DIR = "__pycache__"
	cache = None
	ENABLE_CACHE = True
	try:

	# -- coding: utf-8 --
	import hashlib
	import base64
	import requests, string, struct, uuid, random, re
	import sys
	from collections import OrderedDict
	from sys import version
	from urllib3.exceptions import InsecureRequestWarning
	requests.packages.urllib3.disable_warnings(category=InsecureRequestWarning)
	# too lazy to deal with string <-> bytes confusion in python3 so forget it ¯\_(ツ)_/¯

	import argparse
	import re
	import logging

	logging.basicConfig(
	level=logging.INFO,
	format="[%(levelname)s] %(message)s",
	)

	parser = argparse.ArgumentParser(

	function Get-RdpLogonEvent
	{
	[CmdletBinding()]
	param(
	[Int32] $Last = 10
	)

	$RdpInteractiveLogons = Get-WinEvent -FilterHashtable @{
	LogName='Security'
	ProviderName='Microsoft-Windows-Security-Auditing'

	/*
	IOCTL 0x40002004 : Arbitrary Physical Memory Read using MmMapIoSpace
	IOCTL 0x40002008 : Close a handle of your choice! + Stack-based Buffer Overflow
	IOCTL 0x40002000 : Arbitrary RW to IO ports
	*/
	#include <Windows.h>
	#include <stdio.h>

	#define GLE( x ) { printf("%s failed with error: %d\n", x , GetLastError()); }
	#define IOCTL_TRIGGER_OVERFLOW 0x40002008