FoxRefire / wvg

Chrome/Firefox extension for pen-testing to retrieve encryption keys of Widevine protected content !DON'T DECRYPT CONTENT UNLESS YOU HAVE THE RIGHT TO DO IT!

WVGuesserExtension-NextGen

For more details, see docs

Installation

1. Download or clone this code

2. At the same directory of manifest.json(root directory of this extension), put the one of the following Android L3 CDM key pair file(s).

   Don't know how to get these files? See How to dump CDM key pair for more informations.

   • Supported CDM Key Pair Formats

     1. device.wvd

     2. device_client_id_blob + device_private_key

     3. client_id.bin + private_key.pem

     4. remote.json (How to use Remote CDM)

3. Install extension

   • Firefox (Permanent method)

     1. Navigate to about:debugging#/runtime/this-firefox

     2. Load temporary addon

   • Chrome

     1. Navigate to chrome://extensions/

     2. Load unpacked

   • Kiwi Browser(Android)

     1. Navigate to ︙ --> Extensions

     2. +(from .zip/.crx/.user.js)

Demo

Screencast_20240505_014046.webm

Third-party libraries

• Pyodide (MPL-2.0)
• Pywidevine (GPL-3.0)
• json-view (MIT)

Big Thanks and inspired by

https://github.com/emarsden/pssh-box-wasm/