本帖最后由 lzawww 于 2020-12-26 18:18 编辑

报的付费网课快到期了，想要保存下来，发现视频被加密分割成ts文件，

我把最短的一次课的ts文件F12全部手动下载下来以及这次课的m3u8文件。

图片.png (83.44 KB, 下载次数: 0)

2020-12-26 14:44 上传

图片.png (124.33 KB, 下载次数: 0)

2020-12-26 14:45 上传

直接打开ts文件播放不了，应该是加密了。

图片.png (20.58 KB, 下载次数: 0)

2020-12-26 14:41 上传

然后看看了以往的教程，发现key的url是放在m3u8文件里的，而且后面还跟着IV，但是我这里并没有IV，

点开key的url，是一个网页，上面显示着16字节的key：

af42c05227cf4da30944454b5ebfa8c6

me3u8文件如下：

[Asm] 纯文本查看 复制代码#EXTM3U

#EXT-X-VERSION:3

#EXT-X-ALLOW-CACHE:YES

#EXT-X-TARGETDURATION:11

#EXT-X-MEDIA-SEQUENCE:0

#EXT-X-KEY:METHOD=AES-128,URI="key的url"

#EXTINF:10.025822,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00001.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-2b9263270a5594d3eb6e41d1e00a9425

#EXTINF:10.300000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00002.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-c37d341f3c44b5ae8db32b61d0594fb8

#EXTINF:10.100000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00003.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-51d92377e06ec197b482898d0d32d115

#EXTINF:10.300000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00004.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-a01d834a6058928353493579d5797972

#EXTINF:10.300000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00005.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-e91c4d7b038eec97ff1cd6ca5472c9d5

#EXTINF:10.300000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00006.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-59bba97c5ece06e3a68c4284bfadf4c2

#EXTINF:10.200000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00007.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-3e433371a69730f1dbff9af4c325151d

#EXTINF:10.000000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00008.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-1f858793c35b548ed14052394badd4c7

#EXTINF:10.100000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00009.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-24c3c5a8fe96feac535079f27dc5239d

#EXTINF:10.200000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00010.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-7b237cd21d0b497d75e24e899eab2791

#EXTINF:10.000000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00011.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-704e6dbfaf484a9f6722ee609c229924

#EXTINF:10.300000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00012.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-c01cbc2df2c0f31ab56b23c58fce4550

#EXTINF:10.200000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00013.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-0d0dee11773c8166036b16dd0930977a

#EXTINF:10.100000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00014.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-63b879c838871cab9812ad85fb2c4c8e

#EXTINF:10.200000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00015.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-d85546ae9ea0cefb25af472fe2d7ac66

#EXTINF:10.000000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00016.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-4c8cd824c78819d5d0ea34872480eeb6

#EXTINF:8.100000,

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00017.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-a5e84dd57992461fb22aef82265f93c4

#EXT-X-ENDLIST

参阅其他的贴子有用opensll aes-128-cbc解密的 但是后面接了 -iv 我这里没有IV直接报错

[其他]解密m3u8文件, ts文件解密, hls 解密.https://www.52pojie.cn/thread-971265-1-1.html

于是我又去查看了aes加密的五种模式，发现：

AES五种加密模式(CBC、ECB、CTR、OCF、CFB)

分组密码有五种工作体制：1.电码本模式(Electronic Codebook Book (ECB))；2.密码分组链接模式(Cipher Block Chaining (CBC))；3.计算器模式(Counter (CTR))；4.密码反馈模式(Cipher FeedBack (CFB))；5.输出反馈模式(Output FeedBack (OFB))。

发现除了ECB其余都需要IV：

[Bash shell] 纯文本查看 复制代码53aa0ab5695397fa1a12a429e706a34b

PS D:\Downloads\tsCrack> openssl aes-128-ctr -d -in .\36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00001.ts -out fileSequence0_decrypto.ts -nosalt -K2b9263270a5594d3eb6e41d1e00a9425

iv undefined

PS D:\Downloads\tsCrack> openssl aes-128-cfb -d -in .\36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00001.ts -out fileSequence0_decrypto.ts -nosalt -K 2b9263270a5594d3eb6e41d1e00a9425

iv undefined

PS D:\Downloads\tsCrack> openssl aes-128-ofb -d -in .\36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00001.ts -out fileSequence0_decrypto.ts -nosalt -K 2b9263270a5594d3eb6e41d1e00a9425

iv undefined

PS D:\Downloads\tsCrack> openssl aes-128-cbc -d -in .\36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00001.ts -out fileSequence0_decrypto.ts -nosalt -K 2b9263270a5594d3eb6e41d1e00a9425

iv undefined

PS D:\Downloads\tsCrack> openssl aes-128-ecb -d -in .\36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00001.ts -out fileSequence0_decrypto.ts -nosalt -K 2b9263270a5594d3eb6e41d1e00a9425

bad decrypt

13460:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:crypto\evp\evp_enc.c:583:

PS D:\Downloads\tsCrack>

再次m3u8观察发现auth_key，乍一看不知道跟之前url里面的key有什么区别。

图片.png (130.79 KB, 下载次数: 2)

2020-12-26 14:55 上传

回到视频网站，发现

36b6497df093a2e80d7e110520738bff-S00000001-100000-od-encrypt-stream-00001.ts?auth_key=1609046834-b440e81b36e14a27a9654fbf32e3fe04-0-2b9263270a5594d3eb6e41d1e00a9425

是ts文件在服务器上的相对路径。

图片.png (35.55 KB, 下载次数: 1)

2020-12-26 15:33 上传

我把ts文件、m3u8文件、以及保存到本地key.key文件放在同一目录下

使用ffmpeg出现如下情况，觉得是密钥不正确。

图片.png (120.98 KB, 下载次数: 0)

2020-12-26 18:14 上传现在怎么解密合并这些ts文件呢？