#!/usr/bin/python3 import sys import os import base64 import json import datetime import pytz import time from http.cookiejar import Cookie # Add parent directory to path for o11 import sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__)))) import o11 from bs4 import BeautifulSoup from pywidevine.cdm import Cdm from pywidevine.device import Device from pywidevine.pssh import PSSH # Parse command line parameters user = o11.parse_params(sys.argv, 'user') password = o11.parse_params(sys.argv, 'password') device = o11.parse_params(sys.argv, 'device') pin = o11.parse_params(sys.argv, 'pin') id = o11.parse_params(sys.argv, 'id') action = o11.parse_params(sys.argv, 'action') bind = o11.parse_params(sys.argv, 'bind') proxy = o11.parse_params(sys.argv, 'proxy') doh = o11.parse_params(sys.argv, 'doh') worker = o11.parse_params(sys.argv, 'worker') cdm = o11.parse_params(sys.argv, 'cdm') drm = o11.parse_params(sys.argv, 'drm') kid = o11.parse_params(sys.argv, 'kid') pssh = o11.parse_params(sys.argv, 'pssh') challenge = o11.parse_params(sys.argv, 'challenge') heartbeaturl = o11.parse_params(sys.argv, 'heartbeaturl') heartbeatparams = o11.parse_params(sys.argv, 'heartbeatparams') # Session setup o11Session = o11.session(bind=bind, proxy=proxy, worker=worker) req = o11Session.get_session() if doh != "": o11.dns(doh) if challenge == "cert": challenge = "CAQ=" # Configuration WVD_PATH = './WVD.wvd' authFile = '/Pickx_cookies.json' SCRIPT_DIR = os.path.abspath(os.path.dirname(__file__)) USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36' device_id = '' tenant = 'AGL' version = '1.5' cluster = 'R' locale = 'FRA' platform = 'WEB' prop = 'PXS' def get_auth(): try: return json.load(open(SCRIPT_DIR + authFile)) except: return None def save_auth(auth_data): json.dump(auth_data, open(SCRIPT_DIR + authFile, 'w'), indent=4) def load_cookies_to_session(cookies_data): for c in cookies_data: cookie = Cookie(version=0, name=c.get('name', ''), value=c.get('value', ''), port=None, port_specified=False, domain=c.get('domain', ''), domain_specified=bool(c.get('domain')), domain_initial_dot=c.get('domain', '').startswith('.'), path=c.get('path', '/'), path_specified=True, secure=c.get('secure', False), expires=c.get('expirationDate', None), discard=False, comment=None, comment_url=None, rest={}, rfc2109=False) req.cookies.set_cookie(cookie) def export_cookies(): cookies_list = [] for c in req.cookies: cookies_list.append({'domain': c.domain, 'expirationDate': c.expires, 'hostOnly': not c.domain.startswith("."), 'httpOnly': 'HttpOnly' in (c._rest or {}), 'name': c.name, 'path': c.path, 'sameSite': 'no_restriction', 'secure': c.secure, 'session': c.expires is None, 'storeId': '0', 'value': c.value}) save_auth(cookies_list) def get_device_id(): global device_id headers = {'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9', 'User-Agent': USER_AGENT} response = req.get('https://tv.pickx.be/', headers=headers) soup = BeautifulSoup(response.content, features='lxml') next_data = soup.find('script', {'id': '__NEXT_DATA__'}) data = json.loads(next_data.text) device_id = data['props']['pageProps']['session']['deviceId'] def login(): global device_id print("logging in...", file=sys.stderr) cookies_data = get_auth() if not cookies_data: print("No cookies found. Please add Pickx cookies to auth file.", file=sys.stderr) save_auth([]) sys.exit(1) try: load_cookies_to_session(cookies_data) get_device_id() print("logged in successfully", file=sys.stderr) return device_id except Exception as e: print(f"Login failed: {e}", file=sys.stderr) sys.exit(1) def find_wv_pssh_offsets(raw): offsets = [] offset = 0 while True: offset = raw.find(b'pssh', offset) if offset == -1: break size = int.from_bytes(raw[offset-4:offset], byteorder='big') pssh_offset = offset - 4 offsets.append(raw[pssh_offset:pssh_offset+size]) offset += size return offsets def to_pssh(content): wv_offsets = find_wv_pssh_offsets(content) return [base64.b64encode(wv_offset).decode() for wv_offset in wv_offsets] def init_to_pssh(init_url): response = req.get(init_url, headers={'accept': '*/*', 'user-agent': USER_AGENT, 'content-type': 'application/octet-stream'}) return to_pssh(response.content) def get_pssh_from_mpd(url): headers = {'accept': '*/*', 'user-agent': USER_AGENT, 'content-type': 'application/octet-stream'} response = req.get(url, headers=headers) location = response.url try: soup = BeautifulSoup(response.content, features="xml") init = soup.find('SegmentTemplate')['initialization'] bandwidth = soup.find('Representation')['bandwidth'] rep_id = soup.find('Representation')['id'] loc_parts = location.split('/') loc_parts.pop() init_url = '/'.join(loc_parts) + '/' + init.replace('$Bandwidth$', bandwidth).replace('$RepresentationID$', rep_id) return init_to_pssh(init_url)[-1] except: return None def get_single(channel_id, asset_id): headers = {'accept': '*/*', 'content-type': 'application/json', 'origin': 'https://tv.pickx.be', 'referer': 'https://tv.pickx.be/', 'restful': 'YES', 'user-agent': USER_AGENT} params = {'VCASId': device_id} response = req.get(f'https://api.prod-ntvbe.tvapi-web.pickx.be/{tenant}/{version}/{cluster}/{locale}/{platform}/{prop}/CUSCONTENT/VIDEOURL/LIVE/{channel_id}/{asset_id}', params=params, headers=headers) export_cookies() try: data = response.json() return data['resultObj']['src'], data['resultObj']['token'] except: return None, None def do_cdm_internal(challenge_b64, lic_token): headers = {'Accept': '*/*', 'Origin': 'https://tv.pickx.be', 'Referer': 'https://tv.pickx.be/', 'User-Agent': USER_AGENT, 'content-type': 'application/octet-stream'} params = {'authenticator': base64.b64encode(lic_token.encode('utf-8')).decode('utf-8'), 'deviceId': base64.b64encode(device_id.encode('utf-8')).decode('utf-8')} response = req.post('https://dtvowdvcsmn.proximustv.be:8443/', headers=headers, params=params, data=base64.b64decode(challenge_b64)) response_b64 = str(base64.b64encode(response.content), 'ascii') if response_b64.startswith('CA'): return response_b64 return None def do_cdm_external(pssh_b64, lic_token): try: pssh_obj = PSSH(pssh_b64) device_obj = Device.load(WVD_PATH) cdm_obj = Cdm.from_device(device_obj) session_id = cdm_obj.open() challenge_data = cdm_obj.get_license_challenge(session_id, pssh_obj) headers = {'Accept': '*/*', 'Origin': 'https://tv.pickx.be', 'Referer': 'https://tv.pickx.be/', 'User-Agent': USER_AGENT, 'content-type': 'application/octet-stream'} params = {'authenticator': base64.b64encode(lic_token.encode('utf-8')).decode('utf-8'), 'deviceId': base64.b64encode(device_id.encode('utf-8')).decode('utf-8')} licence = req.post('https://dtvowdvcsmn.proximustv.be:8443/', headers=headers, params=params, data=challenge_data) cdm_obj.parse_license(session_id, licence.content) keys = [f"{key.kid.hex}:{key.key.hex()}" for key in cdm_obj.get_keys(session_id) if key.type != 'SIGNING'] cdm_obj.close(session_id) return keys except Exception as e: print(f'CDM external failed: {e}', file=sys.stderr) return None def do_action(): login() if action == "login": sys.exit() if action == "channels": output = {'Channels': []} headers = {'accept': '*/*', 'content-type': 'application/json', 'origin': 'https://tv.pickx.be', 'referer': 'https://tv.pickx.be/', 'restful': 'YES', 'user-agent': USER_AGENT} params = {'filter_technicalPackages': '214,223,232', 'from': 0, 'to': 99, 'sortOrder': 'asc'} url = f'https://api.prod-ntvbe.tvapi-web.pickx.be/{tenant}/{version}/{cluster}/{locale}/{platform}/{prop}/TRAY/LIVECHANNELS' response = req.get(url, params=params, headers=headers) export_cookies() try: data = response.json() containers = data['resultObj']['containers'] while params['to'] < data['resultObj']['total']: params['from'] = params['from'] + 100 params['to'] = params['to'] + 100 response = req.get(url, params=params, headers=headers) export_cookies() data = response.json() containers += data['resultObj']['containers'] for ch in containers: channel_id = ch.get('metadata', {}).get('channelId', '') asset_id = ch.get('assets', [{}])[0].get('assetId', '') channel = { 'Name': ch.get('metadata', {}).get('channelName', 'Unknown'), 'Mode': 'live', 'SessionManifest': True, 'ManifestScript': f"cid={channel_id}&aid={asset_id}", 'CdmType': 'widevine', 'UseCdm': True, 'Cdm': f"cid={channel_id}&aid={asset_id}", 'Video': 'best', 'OnDemand': True, 'SpeedUp': True, } output['Channels'].append(channel) print(json.dumps(output, indent=2)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "events": output = {'Events': []} print(json.dumps(output, indent=2)) elif action == "heartbeat": sys.exit() elif action == "manifest": try: params_dict = {} for param in id.split('&'): if '=' in param: k, v = param.split('=', 1) params_dict[k] = v channel_id = params_dict.get('cid', '') asset_id = params_dict.get('aid', '') video_url, lic_token = get_single(channel_id, asset_id) if not video_url: return "error" output = { "Cdn": [{"Name": "default", "ManifestUrl": video_url}], "ManifestUrl": video_url, "Headers": {"Manifest": {'User-Agent': USER_AGENT}, "Media": {'User-Agent': USER_AGENT}}, "Heartbeat": {"Url": '', "Params": '', "PeriodMs": 5*60*1000}, "LicenseToken": lic_token } print(json.dumps(output)) except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "internal": try: params_dict = {} for param in id.split('&'): if '=' in param: k, v = param.split('=', 1) params_dict[k] = v channel_id = params_dict.get('cid', '') asset_id = params_dict.get('aid', '') video_url, lic_token = get_single(channel_id, asset_id) if lic_token: result = do_cdm_internal(challenge, lic_token) if result: print(result) else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" elif action == "cdm" and cdm == "external": try: params_dict = {} for param in id.split('&'): if '=' in param: k, v = param.split('=', 1) params_dict[k] = v channel_id = params_dict.get('cid', '') asset_id = params_dict.get('aid', '') video_url, lic_token = get_single(channel_id, asset_id) if lic_token: pssh_to_use = pssh if pssh else get_pssh_from_mpd(video_url) if pssh_to_use: keys = do_cdm_external(pssh_to_use, lic_token) if keys: for key in keys: print(key) else: return "error" else: return "error" else: return "error" except Exception as e: print(f"Error: {e}", file=sys.stderr) return "error" else: print("invalid action: " + action, file=sys.stderr) if do_action() == "error": login() do_action()