t3rry7f / widevinedump Goto Github PK

Any tips on obtaining the memory addresses?

Never done this before and trying my hand at gdb to attach to running process and try get it that way.

Any hints would be much appreciated!

Hey, if you are interested in some private work contact me at [email protected]

Thanks

在这个issue提到的用gdb调试程序可以获取，不过我对gdb一点也不了解。

1. 想问一下有没有相关操作的教程，是不是得自行编译一个基于widevine的应用，然后用gdb调试才能拿到硬件地址？

2. 另外用chrome的cdm是widevinecdm.dll这个文件，但是用IDA找不到有关那两个函数的信息，是不是我把哪里搞错了呢？

3. 请问可以通过这个脚本还原widevine镜像，然后进行类似的操作，加上frida hook也能实现从手机播放时dump音视频出来？

谢谢！

May i ask the hardcode Address of Dmm player V2 ?

0x6feb60 ..... ?

Thank you so much

I tried finding the memory of the DecryptAndDecodeFrame function, i was able to find it in memory
https://imgur.com/W6FMkqF
But when I tried attaching frida to chromium and printing info about it using "Debug Symbols" and providing the pointer to address, I'm getting null Im unsure what im doing wrong. Since the 2 functions are not exported, how could We use Frida to find the address? Is there any constant pointer to the address that we can use instead of manually editing it? Like in the readme file, hardcoded address you were mentioning is it the one the next to the assembly code in the decompiler? It would be better to find the address without compiling a modified version of chromium just to print the memory address.

Thankyou for the work and opensourcing the project 👍 :-)