how to find a biss key for feeds?

OK, so I think we can switch to operational issues. First question: how do we analyze the TS easily? Perhaps it's possible to analyze TS inside Oscam directly by using the DVBAPI without recording it first and use an external parser for that. I know nothing about the DVBAPI. Is there a documentation? I'll ask the streamboard guys directly, if it's possible to implement the parsing routine and export C8 directly out of OSCAM. That would help to process it automatically on the BISS Server.

Another aspect is the Softcam.key file. Why write the BISS key into Softcam.key file and restart Oscam?

We could also use a pipeline instead of the Softcam file, which provides the current key dynamically. That requires a patch for the emulator.

Practically you only define the BISS server URL in oscam config and the rest is all done automatically. This solution would not reqiure an enigma image. It could work on every Oscam server, which sees the transport stream.

But as i said before... I don't know if DVBAPI provides a function to read TS.

Quote from rush1

Quote from Freshmint

c8.pngi think a cleaner implementation would be as suggested by zapf2000 . extract crypt8's using enigma2 plugin and then send it to the server. how compute intensive is getting c8 from raw .ts ? can an average e2 box do it without much fuss?

this is an approach...i guess if the SR is 7199 or 7200 or 7202 wil be considered the same. Regarding the ability to get c8 from raw ts not sure how to do that in python too, need to study the cpp code to understand

Getting c8 from raw ts is very easy. In the pic you see a part of a raw scrambled ts stream. "47h" indicates the start of the TS package. "07 D1" is the PID. The "9" indicates that the package is scrambled (even/odd depends on the bit which is set). "68 B8 18 EB F2 76 EC BE" is the c8 key. Lenght of one package is 188 Bytes.

Quote from jenseneverest

Great!! well I am all for getting a server up and running thanks ziko

How much space do we need? zapf2000

From memory it is about 2tb.....

I'm at work now.... but let's make this happen guys

We would need about 1.1TB free space for the rainbow tables. But much more important is a powerful GPU.

Quote from master G

Quote from zapf2000

We would need about 1.1TB free space for the rainbow tables. But much more important is a powerful GPU.

I'm not at work but doing some hobby stuff right now... https://ggrn.de ;)

Music and Beer

Give us an idea of the exact specifications buddy so we can try to organise something.

my 3 rainbow tables are around 3,75TB

Quote from ziko

here is a script iv'e built based on the perl script to get the c8 from stream instead of reading from a ts file.

we could easily turn this into a plugin but we need a service that provied cw based on the c8

Code

import requests, time

even_c8 = {}
odd_c8 = {}

start_time = time.time()


with requests.get("http://192.168.1.8:8001/1:0:1:1:1:FFFF:46ABB5:0:0:0", stream=True) as r:
    for chunk in r.iter_content(chunk_size=188):
        packet = chunk
        if not packet:
            break

        header_2 = packet[1]
        header_3 = packet[2]
        header_4 = packet[3]

        tmp_pid = (header_2 & 0x1F << 8) | (header_3)
        scrambled = (header_4 >> 6)
        af = (header_4 >> 4) & 0x3
        offset=4
        tmp_pls=0
        if (tmp_pid < 0x1FFF) and (tmp_pid > 0x001F) and (scrambled > 1):
            if af == 0x1:
                tmp_pls = 184
                offset = 4
            elif af == 0x3:
                tmp_pls = 184 - packet[4] - 1
                offset = packet[4] + 1 + 4
            tmp_pls = int(tmp_pls / 8) * 8
            # print(offset)
            if offset > 180:
                offset = 4
            c8 = packet[offset:offset + 8].hex()
            
            # print(c8, scrambled, tmp_pls, tmp_pid)
            if scrambled == 2: # even
                if tmp_pls not in even_c8:
                    even_c8[tmp_pls] = {}
                if tmp_pid not in even_c8[tmp_pls]:
                    even_c8[tmp_pls][tmp_pid] = {}
                if c8 not in even_c8[tmp_pls][tmp_pid]:
                    even_c8[tmp_pls][tmp_pid][c8] = 0
                    
                even_c8[tmp_pls][tmp_pid][c8] += 1

            elif scrambled == 3: # odd
                if tmp_pls not in odd_c8:
                    odd_c8[tmp_pls] = {}
                if tmp_pid not in odd_c8[tmp_pls]:
                    odd_c8[tmp_pls][tmp_pid] = {}
                if c8 not in odd_c8[tmp_pls][tmp_pid]:
                    odd_c8[tmp_pls][tmp_pid][c8] = 0
                odd_c8[tmp_pls][tmp_pid][c8] += 1

        if time.time() - start_time > 240:
            break
            

pid="all"
tmp_pls=184
print(f"Using payload size: {tmp_pls}")
for tmp_pid in sorted(even_c8[tmp_pls]):
    counter=0
    for c8 in sorted(even_c8[tmp_pls][tmp_pid], key=even_c8[tmp_pls][tmp_pid].get, reverse=True):
        if even_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
            if pid=="all" or pid==tmp_pid:
                print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [E] Count:{even_c8[tmp_pls][tmp_pid][c8]}")
                counter += 1
    if counter>0:
        print()

if len(odd_c8) > 0:
    for tmp_pid in sorted(odd_c8[tmp_pls]):
        counter=0
        for c8 in sorted(odd_c8[tmp_pls][tmp_pid], key=odd_c8[tmp_pls][tmp_pid].get, reverse=True):
            if odd_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
                if pid=="all" or pid==tmp_pid:
                    print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [O] Count:{odd_c8[tmp_pls][tmp_pid][c8]}")
                    counter += 1
        if counter>0:
            print()

Display More

i cannot make it work... is it working for you?

Quote from rush1

Quote from ziko

here is a script iv'e built based on the perl script to get the c8 from stream instead of reading from a ts file.

we could easily turn this into a plugin but we need a service that provied cw based on the c8

Code

import requests, time

even_c8 = {}
odd_c8 = {}

start_time = time.time()


with requests.get("http://192.168.1.8:8001/1:0:1:1:1:FFFF:46ABB5:0:0:0", stream=True) as r:
    for chunk in r.iter_content(chunk_size=188):
        packet = chunk
        if not packet:
            break

        header_2 = packet[1]
        header_3 = packet[2]
        header_4 = packet[3]

        tmp_pid = (header_2 & 0x1F << 8) | (header_3)
        scrambled = (header_4 >> 6)
        af = (header_4 >> 4) & 0x3
        offset=4
        tmp_pls=0
        if (tmp_pid < 0x1FFF) and (tmp_pid > 0x001F) and (scrambled > 1):
            if af == 0x1:
                tmp_pls = 184
                offset = 4
            elif af == 0x3:
                tmp_pls = 184 - packet[4] - 1
                offset = packet[4] + 1 + 4
            tmp_pls = int(tmp_pls / 8) * 8
            # print(offset)
            if offset > 180:
                offset = 4
            c8 = packet[offset:offset + 8].hex()
            
            # print(c8, scrambled, tmp_pls, tmp_pid)
            if scrambled == 2: # even
                if tmp_pls not in even_c8:
                    even_c8[tmp_pls] = {}
                if tmp_pid not in even_c8[tmp_pls]:
                    even_c8[tmp_pls][tmp_pid] = {}
                if c8 not in even_c8[tmp_pls][tmp_pid]:
                    even_c8[tmp_pls][tmp_pid][c8] = 0
                    
                even_c8[tmp_pls][tmp_pid][c8] += 1

            elif scrambled == 3: # odd
                if tmp_pls not in odd_c8:
                    odd_c8[tmp_pls] = {}
                if tmp_pid not in odd_c8[tmp_pls]:
                    odd_c8[tmp_pls][tmp_pid] = {}
                if c8 not in odd_c8[tmp_pls][tmp_pid]:
                    odd_c8[tmp_pls][tmp_pid][c8] = 0
                odd_c8[tmp_pls][tmp_pid][c8] += 1

        if time.time() - start_time > 240:
            break
            

pid="all"
tmp_pls=184
print(f"Using payload size: {tmp_pls}")
for tmp_pid in sorted(even_c8[tmp_pls]):
    counter=0
    for c8 in sorted(even_c8[tmp_pls][tmp_pid], key=even_c8[tmp_pls][tmp_pid].get, reverse=True):
        if even_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
            if pid=="all" or pid==tmp_pid:
                print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [E] Count:{even_c8[tmp_pls][tmp_pid][c8]}")
                counter += 1
    if counter>0:
        print()

if len(odd_c8) > 0:
    for tmp_pid in sorted(odd_c8[tmp_pls]):
        counter=0
        for c8 in sorted(odd_c8[tmp_pls][tmp_pid], key=odd_c8[tmp_pls][tmp_pid].get, reverse=True):
            if odd_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
                if pid=="all" or pid==tmp_pid:
                    print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [O] Count:{odd_c8[tmp_pls][tmp_pid][c8]}")
                    counter += 1
        if counter>0:
            print()

Display More

i cannot make it work... is it working for you?

import requests, time
from collections import defaultdict
import xml.etree.ElementTree as ET

def getC8fromStream(serviceRef):
    even_c8 = defaultdict(lambda: defaultdict(lambda: defaultdict(int)))
    odd_c8 = defaultdict(lambda: defaultdict(lambda: defaultdict(int)))
    start_time = time.time()
    with requests.get(f"http://192.168.1.8:8001/{serviceRef}", stream=True) as r:
        for chunk in r.iter_content(chunk_size=188):
            packet = chunk
            if not packet:
                break

            header_2 = packet[1]
            header_3 = packet[2]
            header_4 = packet[3]

            tmp_pid = ((header_2 & 0x1F) << 8) | (header_3)
            scrambled = (header_4 >> 6)
            af = (header_4 >> 4) & 0x3
            offset=4
            tmp_pls=0
            
            if (tmp_pid < 0x1FFF) and (tmp_pid > 0x001F) and (scrambled > 1):
                if af == 0x1:
                    tmp_pls = 184
                    offset = 4
                elif af == 0x3:
                    tmp_pls = 184 - packet[4] - 1
                    offset = packet[4] + 1 + 4
                tmp_pls = int(tmp_pls / 8) * 8
                # print(offset)
                if offset > 180:
                    offset = 4
                c8 = packet[offset:offset + 8].hex().upper()
                
                # print(c8, scrambled, tmp_pls, tmp_pid)
                if scrambled == 2: # even
                    even_c8[tmp_pls][tmp_pid][c8] += 1
                    # if even_c8[tmp_pls][tmp_pid][c8] > 1000:
                    #     break

                elif scrambled == 3: # odd
                    odd_c8[tmp_pls][tmp_pid][c8] += 1

                if time.time() - start_time > 60:
                    break
                
    showFoundedC8(even_c8, odd_c8)
            
def showFoundedC8(even_c8, odd_c8):
    pid="all"
    tmp_pls=184
    # low=1
    # high=23
    print(f"Using payload size: {tmp_pls}")
    # for i in range(low, high+1):
    if tmp_pls in even_c8:
        for tmp_pid in sorted(even_c8[tmp_pls]):
            counter=0
            for c8 in sorted(even_c8[tmp_pls][tmp_pid], key=even_c8[tmp_pls][tmp_pid].get, reverse=True):
                if even_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
                    if pid=="all" or pid==tmp_pid:
                        print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [E] Count:{even_c8[tmp_pls][tmp_pid][c8]}")
                        counter += 1
            if counter>0:
                print()
    if tmp_pls in odd_c8:
        for tmp_pid in sorted(odd_c8[tmp_pls]):
            counter=0
            for c8 in sorted(odd_c8[tmp_pls][tmp_pid], key=odd_c8[tmp_pls][tmp_pid].get, reverse=True):
                if odd_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
                    if pid=="all" or pid==tmp_pid:
                        print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [O] Count:{odd_c8[tmp_pls][tmp_pid][c8]}")
                        counter += 1
            if counter>0:
                print()

def getCurrentService(ip):
    url = requests.get(f'http://{ip}/web/getcurrent').content
    root = ET.fromstring(url)
    e2service = root.find('./e2service')
    e2servicereference = e2service.find('./e2servicereference').text
    return e2servicereference

def main():
    box_ip = input("Please enter your box ip: ")
    e2ServiceRef = getCurrentService(box_ip)
    getC8fromStream(e2ServiceRef)

if __name__ == '__main__':
    main()

Screenshot from 2023-01-28 13-34-13.png

Quote from zapf2000

Yes, rush1 is right. Every request is hash based, so it's not possible to get the key directly (perhaps through an API, but it's unknown). I'll sniff communication with wireshark when I have time to.

hi did you get a chance to check this with wire shark ?

Quote from ziko

here is a script iv'e built based on the perl script to get the c8 from stream instead of reading from a ts file.

we could easily turn this into a plugin but we need a service that provied cw based on the c8

i would like to test the script with a recorded ts file as input . what should be changed in the code.. ? could you point me to github if the code for ts file is already open source ?

cheers

Quote from Freshmint

Quote from zapf2000

Yes, rush1 is right. Every request is hash based, so it's not possible to get the key directly (perhaps through an API, but it's unknown). I'll sniff communication with wireshark when I have time to.

hi did you get a chance to check this with wire shark ?

Quote from ziko

here is a script iv'e built based on the perl script to get the c8 from stream instead of reading from a ts file.

we could easily turn this into a plugin but we need a service that provied cw based on the c8

i would like to test the script with a recorded ts file as input . what should be changed in the code.. ? could you point me to github if the code for ts file is already open source ?

cheers

Display More

import requests, time
from collections import defaultdict
import xml.etree.ElementTree as ET

def getC8fromStream(filename):
    even_c8 = defaultdict(lambda: defaultdict(lambda: defaultdict(int)))
    odd_c8 = defaultdict(lambda: defaultdict(lambda: defaultdict(int)))
    start_time = time.time()
    with open(filename, 'rb') as f:
        while True:
            chunk = f.read(188)
            if not chunk:
                break
            packet = chunk

            header_2 = packet[1]
            header_3 = packet[2]
            header_4 = packet[3]

            tmp_pid = ((header_2 & 0x1F) << 8) | (header_3)
            scrambled = (header_4 >> 6)
            af = (header_4 >> 4) & 0x3
            offset=4
            tmp_pls=0

            if (tmp_pid < 0x1FFF) and (tmp_pid > 0x001F) and (scrambled > 1):
                if af == 0x1:
                    tmp_pls = 184
                    offset = 4
                elif af == 0x3:
                    tmp_pls = 184 - packet[4] - 1
                    offset = packet[4] + 1 + 4
                tmp_pls = int(tmp_pls / 8) * 8
                # print(offset)
                if offset > 180:
                    offset = 4
                c8 = packet[offset:offset + 8].hex().upper()

                # print(c8, scrambled, tmp_pls, tmp_pid)
                if scrambled == 2: # even
                    even_c8[tmp_pls][tmp_pid][c8] += 1
                    # if even_c8[tmp_pls][tmp_pid][c8] > 1000:
                    #     break

                elif scrambled == 3: # odd
                    odd_c8[tmp_pls][tmp_pid][c8] += 1

                if time.time() - start_time > 60:
                    break

    showFoundedC8(even_c8, odd_c8)

def showFoundedC8(even_c8, odd_c8):
    pid="all"
    tmp_pls=184
    # low=1
    # high=23
    print(f"Using payload size: {tmp_pls}")
    # for i in range(low, high+1):
    if tmp_pls in even_c8:
        for tmp_pid in sorted(even_c8[tmp_pls]):
            counter=0
            for c8 in sorted(even_c8[tmp_pls][tmp_pid], key=even_c8[tmp_pls][tmp_pid].get, reverse=True):
                if even_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
                    if pid=="all" or pid==tmp_pid:
                        print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [E] Count:{even_c8[tmp_pls][tmp_pid][c8]}")
                        counter += 1
            if counter>0:
                print()
    if tmp_pls in odd_c8:
        for tmp_pid in sorted(odd_c8[tmp_pls]):
            counter=0
            for c8 in sorted(odd_c8[tmp_pls][tmp_pid], key=odd_c8[tmp_pls][tmp_pid].get, reverse=True):
                if odd_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
                    if pid=="all" or pid==tmp_pid:
                        print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [O] Count:{odd_c8[tmp_pls][tmp_pid][c8]}")
                        counter += 1
            if counter>0:
                print()

def getCurrentService(ip):
    url = requests.get(f'http://{ip}/web/getcurrent').content
    root = ET.fromstring(url)
    e2service = root.find('./e2service')
    e2servicereference = e2service.find('./e2servicereference').text
    return e2servicereference

def main():
    #box_ip = input("Please enter your box ip: ")
    #e2ServiceRef = getCurrentService(box_ip)
    #getC8fromStream(e2ServiceRef)
    getC8fromStream("000.ts")

if __name__ == '__main__':
    main()

done a quick mod to read from a file

better version with filename from command line

import requests, time
from collections import defaultdict
import xml.etree.ElementTree as ET
import argparse

def getC8fromStream(filename):
    even_c8 = defaultdict(lambda: defaultdict(lambda: defaultdict(int)))
    odd_c8 = defaultdict(lambda: defaultdict(lambda: defaultdict(int)))
    start_time = time.time()
    with open(filename, 'rb') as f:
        while True:
            chunk = f.read(188)
            if not chunk:
                break
            packet = chunk

            header_2 = packet[1]
            header_3 = packet[2]
            header_4 = packet[3]

            tmp_pid = ((header_2 & 0x1F) << 8) | (header_3)
            scrambled = (header_4 >> 6)
            af = (header_4 >> 4) & 0x3
            offset=4
            tmp_pls=0

            if (tmp_pid < 0x1FFF) and (tmp_pid > 0x001F) and (scrambled > 1):
                if af == 0x1:
                    tmp_pls = 184
                    offset = 4
                elif af == 0x3:
                    tmp_pls = 184 - packet[4] - 1
                    offset = packet[4] + 1 + 4
                tmp_pls = int(tmp_pls / 8) * 8
                # print(offset)
                if offset > 180:
                    offset = 4
                c8 = packet[offset:offset + 8].hex().upper()

                # print(c8, scrambled, tmp_pls, tmp_pid)
                if scrambled == 2: # even
                    even_c8[tmp_pls][tmp_pid][c8] += 1
                    # if even_c8[tmp_pls][tmp_pid][c8] > 1000:
                    #     break

                elif scrambled == 3: # odd
                    odd_c8[tmp_pls][tmp_pid][c8] += 1

                if time.time() - start_time > 60:
                    break

    showFoundedC8(even_c8, odd_c8)

def showFoundedC8(even_c8, odd_c8):
    pid="all"
    tmp_pls=184
    # low=1
    # high=23
    print(f"Using payload size: {tmp_pls}")
    # for i in range(low, high+1):
    if tmp_pls in even_c8:
        for tmp_pid in sorted(even_c8[tmp_pls]):
            counter=0
            for c8 in sorted(even_c8[tmp_pls][tmp_pid], key=even_c8[tmp_pls][tmp_pid].get, reverse=True):
                if even_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
                    if pid=="all" or pid==tmp_pid:
                        print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [E] Count:{even_c8[tmp_pls][tmp_pid][c8]}")
                        counter += 1
            if counter>0:
                print()
    if tmp_pls in odd_c8:
        for tmp_pid in sorted(odd_c8[tmp_pls]):
            counter=0
            for c8 in sorted(odd_c8[tmp_pls][tmp_pid], key=odd_c8[tmp_pls][tmp_pid].get, reverse=True):
                if odd_c8[tmp_pls][tmp_pid][c8]>1 and counter<11:
                    if pid=="all" or pid==tmp_pid:
                        print(f"PID {tmp_pid:0X}h {tmp_pls:0X}h-Crypt8: {c8} [O] Count:{odd_c8[tmp_pls][tmp_pid][c8]}")
                        counter += 1
            if counter>0:
                print()

def main():
    parser = argparse.ArgumentParser()
    parser.add_argument("filename", help="ts filename")
    args = parser.parse_args()
    getC8fromStream(args.filename)

if __name__ == '__main__':
    main()

Any updates on the server ? i'm looking forward to it ,

i have contacted free dvb to give us the access to their API but they didn't respond

Quote from ziko

Any updates on the server ? i'm looking forward to it ,

i have contacted free dvb to give us the access to their API but they didn't respond

that's a pity, having access to their service we could create a frontend to cache requests (to avoid sending always the same to their server) and give fast reply to clients. If a C8 is new then we could forward it to the aubiss server

having a server with GPU is pretty expensive even though I found some cheat VPS with GPU at around 20$/month but not sure if they are reliable or not

Quote from ziko

Any updates on the server ? i'm looking forward to it ,

i have contacted free dvb to give us the access to their API but they didn't respond

Freedvb has the fastest autoroll biss service and that's what sells their boxes (Hellobox).. you will need to give them something in return.. probably help to improve their softwares.

Hi.

I am also interested in biss codes. Especially sports feeds.)

But as far as I know, only hellobox and Get media combo can only auto bis, unfortunately.

I have VU+uno 4kse, is there a plugin that can be installed to decrypt the biss key?

Will the program you want to do run on Enigma2 machines?

Quote from Yawwilson

Quote from ziko

Any updates on the server ? i'm looking forward to it ,

i have contacted free dvb to give us the access to their API but they didn't respond

Freedvb has the fastest autoroll biss service and that's what sells their boxes (Hellobox).. you will need to give them something in return.. probably help to improve their softwares.

i think forever has the best AU biss service