So this is clear. Let's say i've got site whatever.com and they do live streams, of course their stream is filled with ads and whatnot - What if I want to use it without their ads specifically?
(Im not trying to use this to make money though...this is a personal test, but yeah, I realize the potential use of this lol)
They are obviously using protection from people like me so let's go into what matters.
Finding the m3u8 playlist/host isn't hard and they are using a key as a protection. When copying this url with the key embedded, into another tab - the result is:
"403 Access to whatever.com was denied
You don't have authorization to view this page"
Now the thing is, am I already screwed (because it is domain restricted) or is it still workable? Cause if the key is session specific then it wouldn't work either way.
As a noob test I copied the site using htt track but ofc the flow is all screwed. Im looking at the site now and finding who does what and who calls who, the js is obfuscated n sht so well it's pretty hard for a newbie like me.
(Im not trying to use this to make money though...this is a personal test, but yeah, I realize the potential use of this lol)
They are obviously using protection from people like me so let's go into what matters.
Finding the m3u8 playlist/host isn't hard and they are using a key as a protection. When copying this url with the key embedded, into another tab - the result is:
"403 Access to whatever.com was denied
You don't have authorization to view this page"
Now the thing is, am I already screwed (because it is domain restricted) or is it still workable? Cause if the key is session specific then it wouldn't work either way.
As a noob test I copied the site using htt track but ofc the flow is all screwed. Im looking at the site now and finding who does what and who calls who, the js is obfuscated n sht so well it's pretty hard for a newbie like me.