This is the weirdest thread I had seen in this forum.
I do not know who is who? Bad comments coming from all sides.
My last post here.
MODERATORS Please be aware SEARCH does not work without JAVA SCRIPT. Many of us like to visit forums on a safe way. This mean JAVA SCRIPT has to be OFF.
So please allow SEARCH with JAVA OFF. And we will be able to make happy all this ... people. Thanks.
Do not forget to delete post #16 & 18 so that I can write it on a more relax place where people are willing to help and not complain. Please notice that I am not welcome in this thread. Thanks for the help.
Hi, no need to have your post deleted.
I read your post yesterday, but I was waiting someone more expert than me could write something about. But none answered, so I'm doing it just today and I'm gonna to give a brief explanation here and a more detailed in private. As I'm gonna answer
CANADA too in pm later...
But, consider this 2 things before your request analysis.
1) There are many experts on SU working with biss decryption tools, but it's possible very few really know as the system works, as programs where studied, conceived and developed.
So it's not ever easy to have an answer to certain questions...
Many here are as good car pilots. They drive very well, but you can't ask them mechanical stuff or to build a car by their own
So, it's really possible none, since the brief time of your posted request, can really analyse your log and answer to you.
2) Biss tools developers in past gave us the possibility to decrypt a c8 in a very brief time that goes since 30 sec. to few minutes and have a very high success rate for almost all c8 found in a day in every feed.
Less than a year ago about the development tools were stopped (i.e. V2 tables can't be increased anymore).
But there would be many things to do yet...
So why everything has been stopped?
This is because, developers have probably understood that you can win some battles with biss providers, but
you can't win the war!!!
If you pretend to have every single c8 just decrypted with no problem in few minutes and think too this system can endure for life, you're simpy a fool!!!
Because each provider would study a more stronger encryption method and you couldn't watch any feed anymore.
I don't know if you realise those simple things as I did as follows...
Number of cw found every week is ever increasing, lots users who posted c8 requests in postcrypt section in the past are with time became themselves helper in finding cw...
How much time do you believe the system could survive if you immediatly are able to find
every cw in a while?
So, you can understand easily why the biss tools development had suddenly ceased.
'cause if it continues by such step it would be the end of biss game very soon!
Ok,
let's get the technical part now..
You wrote...
(...)
A Full TS line is 188 bytes, or 4 byte of Header + 184 Payload.
So the Plain Line is just
B8hx00h
Code:
47 3F 41 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
B8hxFFh
Code:
47 3F 41 10 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF
Corrupted or fake crypt8 as example a Null packet got encrypted inside a Packed DTT.
Code:
47 22 BE 1C 47 1F FF 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1-So can any one show me the other samples?
They are all fakes and I don't know as you've found them in a ts files.
A c8 in a ts files has this structure
Code:
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
where you have a header
47 02 00 98 + 184 bytes body
The header is so diveded
47 separetor byte
02 00 (transmission pid) In our case 200 (a standar hex video pid)
indicator byte 9X (with x= 1-F)
While the following 184 bytes:
c8 (8 bytes) + 176 restant body bytes
So you have a real C8
and command body remainder (176 bytes)
Code:
...A8 E5 22 D5 C0 DB EA F0 D0 2F F3 95 70 AF 58 09 3A 92 95 48 03 64 27 4E 2B 10 69 42 A6 0E CE D3 FA 63 1A 80 62 29 04 7F 08 2B F2 DE 51 90 D4 10 F2 DC 57 76 3B 0E 34 51 88 38 5C C2 F0 6D F9 0C 2A 16 6A 8F AA 3A E2 99 9A CE AD C3 39 02 72 6C 6A BA F4 9A B9 E0 1A 55 F7 EF 56 25 C1 2B 3A 2F D9 C1 F1 C7 9A 56 D4 0E C3 F2 46 7A 28 D3 CC EE 02 73 1E 87 C2 EE E5 64 68 E1 C3 B1 A7 35 E5 3F 94 9C 26 BD 44 87 7E 10 C9 75 38 C9 BD F1 65 2D BD 69 88 95 C0 04 C1 4F F4 17 CA 6E 76 7A 0A CE 46 09 E2 C8 11 38 80 42 2E 7C D6 0B 0E FC 25 F3
So if you look for a c8 in a ts file you ever has to look to this header:
47 yy yy 9x...
where yy yy is related to the pid kind you're looking for.
What's CSA-rainbow-Table-tool first step in search?
Just knowing to be considered as valid a c8 has to be repeated more times in a ts files, it scans it and saves and orders the variuos c8 for pid and decreasing repetition number, so to show us which, the most probable c8, is :thum:
@klim