Can we find a Biss key with fake crypt8! for discussion.

A

asoom_jamjom

Registered
Messages
48
Hello
I'm wondering if we can find a biss key if the Ts file is giving false crypt8
as an example of that is beoutQ boquet in badr that is biss encrypted but no actual crypt8 is found.
when I did analyze the stream with Ts analyzer it shows the channels as unknown stream type ? (https://ibb.co/h8154J) screenshot

before nearly 3 months bisskey for the channels were found ,, then when I've tried to record a ts and bruteforce the ts file with csabruteforce containing a ragne of keys with the found actual Biss key, it didn't work !!

do you think the stream type itself as unknown stream but not video or audio is the cause? BTW it's H265.

any Idea will be appreciated.
 
Ratzvan

Ratzvan

Feed Hunter
Messages
22,693
asoom_jamjom said:
Hello
I'm wondering if we can find a biss key if the Ts file is giving false crypt8
as an example of that is beoutQ boquet in badr that is biss encrypted but no actual crypt8 is found.
when I did analyze the stream with Ts analyzer it shows the channels as unknown stream type ? (https://ibb.co/h8154J) screenshot

before nearly 3 months bisskey for the channels were found ,, then when I've tried to record a ts and bruteforce the ts file with csabruteforce containing a ragne of keys with the found actual Biss key, it didn't work !!

do you think the stream type itself as unknown stream but not video or audio is the cause? BTW it's H265.

any Idea will be appreciated.
Click to expand...

No, you can't.
Because fake c8 are totally useless.
Sorry.
 
0

007.4

VIP
Messages
364
@asoom jamjom

Is that a recent screen shot?
I've just tried to tune to 11919H/27500/5/6 S2/8PSK on 26E and get no signal at all.
Whereas 11977V which is also s2/8PSK and appears to be on the same badr-4 BSS beam is coming in strongly.

Can someone confirm 11919H is still active. I'd like to look at the full TS.
 
0

007.4

VIP
Messages
364
Then I do not understand why I cannot get it with my 1.80m PF dish.
Can anyone in the UK confirm reception of this 11919H transponder on this bird and with what dish size.
 
0

007.4

VIP
Messages
364
Yes, I've seen that but Lyngsat could be wrong.
According to Flysat and our friend asoom_jamjom it is still there. That is why I asked him WHEN he took the screenshot.
 
A

asoom_jamjom

Registered
Messages
48
kebien said:
You can always try cudabiss to find the keys.
Click to expand...

The problem is that the stream pids appears as data but not video or audio pids .. so cuda biss couldn't detect data inside ts.

Anyway is there is ts editor to change the data type from unkown pids to vipds?
 
0

007.4

VIP
Messages
364
When you say "encryption" I believe you mean "scrambling".
The encryption is BISS as shown in the PMT.
eg
Code: 
47 50 05 14 00 02 B0 1E 0C 1C C9 00 00 F4 14 F0
06 09 04 26 00 FF FF 24 F4 14 F0 06 
09_04  26 00
FF FF 
0C 02 41 AC
 
K

kebien

Registered
Messages
1,329
asoom_jamjom said:
The problem is that the stream pids appears as data but not video or audio pids .. so cuda biss couldn't detect data inside ts.

Anyway is there is ts editor to change the data type from unkown pids to vipds?
Click to expand...

If it is data with encapsulated video and audio could need to be decrypted first in order to extract video and audio pids.
In that case would look like that spanish service (Albertis)??
Most tables are only readable after decryption,and there are threads on this subjects too.

But I see PMT is clear....maybe time to look a bit into it

No tables shown in the posted TS,must be all encrypted,only PAT in the clear.

Where did you get that PMT packet from?? or maybe that TS posted is not the full TS,no way to know from here
 
Last edited:
0

007.4

VIP
Messages
364
The SDT (pid 0x11) is clear and contains these ascii strings
Code: 
Selevision Seevii Doc HD
Selevision Seevii Shamiya HD
Selevision Seevii Drama HD
Selevision Seevii Al-Oula HD
Selevision Prime3 
Selevision Prime2 
Selevision Prime1
Selevision Seevii Documentary
Selevision Seevii Shamiya   
Selevision Seevii Drama     
Selevision Seevii Al-Oula

Seevii is a IPTV streaming service based in UAE.

So it would appear this transponder has nothing to do with beoutQ...... unless this is all fake information......?

EDIT
@kebien
You can find the PMT pids in the PAT.

Here are a few more
Code: 
PMT 4015dec

47 4F AF 13 00 
02 B0 1E 
0B C6 E3 00 00 F4 0F 
F0 06 09 04 26 00 FF FF  ;CAID
24 F4 0F 
F0 06 09 04 26 00 FF FF  ;CAID 
B1 C5 77 56 ;CRC


PMT 4051dec

47 4F D3 1F 00 
02 B0 1E 
0B EA D5 00 00 F4 16 
F0 06 09 04 26 00 FF FF 
24 F4 16 
F0 06 09 04 26 00 FF FF 
EE DF 53 BE  ;CRC


PMT 4101dec

47 50 05 15 00 
02 B0 1E 
0C 1C C9 00 00 F4 14 
F0 06 09 04 26 00 FF FF 
24 F4 14 
F0 06 09 04 26 00 FF FF 
0C 02 41 FF ;CRC
Seemingly there is no "normal" information (A/V pids) etc. other than the CAID in these packets.
 
Last edited:
0

007.4

VIP
Messages
364
This is the CAT also clear.
Code: 
47 40 01 17 
00 01 B0 0F FF FF C3 00 00 
09_04 06 D9 E0 CB ; CAID
FE 08 3F 49 ;CRC

06D9 is Seevii TV's proprietry Irdet0 2 CAID.

So are they using 2600 or 06D9 or both????
 
0

007.4

VIP
Messages
364
This is a really interesting TS :)

PID142 (dec) has this ascii string

Code: 
ota #eng 
DA 21 C2 xx 30 xx 82 xx 19 xx 72 FC 3E 28 45 AF

[Some bytes edited out]. Could that be a key of some kind?

Other PIDs like 180 (dec) have packets like this
Code: 
47 40 B4 18 00 
81 70 
5B ;length
47 00 00 00 7A 00 08 80  ;header
52 ;length
1F 51 73 C4 E3 20 B3 CA C6 9B A1 A4 C6 F0 BC
69 7E 16 F0 82 70 93 E8 69 1F FC E9 05 70 15 78
80 82 AC 39 9F A0 42 CF 44 AA 84 F2 59 96 19 6E
AE FB 1A 99 86 75 3F 32 13 EA DE EB E5 CD 36 E0
4B 13 8F 9F 51 E1 BF A7 FD E3 CD CC 12 0F DF 4D
CF 5A A9

This looks very much like some form of an ECM to me.
 
You must log in or register to reply here.
Top