paramount

README

Paramount+

paypal.com

1. about:config
2. general.useragent.override
3. string
4. add
5. Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0
6. paramountplus.com
7. get started
8. paramount+ premium
   • continue
9. full name
10. email

• mail.tm

1. password
2. zip code
3. birthdate
4. gender
5. agree & continue
6. paypal
7. continue to paypal
8. agree and continue
9. subscribe
10. paypal.com/myaccount/autopay
11. paramount
12. stop paying with paypal

privacy.com

1. about:config
2. general.useragent.override
3. string
4. add
5. Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0
6. paramountplus.com
7. get started
8. paramount+ essential
   • continue
9. full name
10. email
11. password
12. zip code
13. birthdate
14. gender
15. agree & continue
16. first name
17. last name
18. address
19. city
20. state
21. zip
22. credit card
23. exp MM
24. YYYY
25. CVV
26. subscribe

POST /account/xhr/processPayment/ HTTP/2
Host: www.paramountplus.com

HTTP/2 200 OK

message = "Error occurred. Please try again.";
recaptchaTokenValidated = true;
success = false;
trackingMessage = "Could not purchase subscription. Error:
ErrorResponse(error=ErrorResponse.ErrorDetail(type=transaction, message=The
transaction was declined. Please use a different card, contact your bank, or
contact support., params=null,
transactionError=ErrorResponse.TransactionError(object=transaction_error,
transactionId=ybs6siqfsn9x, category=fraud, threeDSecureActionTokenId=null,
code=fraud_gateway)))";

link.theplatform.com

why do we need link.theplatform.com? because its the only anonymous option. logged out web client is missing MPD:

https://paramountplus.com/shows/mayor-of-kingstown/video/xhr/episodes/page/0/size/18/xs/0/season/3

logged in the web client embeds MPD in HTML. with the below items, you need UK IP and Android cookie, else MPD will be missing. web cookie fails. get Android cookie:

POST https://www.paramountplus.com/apps-api/v2.0/androidphone/auth/login.json?at=ABDFhCKlU... HTTP/1.1
content-type: application/x-www-form-urlencoded

j_username=EMAIL&j_password=PASSWORD

https://www.intl.paramountplus.com/apps-api/v2.0/androidtv/video/cid/Y8sKvb2bIoeX4XZbsfjadF4GhNPwcjTQ.json?locale=en-us&at=ABA3WXXZwgC0rQPN9WtWEUmpHsGCFJb6NP4tGjIFVLTuScgId9WA3LdC44hdHUJysQ0%3D

https://www.intl.paramountplus.com/apps-api/v3.0/androidtv/movies/Y8sKvb2bIoeX4XZbsfjadF4GhNPwcjTQ.json?includeTrailerInfo=true&includeContentInfo=true&locale=en-us&at=ABDSbrWqqlbSWOrrXk8u9NaNdokPC88YiXcPvIFhPobM3a%2FJWNOSwiCMklwJDDJq4c0%3D

https://paramountplus.com/apps-api/v3.1/androidphone/irdeto-control/anonymous-session-token.json?contentId=Y8sKvb2bIoeX4XZbsfjadF4GhNPwcjTQ&model=AOSP%20on%20IA%20Emulator&firmwareVersion=9&version=15.0.28&platform=PP_AndroidApp&locale=en-us&locale=en-us&at=ABBoPFHuygkRnnCKELRhypuq5uEAJvSiVATsY9xOASH88ibse11WuoLrFnSDf0Bv7EY%3D

https://www.intl.paramountplus.com/apps-api/v3.1/androidtv/irdeto-control/session-token.json?contentId=Y8sKvb2bIoeX4XZbsfjadF4GhNPwcjTQ&model=sdk_google_atv_x86&firmwareVersion=9&version=15.0.28&platform=PPINTL_AndroidTV&locale=en-us&at=ABBoPFHuygkRnnCKELRhypuq5uEAJvSiVATsY9xOASH88ibse11WuoLrFnSDf0Bv7EY%3D

android

intl: https://apkmirror.com/apk/viacomcbs-streaming/paramount-4

old: https://apkmirror.com/apk/viacomcbs-streaming/paramount-3

android TV: https://apkmirror.com/apk/viacomcbs-streaming/paramount-2

us: https://apkmirror.com/apk/viacomcbs-streaming/paramount

minimum version: Android 7 (24)

~/.android/avd/Pixel_XL.avd/emulator-user.ini

to:

window.x = 0
window.y = 0

then:

adb install-multiple (Get-ChildItem *.apk)

install system certificate

How to get secret_key?

com\cbs\app\androiddata\retrofit\util\RetrofitUtil.java
SecretKeySpec secretKeySpec = new SecretKeySpec(b("302a6a0d70a7e9b967f91d39fef3e387816e3095925ae4537bce96063311f9c5"), "AES");

Documentation

Index

• Variables
• func GetAt(appSecret string) (string, error)
• func Login(at, username, password string) (*http.Cookie, error)
• type Dash
• type Item
  • func FetchItem(at, cId string) (*Item, error)
  • func (i *Item) Dash() (*Dash, error)
• type Provider
• type SessionToken
  • func PlayReady(at, contentId string, cookie *http.Cookie) (*SessionToken, error)
  • func Widevine(at, contentId string, cookie *http.Cookie) (*SessionToken, error)
  • func (s *SessionToken) Send(data []byte) ([]byte, error)

Variables

var ComCbsApp = Provider{
	AppSecret: "9fc14cb03691c342",
	Version:   "16.0.0",
}

var ComCbsCa = Provider{
	AppSecret: "6c68178445de8138",
	Version:   "16.0.0",
}

Functions

func GetAt

func GetAt(appSecret string) (string, error)

func Login

func Login(at, username, password string) (*http.Cookie, error)

WARNING IF YOU RUN THIS TOO MANY TIMES YOU WILL GET AN IP BAN. HOWEVER THE BAN IS ONLY FOR THE ANDROID CLIENT NOT WEB CLIENT

Types

type Dash

type Dash struct {
	Body []byte
	Url  *url.URL
}

type Item

type Item struct {
	CmsAccountId string
	ContentId    string
}

func FetchItem

func FetchItem(at, cId string) (*Item, error)

func (*Item) Dash

func (i *Item) Dash() (*Dash, error)

type Provider

type Provider struct {
	AppSecret string
	Version   string
}

type SessionToken

type SessionToken struct {
	LsSession string `json:"ls_session"`
	Url       string
}

func PlayReady

func PlayReady(at, contentId string, cookie *http.Cookie) (*SessionToken, error)

1080p SL2000 1440p SL2000 + cookie

func Widevine

func Widevine(at, contentId string, cookie *http.Cookie) (*SessionToken, error)

576p L3

func (*SessionToken) Send

func (s *SessionToken) Send(data []byte) ([]byte, error)