Download LED TV (VadersTV) 2.1.9 2.1.9

[Ian]

Hey guys, Thanks for checking out the thread!
In this one it's not too useful but one of you bright people may be able to make some use of it.

LED TV is the APK given out too use with a VadersTV IPTV Subscription, someone recently asked me if i would be able to crack the APK to be able to worth with other DNS's.

Before the crack the app would shutdown saying that it was a unofficial version of the client, this was due too its security measures in place, See inside the APK, however I have bypassed this in such a way where it will only fail this test if it's an Unedited version of the app, for example using the VadersTV DNS instead of your own.

Note: This version will not work with VadersTV DNS.

So... what's wrong with that?
VadersTV use their own API, away from the likes of XCUI which means 99.9% of providers wont be able too use this app as-is.

So... why release it?
I feel that the APK is unobfuscated enough too be able too be converted too XCUI and that someone on these godly forums would be able too do just that.

Alternatively you may be able to create a web script too convert the VAPI too XCUI or create a custom VAPI.

Think you could do it?

To view the content, you need to Sign In or Register.

Note: I have left Logcat viewer enabled so you can see logs via the mobile notification for debugging.

Change DNS (no http://):
Resources.arsc/Strings/String/vapi_server_url



Thanks again for checking out the thread, feel free to let me know how you get on if you decide too take on the conversion challenge.

 

[Ukcrim2019]

thanks for this looks a nice layout

 

[cellhelp]

Unless, the API uses direct M3U listing. You can seperate the M3u for Live have another one for VOD then another one for series. And use M3U8(hls) for catchup.

You need to see what command it uses to download the channel list its always a WGET urlort with the username and password to retrieve the channel list

 

[Ian]

Unless, the API uses direct M3U listing. You can seperate the M3u for Live have another one for VOD then another one for series. And use M3U8(hls) for catchup.

You need to see what command it uses to download the channel list its always a WGET urlort with the username and password to retrieve the channel list

You can see how it works in VadersAPI.Smali/Java it does use M3U it just uses Base64 json encoded user/pass and some different naming in comparison too XCUI

 

[cellhelp]

I dont know java. I just need the wire shark. dump when you start the app what url it gets to get the channel list.

And also, the protection will be called on the url to check something. To verify if its good. Maybe change the url in the program to a php server. And give the same response to check vader. Need to change the url in the apk and have a php script to respond.

 

[dailyupdates]

interesting.. looking forward to see what everyone comes up with

 

[begformercy]

That is crazy how people come up with cracks for it.

 

[TheMandalorian]

We were just discussing this in the kodi section that seeing old apk or old kodi addonds for Vader and for Gears being cracked or altered to work with newer services would be great

 

[Ian]

I dont know java. I just need the wire shark. dump when you start the app what url it gets to get the channel list.

And also, the protection will be called on the url to check something. To verify if its good. Maybe change the url in the program to a php server. And give the same response to check vader. Need to change the url in the apk and have a php script to respond.

private static final VadersApiUrl a = new VadersApiUrl("LIVE_CHANNEL", "/epg/streams?token=%s&category_id=%d");
    
    private static final VadersApiUrl b = new VadersApiUrl("LIVE_CHANNEL_ALL", "/epg/streams?token=%s");
    
    private static final VadersApiUrl c = new VadersApiUrl("LIVE_STREAM", "/epg/channels?token=%s&category_id=%d&start=%s&end=%s");
    
    private static final VadersApiUrl d = new VadersApiUrl("LIVE_STREAM_ALL", "/epg/channels?token=%s&start=%s&end=%s");
    
    private static final VadersApiUrl e = new VadersApiUrl("SINGLE_LIVE_STREAM", "/epg/channels/%s?token=%s&start=%s&end=%s");
    
    private static final VadersApiUrl f = new VadersApiUrl("LIVETV_CATEGORIES", "/epg/categories?token=%s");
    
    private static final VadersApiUrl g = new VadersApiUrl("STREAM_EXP", "/play/%s?token=%s");
    
    private static final VadersApiUrl h = new VadersApiUrl("CATCHUP", "/play/dvr/%s/%s?duration=%s&token=%s");
    
    private static final VadersApiUrl i = new VadersApiUrl("AUTH", "/vod/user?token=%s");
    
    private static final VadersApiUrl j = new VadersApiUrl("MC_SCHEDULE", "/mc/schedule?token=%s&start=%s&end=%s%s");
    
    private static final VadersApiUrl k = new VadersApiUrl("MC_CATEGORIES", "/mc/categories?token=%s");
    
    private static final VadersApiUrl l = new VadersApiUrl("VOD_RECENT", "/vod/streams/recent?token=%s");
    
    private static final VadersApiUrl m = new VadersApiUrl("VOD_TV", "/vod/streams/tv?sortField=showName&ascending=true&token=%s&pageSize=10000");
    
    private static final VadersApiUrl n = new VadersApiUrl("VOD_MOVIE", "/vod/streams/movie?token=%s&pageSize=10000");
    
    private static final VadersApiUrl o = new VadersApiUrl("VOD_TV_EPISODE", "/vod/streams/tv/%s?token=%s");
    
    private static final VadersApiUrl p = new VadersApiUrl("VOD_MOVIE_STREAM", "/play/vod/%s.%s.m3u8?token=%s");
    
    private static final VadersApiUrl q = new VadersApiUrl("VOD_CATEGORIES", "/vod/genres?token=%s");
    
    private static final VadersApiUrl r = new VadersApiUrl("VOD_PROGRESS", "/vod/user/progress?token=%s");
    
    private static final VadersApiUrl s = new VadersApiUrl("GET_SERVERS", "/user/server?action=getServers&token=%s");
    
    private static final VadersApiUrl t = new VadersApiUrl("GET_USER_SERVER", "/user/server?action=getUserServer&token=%s");
    
    private static final VadersApiUrl u = new VadersApiUrl("SAVE_SERVER", "/user/server?action=serverChange&token=%s&serverIp=%s");
    
    private static final VadersApiUrl v = new VadersApiUrl("GET_USER_PREFS", "/user/preferences?token=%s");
    
    private static final VadersApiUrl w = new VadersApiUrl("UPDATE_USER_EMAIL", "/users/%s/email?token=%s");
    
    private static final VadersApiUrl x = new VadersApiUrl("USER_FAVORITES", "/user/favorites?token=%s");
    
    private static final VadersApiUrl y = new VadersApiUrl("VOD_MOVIE_FAVORITES", "/vod/user/movie/favorites?token=%s");
    
    private static final VadersApiUrl z = new VadersApiUrl("VOD_TV_FAVORITES", "/vod/user/tv/favorites?token=%s");
    
    static {
        A = new VadersApiUrl("GET_BOUQUETS", "/xc/bouquets?token=%s");
        B = new VadersApiUrl("SEND_LOG", "http://vaders.tv/submitLog");
        C = new VadersApiUrl("SEND_LOG_IP", "http://185.102.218.3/submitLog");
        D = new VadersApiUrl("APP_UPDATER_XML", "http://vaders.tv/apk_update.xml");
        E = new VadersApiUrl("APP_UPDATER_XML_IP", "http://185.102.218.3/apk_update.xml");
    }
    
    private static String a(UserManager paramUserManager) {
        JSONObject jSONObject = new JSONObject();
        try {
            jSONObject.put("username", paramUserManager.a());
            jSONObject.put("password", paramUserManager.d());
        } catch (JSONException jSONException) {
            ExceptionHandler.a((Exception)jSONException);
            jSONException.printStackTrace();
        } 
        return new String(Base64.encode(jSONObject.toString().getBytes(), 0));
    }
    
    public static VadersApiUrl a(Context paramContext) {
        UserManager userManager = r(paramContext);
        return new VadersApiUrl(f.a(), b(paramContext, String.format(f.b(), new Object[] { userManager.g() })));
    }

Its pretty much http://Dnsort/url-from-above
token %s being the base64 encoded Username and password
any other %s being the variable needed for that url, vod id for example.

 

[cellhelp]

private static final VadersApiUrl a = new VadersApiUrl("LIVE_CHANNEL", "/epg/streams?token=%s&category_id=%d");

    private static final VadersApiUrl b = new VadersApiUrl("LIVE_CHANNEL_ALL", "/epg/streams?token=%s");

    private static final VadersApiUrl c = new VadersApiUrl("LIVE_STREAM", "/epg/channels?token=%s&category_id=%d&start=%s&end=%s");

    private static final VadersApiUrl d = new VadersApiUrl("LIVE_STREAM_ALL", "/epg/channels?token=%s&start=%s&end=%s");

    private static final VadersApiUrl e = new VadersApiUrl("SINGLE_LIVE_STREAM", "/epg/channels/%s?token=%s&start=%s&end=%s");

    private static final VadersApiUrl f = new VadersApiUrl("LIVETV_CATEGORIES", "/epg/categories?token=%s");

    private static final VadersApiUrl g = new VadersApiUrl("STREAM_EXP", "/play/%s?token=%s");

    private static final VadersApiUrl h = new VadersApiUrl("CATCHUP", "/play/dvr/%s/%s?duration=%s&token=%s");

    private static final VadersApiUrl i = new VadersApiUrl("AUTH", "/vod/user?token=%s");

    private static final VadersApiUrl j = new VadersApiUrl("MC_SCHEDULE", "/mc/schedule?token=%s&start=%s&end=%s%s");

    private static final VadersApiUrl k = new VadersApiUrl("MC_CATEGORIES", "/mc/categories?token=%s");

    private static final VadersApiUrl l = new VadersApiUrl("VOD_RECENT", "/vod/streams/recent?token=%s");

    private static final VadersApiUrl m = new VadersApiUrl("VOD_TV", "/vod/streams/tv?sortField=showName&ascending=true&token=%s&pageSize=10000");

    private static final VadersApiUrl n = new VadersApiUrl("VOD_MOVIE", "/vod/streams/movie?token=%s&pageSize=10000");

    private static final VadersApiUrl o = new VadersApiUrl("VOD_TV_EPISODE", "/vod/streams/tv/%s?token=%s");

    private static final VadersApiUrl p = new VadersApiUrl("VOD_MOVIE_STREAM", "/play/vod/%s.%s.m3u8?token=%s");

    private static final VadersApiUrl q = new VadersApiUrl("VOD_CATEGORIES", "/vod/genres?token=%s");

    private static final VadersApiUrl r = new VadersApiUrl("VOD_PROGRESS", "/vod/user/progress?token=%s");

    private static final VadersApiUrl s = new VadersApiUrl("GET_SERVERS", "/user/server?action=getServers&token=%s");

    private static final VadersApiUrl t = new VadersApiUrl("GET_USER_SERVER", "/user/server?action=getUserServer&token=%s");

    private static final VadersApiUrl u = new VadersApiUrl("SAVE_SERVER", "/user/server?action=serverChange&token=%s&serverIp=%s");

    private static final VadersApiUrl v = new VadersApiUrl("GET_USER_PREFS", "/user/preferences?token=%s");

    private static final VadersApiUrl w = new VadersApiUrl("UPDATE_USER_EMAIL", "/users/%s/email?token=%s");

    private static final VadersApiUrl x = new VadersApiUrl("USER_FAVORITES", "/user/favorites?token=%s");

    private static final VadersApiUrl y = new VadersApiUrl("VOD_MOVIE_FAVORITES", "/vod/user/movie/favorites?token=%s");

    private static final VadersApiUrl z = new VadersApiUrl("VOD_TV_FAVORITES", "/vod/user/tv/favorites?token=%s");

    static {
        A = new VadersApiUrl("GET_BOUQUETS", "/xc/bouquets?token=%s");
        B = new VadersApiUrl("SEND_LOG", "http://vaders.tv/submitLog");
        C = new VadersApiUrl("SEND_LOG_IP", "http://185.102.218.3/submitLog");
        D = new VadersApiUrl("APP_UPDATER_XML", "http://vaders.tv/apk_update.xml");
        E = new VadersApiUrl("APP_UPDATER_XML_IP", "http://185.102.218.3/apk_update.xml");
    }

    private static String a(UserManager paramUserManager) {
        JSONObject jSONObject = new JSONObject();
        try {
            jSONObject.put("username", paramUserManager.a());
            jSONObject.put("password", paramUserManager.d());
        } catch (JSONException jSONException) {
            ExceptionHandler.a((Exception)jSONException);
            jSONException.printStackTrace();
        }
        return new String(Base64.encode(jSONObject.toString().getBytes(), 0));
    }

    public static VadersApiUrl a(Context paramContext) {
        UserManager userManager = r(paramContext);
        return new VadersApiUrl(f.a(), b(paramContext, String.format(f.b(), new Object[] { userManager.g() })));
    }

Its pretty much http://Dnsort/url-from-above
token %s being the base64 encoded Username and password
any other %s being the variable needed for that url, vod id for example.

So you can replace the vader url to your own?

A = new VadersApiUrl("GET_BOUQUETS", "/xc/bouquets?token=%s");
B = new VadersApiUrl("SEND_LOG", "http://vaders.tv/submitLog");
C = new VadersApiUrl("SEND_LOG_IP", "http://185.102.218.3/submitLog");
D = new VadersApiUrl("APP_UPDATER_XML", "http://vaders.tv/apk_update.xml");
E = new VadersApiUrl("APP_UPDATER_XML_IP", "http://185.102.218.3/apk_update.xml");


You can change that and redirect it to another php script server?

Is the token in the android, or it goes and makes a request for the token.

Onces you have the token, and you put in a browser the command

VadersApiUrl("LIVE_CHANNEL", "/epg/streams?token=%s&category_id=%d");


do you get an m3u or json back?


Email me

 

[Ian]

So you can replace the vader url to your own?

A = new VadersApiUrl("GET_BOUQUETS", "/xc/bouquets?token=%s");
B = new VadersApiUrl("SEND_LOG", "http://vaders.tv/submitLog");
C = new VadersApiUrl("SEND_LOG_IP", "http://185.102.218.3/submitLog");
D = new VadersApiUrl("APP_UPDATER_XML", "http://vaders.tv/apk_update.xml");
E = new VadersApiUrl("APP_UPDATER_XML_IP", "http://185.102.218.3/apk_update.xml");


You can change that and redirect it to another php script server?

Is the token in the android, or it goes and makes a request for the token.

Onces you have the token, and you put in a browser the command

VadersApiUrl("LIVE_CHANNEL", "/epg/streams?token=%s&category_id=%d");


do you get an m3u or json back?


Email me

The original provider isnt online anymore it used too point too http://vapi.vaders.tv/ obviously Ive changed the app so it bow supports your own server. When you sniff it while using your own server you will see that it requests vod with a token thats generated with the json method

private static String a(UserManager paramUserManager) {
JSONObject jSONObject = new JSONObject();
try {
jSONObject.put("username", paramUserManager.a());
jSONObject.put("password", paramUserManager.d());
} catch (JSONException jSONException) {
ExceptionHandler.a((Exception)jSONException);
jSONException.printStackTrace();
}
return new String(Base64.encode(jSONObject.toString().getBytes(), 0));
}

You can see its just a Base64 encoding of the Json object containing the user and pass, the webserver will probably also have the same check on its side to unravel the user and pass to then send the M3U or Json information.

 

[chupamedia]

x

Hey guys, Thanks for checking out the thread!
In this one it's not too useful but one of you bright people may be able to make some use of it.

LED TV is the APK given out too use with a VadersTV IPTV Subscription, someone recently asked me if i would be able to crack the APK to be able to worth with other DNS's.

Before the crack the app would shutdown saying that it was a unofficial version of the client, this was due too its security measures in place, See inside the APK, however I have bypassed this in such a way where it will only fail this test if it's an Unedited version of the app, for example using the VadersTV DNS instead of your own.

Note: This version will not work with VadersTV DNS.

So... what's wrong with that?
VadersTV use their own API, away from the likes of XCUI which means 99.9% of providers wont be able too use this app as-is.

So... why release it?
I feel that the APK is unobfuscated enough too be able too be converted too XCUI and that someone on these godly forums would be able too do just that.

Alternatively you may be able to create a web script too convert the VAPI too XCUI or create a custom VAPI.

Think you could do it?
No quote
Note: I have left Logcat viewer enabled so you can see logs via the mobile notification for debugging.

Change DNS (no http://):
Resources.arsc/Strings/String/vapi_server_url

View attachment 777

Thanks again for checking out the thread, feel free to let me know how you get on if you decide too take on the conversion challenge.

good job

 

[Jkc]

New year hi all