Solution: NFAuthentication.key generation for firefox

[hvegh]

The code here uses the cookies.sqlite file from the firefox browser.
Just copy the cookies.sqlite file and run the script.

Workflow:

1. Login with your firefox frowser into netflix
2. find the cookies db:
   ls -ltr ~/.mozilla/firefox/*/cookies.sqlite
3. copy the cookies.sqlite file and run the script.

#!/usr/bin/python

import base64
from   collections import namedtuple
from   datetime import datetime, timedelta
import json
import platform
import random

import sqlite3

try:  # The crypto package depends on the package installed
    from Cryptodome.Cipher import AES
    from Cryptodome.Util import Padding
except ImportError:
    from Crypto.Cipher import AES
    from Crypto.Util import Padding

# mozilla query
qry = "select * from moz_cookies where name in ( 'nfvdid', 'SecureNetflixId', 'NetflixId' );"


# validate key - check if key conforms to plugin requirements
def _prepare_authentication_key_data(data):
    """Check type of app used and prepare data for the service"""
    def convert_chrome_cookie(cookie):
        """Convert a cookie from Chrome to a CookieJar format type"""
        return {
            'name': cookie['name'],
            'value': cookie['value'],
            'domain': cookie['domain'],
            'path': cookie['path'],
            'secure': cookie['secure'],
            'expires': int(cookie['expires']) if cookie['expires'] != -1 else None,
            'rest': {'HttpOnly': True if cookie['httpOnly'] else None}
        }

    if (data['app_name'] == 'NFAuthenticationKey' and
            data['app_system'] == 'Windows' and
            # data['app_version'] == '1.0.0.0' and
            data['app_author'] == 'CastagnaIT'):
        result_data = {'cookies': []}
        for cookie in data['data']['cookies']:
            if 'netflix' not in cookie['domain']:
                continue
            result_data['cookies'].append(convert_chrome_cookie(cookie))
        return result_data
    if (data['app_name'] == 'NFAuthenticationKey' and
            data['app_system'] == 'Linux' and
            # data['app_version'] == '1.0.0' and
            data['app_author'] == 'CastagnaIT'):
        result_data = {'cookies': []}
        for cookie in data['data']['cookies']:
            if 'netflix' not in cookie['domain']:
                continue
            result_data['cookies'].append(convert_chrome_cookie(cookie))
        return result_data
    if (data['app_name'] == 'NFAuthenticationKey' and
            data['app_system'] == 'MacOS' and
            # data['app_version'] == '1.0.0' and
            data['app_author'] == 'CastagnaIT'):
        result_data = {'cookies': []}
        for cookie in data['data']['cookies']:
            if 'netflix' not in cookie['domain']:
                continue
            result_data['cookies'].append(convert_chrome_cookie(cookie))
        return result_data
    raise ErrorMsgNoReport('Authentication key file not supported')


def save_data(data, pin):
    raw = bytes(Padding.pad(data_to_pad=json.dumps(data).encode('utf-8'), block_size=16))
    iv = '\x00' * 16
    cipher = AES.new((str(pin) + str(pin) + str(pin) + str(pin)).encode('utf-8'), AES.MODE_CBC, iv.encode('utf-8'))
    encrypted_data = base64.b64encode(cipher.encrypt(raw)).decode('utf-8')
    file = open('NFAuthentication.key', 'w')
    file.write(encrypted_data)
    file.close()


def nf_gen_key(cookie_sqlite3_file = 'cookies.sqlite', app_version = '1.1.6', pin = None):
    def namedtuple_factory(cursor, row):
        fields = [column[0] for column in cursor.description]
        cls = namedtuple("Row", fields)
        return cls._make(row)

    con = sqlite3.connect(cookie_sqlite3_file)
    con.row_factory = namedtuple_factory
    cur = con.cursor()

    cookies = []
    for row in cur.execute(qry):
        cookies.append({
            'name': row.name,
            'value': row.value,
            'domain': row.host,
            'path': row.path,
            'secure': row.isSecure,
            'expires': row.expiry,
            'httpOnly': row.isHttpOnly
        })

    # Generate a random PIN for access to "NFAuthentication.key" file
    if not pin:
        pin = random.randint(1000, 9999)
    # Create file data structure
    data = {
        'app_name': 'NFAuthenticationKey',
        'app_version': app_version,
        'app_system': platform.system(),
        'app_author': 'CastagnaIT',
        'timestamp': int(((datetime.utcnow() + timedelta(days=5)) - datetime(year=1970, month=1, day=1)).total_seconds()),
        'data': {
            'cookies': cookies
        }
    }
    #print("\ndata=\n",data)
    _prepare_authentication_key_data(data)

    save_data(data, pin)
    print("pin =", pin)

nf_gen_key(pin = 1234)

[s2ibu]

Thank You very much :)
Works perfect !

[ghost]

Is there any way to use this script on an Android phone? I don't have a PC.

[hvegh]

I dunno, anything that runs python with a command line should work.

[3v1n0]

Weird, I'm getting invalid PIN error, and I do put the right one...

[hvegh]

default pin is '1234'

[3v1n0]

Sure thing, and I'm using it, but I'm getting the very same issue also using the default script, so I feel there's something wrong in my python stack.

However, the generated key using firefox for me seems to be wrong, as the file is very small. I feel it could be because I'm using containers to open pages and netflix doesn't open on default one by default.

[3v1n0]

Ok, no it was me using the wrong way to pass the file I think, as it was not using the last version...

Unlocking and login worked fine, then I'm still getting "password error" at playing phase but that's not due to this particular script, sadly.