crextractor 1.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2024 Vitaly Gashkov <vitalygashkov@vk.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,38 @@
+# Crextractor
+
+Utility for extracting secrets from Crunchyroll mobile app
+
+## Prerequisites
+
+- [Node.js](https://nodejs.org/en)
+- [jadx](https://github.com/skylot/jadx)
+
+## Installation
+
+```bash
+npm i crextractor
+```
+
+## Usage
+
+#### Library
+
+```js
+import { extractSecrets } from 'crextractor';
+
+const { id, secret, encoded, header } = await extractSecrets();
+
+// Do something with the extracted secrets
+```
+
+#### Command-line interface
+
+```bash
+npx crextractor
+```
+
+> Results will be printed to the console and saved to `secrets.json` file
+
+## License
+
+MIT

package/bin/cli.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+
+const { extractSecrets } = require('../crextractor');
+
+extractSecrets({ output: 'secrets.json' });

package/crextractor.d.ts

@@ -0,0 +1,10 @@
+export function extractSecrets(): Promise<{
+  // Crunchyroll app ID
+  id: string;
+  // Crunchyroll app secret
+  secret: string;
+  // Base64 encoded `id:secret` string
+  encoded: string;
+  // HTTP header with Basic Authorization to access Crunchyroll mobile APIs
+  authorization: string;
+}>;

package/crextractor.js

@@ -0,0 +1,94 @@
+const { execSync } = require('node:child_process');
+const { join } = require('node:path');
+const { readdir, readFile, writeFile, rm } = require('node:fs/promises');
+const { download } = require('molnia');
+
+const downloadLatestApk = async () => {
+  const source = 'https://apkcombo.com/crunchyroll/com.crunchyroll.crunchyroid/download/apk';
+  const page = await fetch(source);
+  const html = await page.text();
+  const route = '/r2' + html.split('/r2')[1]?.split('"')[0];
+  const url = `https://apkcombo.com${route}`;
+  const filepath = join(process.cwd(), 'crunchyroll.xapk');
+  await download(url, {
+    output: filepath,
+    onError: (error) => console.error(error),
+  });
+  return filepath;
+};
+
+const decompileApk = (apkPath) => {
+  try {
+    execSync(`jadx ${apkPath}`, { stdio: 'inherit' });
+  } catch (error) {}
+  return apkPath.replace('.xapk', '');
+};
+
+const findConfigurationImpl = async (sourcesDir) => {
+  const entries = await readdir(sourcesDir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const moduleDir = join(sourcesDir, entry.name);
+    const moduleEntries = await readdir(moduleDir, { withFileTypes: true });
+    for (const moduleFile of moduleEntries) {
+      if (moduleFile.isDirectory()) continue;
+      const moduleFilePath = join(moduleDir, moduleFile.name);
+      const moduleContents = await readFile(moduleFilePath, 'utf8');
+      if (moduleContents.includes(' ConfigurationImpl.kt')) {
+        return moduleContents;
+      }
+    }
+  }
+};
+
+const parseSecrets = (contents) => {
+  const lines = contents.split('\n');
+  const startIndex = lines.findIndex((line) => line.includes('https://sso.crunchyroll.com'));
+  const endIndex = lines.findIndex((line) => line.includes('CR-AndroidMobile-SSAI-Prod'));
+  const results = lines
+    .slice(startIndex, endIndex)
+    .map((line) => line.replaceAll(';', ''))
+    .map((line) => line.replaceAll('"', ''))
+    .map((line) => line.split('= ')[1])
+    .map((line) => line.trim());
+  const [, , id, secret] = results;
+  const encoded = Buffer.from(`${id}:${secret}`).toString('base64');
+  const authorization = `Basic ${encoded}`;
+  return { id, secret, encoded, authorization };
+};
+
+const extractSecrets = async ({ output, cleanup = true } = {}) => {
+  console.log('Downloading latest APK...');
+  const apkPath = await downloadLatestApk();
+
+  console.log('Decompiling APK...');
+  const decompiledDir = decompileApk(apkPath);
+
+  console.log('Searching for secrets...');
+  const sourcesDir = join(decompiledDir, 'sources');
+  const manifest = require(join(decompiledDir, 'resources', 'manifest.json'));
+  const version = manifest.version_name;
+  const configurationImpl = await findConfigurationImpl(sourcesDir);
+  if (!configurationImpl) throw new Error('Could not find ConfigurationImpl.kt');
+
+  console.log('Parsing secrets...');
+  const { id, secret, encoded, authorization } = parseSecrets(configurationImpl);
+
+  console.log(`Cleaning up files...`);
+  if (cleanup) await rm(apkPath, { recursive: true, force: true });
+  if (cleanup) await rm(decompiledDir, { recursive: true, force: true });
+
+  console.log(`Version: ${version}`);
+  console.log(`ID: ${id}`);
+  console.log(`Secret: ${secret}`);
+  console.log(`Encoded ID with secret: ${encoded}`);
+  console.log(`Authorization: ${authorization}`);
+
+  if (output) {
+    await writeFile(output, JSON.stringify({ version, id, secret, encoded, authorization }, null, 2));
+  }
+
+  return { version, id, secret, encoded, authorization };
+};
+
+module.exports = { extractSecrets };

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "crextractor",
+  "version": "1.1.0",
+  "description": "Utility for extracting secrets from Crunchyroll mobile app",
+  "main": "crextractor.js",
+  "bin": {
+    "crextractor": "bin/cli.js"
+  },
+  "files": [
+    "bin",
+    "crextractor.d.ts",
+    "crextractor.js"
+  ],
+  "types": "crextractor.d.ts",
+  "type": "commonjs",
+  "scripts": {
+    "start": "node bin/cli.js",
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [
+    "crunchyroll"
+  ],
+  "author": "Vitaly Gashkov <vitalygashkov@vk.com>",
+  "license": "MIT",
+  "readmeFilename": "README.md",
+  "funding": [
+    {
+      "type": "individual",
+      "url": "https://t.me/tribute/app?startapp=dqW2"
+    }
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "molnia": "^0.1.5"
+  },
+  "devDependencies": {
+    "typescript": "^5.9.2"
+  }
+}