Dumper is a Frida script to dump L3 CDMs from any Android device.
Use pip to install the dependencies:
pip3 install -r requirements.txt
- Enable USB debugging
- Start frida-server on the device
- Execute dump_keys.py
- Start streaming some DRM-protected content
A few phone brands let us use the L1 keybox even after unlocking the bootloader (like Xiaomi). In this case, installation of a Magisk module called liboemcrypto-disabler is necessary.
It seems like Google made some changes in their OEMCrypto library and it broke the script. Further investigation is needed to make it work on Android 11+, feel free to open PRs.
Thanks to the original author of the code.