Watched Multiple Streams (different channels) successfully via mac, deviceid 2, signature, and serial number spoofing using STB Emulator

by acaoacao

I signed up for an ACE IPTV 24 hour trial subscription and was able to successfully run multiple streams of different channels on different TVs for a couple of minutes.

So what I hear from everyone in here as well as other forums is that you cannot do multiple streams. Initially IPTV providers did not worry about this when MACs were burned into the physical set top boxes. The physical STB will identify it self using the MAC when connecting to the service provider. They only allow traffic when a MAC properly entered in their system. Also as /u/MrCakeums found out in his wireshark capture.. IPTV providers also use other identifiers such as device ID, serial number, etc. to identify incoming connections.

However with software, you can spoof all that...

  • Mac
  • Serial Number
  • STB Model/Type
  • DeviceID
  • DeviceID2
  • Signature
  • HardwareVersion

So.. if you know basic networking MAC are layer two traffic.. usually use for communication between local networks.

MAC address are not used when using layer three traffic (TCIP/IP). TCIP/IP is use for communication from you to the IPTV provider. MAC address is discarded during this process.

With that in mind you can have multiple STB Emulator running on the same time with the same MAC, DeviceID , etc etc on your same network. On your local network your Firestick/Andriod box will use it own MAC address local lan traffic. So that side would be fine.

So then the last thing is a socket... IP address and port. When traffic leaves your house to the IPTV provider, each connection will have a different socket which unique identifies each box allowing for multiple streams.

Now on to the IPTV provider side... do they check... from my test.. the answer is no.. they look for MAC, Device ID, SN, Device ID and Signature... if it matches it will allow traffic even if there is multiple socket/connections.

Does anyone want to test this out on a tail end of a 1 month subscription? So you don't get banned and loose out a subscription

EDIT: IT worked on another provider (NFPS).... worked quite well.. until the password authentication kicked in..
So if your IPTV requires a password for MAG, this won't work.

EDIT: Tried it on a third stream. It works initially but one of the stream freezes and stops. This may not work after all

MrCakeums

I'm currently performing further research here at home, both in terms of analyzing the communication process via Wireshark and in testing multiple devices on various networks - will report back as I attempt to make further discoveries.

EDIT: Ok, so after doing Wireshark analysis on 5 different services (IPGuys, Voodoo, Epicstream, NFPS, and IPTVSubs), here's what I've found: Most everything sent to the server seems to be constant, with the exception of the signature - this seems to be generated within the box itself, as I found this within a packet: 

this.load(
 {
  ... Other parameters are initialized here
  'signature'        : stb.GetUID ? stb.GetUID(this.access_token) : ''

However, looking through other packets for this access_token variable, I see it being referenced but not being initialized, though after a certain point of searching the same variable over and over again it all starts to blend together - I may look into this more thoroughly later.

However, best as I can tell, this signature is not needed to successfully connect to a server - I've tried and successfully connected to nearly every server (didn't try NFPS due to their username/password system) with invalid (whether they're made up, from another server, or of improper length) or blank signatures. However, note that while you can leave the signature field blank on Kodi's IPTV Stalker add-on, the auto-generated signature from leaving this field blank in STBemu seems to be rejected by some services (giving a username/password prompt on IPGuys for example) - while I've yet to test this theory, I believe this is due to non A-Z/0-9 characters being present in the signature.

As for multiple devices being present at once on the same network, it's a little more complicated than it would appear on the surface, and honestly depends on the server. In testing this, I worked with a phone running STBemu and my computer running Kodi so that I could control signature conditions. On IPguys, only the most recently connected device would remain working, and I'd get presented with a username and password screen upon playing a stream from the second device (note that this would only get triggered upon starting a stream - STB menu access and initial connection were successful). This exact situation was seen on Voodoo as well, thus confirming that it's not related to Stalker service version (IPGuys runs 4.9.30, while Voodoo runs 5.0.3).

A similar situation was seen on IPTVsubs, albeit to a lesser degree, but instead of the older device being booted, only channels on the most recently active page could be chosen - channel lists would not load if you went back to the main menu and attmepted to reload them. It should be noted that this was done with mismatching signatures, as I had to perform this test with STBemu and my actual MAG box (due to the Kodi add-on not being able to spoof hardware version) and was too lazy to catch and reinput 64 characters into STBemu - I may try this test again later with matching signatures.

The only service (of those that I tested) that successfully worked on 2 simultaneous devices without any hitches was Epicstream. Not sure how this would work with two devices not on the same network, but it seems there's some other factor involved in determining if multiple devices are watching the same content - I'll Wireshark it later (on the device that's getting disconnected) and see what I can find.

fr0-z3n

Interesting, being an IPTV service provider and a geek, this is interesting. I am going to try it out this weekend and post results. I always love people tinkering with stuff and go beyond the constraints provided.

tbentl

Why don't you try it out for a month subscription rather than a trial 24 hour subscription and get back to us?

stokedcrf

Very cool. Even as a provider, I'd love to be able to pull this off even on my own servers. Or at least have the option to. There are lots of uses for this!

That said, there is a lot of providers that use IP whitelisting, so that would still limit people sharing accounts outside of a local area network.

In the grand scheme of things, I don't think providers are too concerned. The majority of the public is still paying people to install free kodi add-ons for them etc. The amount of people that actually are able to use this workaround would be fairly limited, I would think!

bayard0

doesn't your stalker admin panel show you if 1 mac is watching 2 streams at the same time?

acaoacao

I tried again today with my IPTV provider (NFPS) that requires authentication and it worked!!! It worked until.. the provider wanted to authenticate me.... So.. my stoopid IPTV provider.