From 3879438e3c03db01cdb69e45ea73227b7f302b34 Mon Sep 17 00:00:00 2001
From: LuftVerbot <97435834+LuftVerbot@users.noreply.github.com>
Date: Fri, 10 Feb 2023 14:27:43 +0100
Subject: [PATCH] AniWorld: add reCapBypass v0.1 (#1263)

---
 src/de/aniworld/build.gradle                  |   2 +-
 .../animeextension/de/aniworld/AniWorld.kt    |  43 +++--
 .../de/aniworld/JsInterceptor.kt              | 167 ++++++++++++++++++
 .../de/aniworld/RedirectInterceptor.kt        |  28 +--
 4 files changed, 209 insertions(+), 31 deletions(-)
 create mode 100644 src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/JsInterceptor.kt

diff --git a/src/de/aniworld/build.gradle b/src/de/aniworld/build.gradle
index 2d8482b94..91171cd77 100644
--- a/src/de/aniworld/build.gradle
+++ b/src/de/aniworld/build.gradle
@@ -6,7 +6,7 @@ ext {
     extName = 'AniWorld (experimental)'
     pkgNameSuffix = 'de.aniworld'
     extClass = '.AniWorld'
-    extVersionCode = 10
+    extVersionCode = 11
     libVersion = '13'
 }
 
diff --git a/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/AniWorld.kt b/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/AniWorld.kt
index 170378b07..8deeb6139 100644
--- a/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/AniWorld.kt
+++ b/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/AniWorld.kt
@@ -230,41 +230,56 @@ class AniWorld : ConfigurableAnimeSource, ParsedAnimeHttpSource() {
         val videoList = mutableListOf<Video>()
         val hosterSelection = preferences.getStringSet(AWConstants.HOSTER_SELECTION, null)
         val redirectInterceptor = client.newBuilder().addInterceptor(RedirectInterceptor()).build()
+        val jsInterceptor = client.newBuilder().addInterceptor(JsInterceptor(network.client)).build()
         redirectlink.forEach {
             val langkey = it.attr("data-lang-key")
             val language = getlanguage(langkey)
             val redirectgs = baseUrl + it.selectFirst("a.watchEpisode").attr("href")
-            val redirects = redirectInterceptor.newCall(GET(redirectgs)).execute().request.url.toString()
+            val hoster = it.select("a h4").text()
             if (hosterSelection != null) {
                 when {
-                    redirects.contains("https://voe.sx") || redirects.contains("https://launchreliantcleaverriver") ||
-                        redirects.contains("https://fraudclatterflyingcar") ||
-                        redirects.contains("https://uptodatefinishconferenceroom") || redirects.contains("https://realfinanceblogcenter") && hosterSelection.contains(AWConstants.NAME_VOE) -> {
+                    hoster.contains("VOE") && hosterSelection.contains(AWConstants.NAME_VOE) -> {
                         val quality = "Voe $language"
-                        val video = VoeExtractor(client).videoFromUrl(redirects, quality)
+                        var url = redirectInterceptor.newCall(GET(redirectgs)).execute().request.url.toString()
+                        if (url.contains("payload")) {
+                            url = recapbypass(jsInterceptor, redirectgs)
+                        }
+                        val video = VoeExtractor(client).videoFromUrl(url, quality)
                         if (video != null) {
                             videoList.add(video)
                         }
                     }
 
-                    redirects.contains("https://dood") && hosterSelection.contains(AWConstants.NAME_DOOD) -> {
+                    hoster.contains("Doodstream") && hosterSelection.contains(AWConstants.NAME_DOOD) -> {
                         val quality = "Doodstream $language"
-                        val video = DoodExtractor(client).videoFromUrl(redirects, quality)
+                        var url = redirectInterceptor.newCall(GET(redirectgs)).execute().request.url.toString()
+                        if (url.contains("payload")) {
+                            url = recapbypass(jsInterceptor, redirectgs)
+                        }
+                        val video = DoodExtractor(client).videoFromUrl(url, quality)
                         if (video != null) {
                             videoList.add(video)
                         }
                     }
 
-                    redirects.contains("https://streamtape") && hosterSelection.contains(AWConstants.NAME_STAPE) -> {
+                    hoster.contains("Streamtape") && hosterSelection.contains(AWConstants.NAME_STAPE) -> {
                         val quality = "Streamtape $language"
-                        val video = StreamTapeExtractor(client).videoFromUrl(redirects, quality)
+                        var url = redirectInterceptor.newCall(GET(redirectgs)).execute().request.url.toString()
+                        if (url.contains("payload")) {
+                            url = recapbypass(jsInterceptor, redirectgs)
+                        }
+                        val video = StreamTapeExtractor(client).videoFromUrl(url, quality)
                         if (video != null) {
                             videoList.add(video)
                         }
                     }
-                    redirects.contains("https://vidoza") && hosterSelection.contains(AWConstants.NAME_VIZ) -> {
+                    hoster.contains("Vidoza") && hosterSelection.contains(AWConstants.NAME_VIZ) -> {
                         val quality = "Vidoza $language"
-                        val video = VidozaExtractor(client).videoFromUrl(redirects, quality)
+                        var url = redirectInterceptor.newCall(GET(redirectgs)).execute().request.url.toString()
+                        if (url.contains("payload")) {
+                            url = recapbypass(jsInterceptor, redirectgs)
+                        }
+                        val video = VidozaExtractor(client).videoFromUrl(url, quality)
                         if (video != null) {
                             videoList.add(video)
                         }
@@ -275,6 +290,12 @@ class AniWorld : ConfigurableAnimeSource, ParsedAnimeHttpSource() {
         return videoList
     }
 
+    private fun recapbypass(jsInterceptor: OkHttpClient, redirectgs: String): String {
+        val token = jsInterceptor.newCall(GET(redirectgs)).execute().request.header("url").toString()
+        val url = client.newCall(GET("$redirectgs?token=$token&original=")).execute().request.url.toString()
+        return url
+    }
+
     private fun getlanguage(langkey: String): String? {
         when {
             langkey.contains("${AWConstants.KEY_GER_SUB}") -> {
diff --git a/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/JsInterceptor.kt b/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/JsInterceptor.kt
new file mode 100644
index 000000000..e9701652c
--- /dev/null
+++ b/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/JsInterceptor.kt
@@ -0,0 +1,167 @@
+package eu.kanade.tachiyomi.animeextension.de.aniworld
+
+import android.annotation.SuppressLint
+import android.app.Application
+import android.os.Handler
+import android.os.Looper
+import android.webkit.JavascriptInterface
+import android.webkit.WebView
+import android.webkit.WebViewClient
+import eu.kanade.tachiyomi.network.GET
+import eu.kanade.tachiyomi.network.POST
+import okhttp3.Headers
+import okhttp3.Interceptor
+import okhttp3.MediaType.Companion.toMediaType
+import okhttp3.OkHttpClient
+import okhttp3.Request
+import okhttp3.RequestBody.Companion.toRequestBody
+import okhttp3.Response
+import uy.kohesive.injekt.Injekt
+import uy.kohesive.injekt.api.get
+import java.util.concurrent.CountDownLatch
+import java.util.concurrent.TimeUnit
+
+class JsInterceptor(private val client: OkHttpClient) : Interceptor {
+
+    private val context = Injekt.get<Application>()
+    private val handler by lazy { Handler(Looper.getMainLooper()) }
+
+    class JsObject(private val latch: CountDownLatch, private val client: OkHttpClient, var payload: String = "") {
+        @JavascriptInterface
+        fun passPayload(passedPayload: String) {
+            payload = passedPayload
+            latch.countDown()
+        }
+        @JavascriptInterface
+        fun client(source: String): String? {
+            val body = "input=${java.net.URLEncoder.encode(source, "utf-8")}&lang=de".toRequestBody("application/x-www-form-urlencoded".toMediaType())
+            val solved = client.newCall(
+                POST(
+                    "https://engageub.pythonanywhere.com", body = body,
+                    headers = Headers.headersOf(
+                        "Content-Type", "application/x-www-form-urlencoded",
+                        "user-agent", "Mozilla/5.0 (Linux; Android 12; Pixel 5 Build/SP2A.220405.004; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/100.0.4896.127 Safari/537.36"
+                    )
+                )
+            ).execute().body?.string()
+            return solved
+        }
+    }
+
+    override fun intercept(chain: Interceptor.Chain): Response {
+        val originalRequest = chain.request()
+
+        val newRequest = resolveWithWebView(originalRequest) ?: throw Exception("Please reload Episode List")
+
+        return chain.proceed(newRequest)
+    }
+
+    @SuppressLint("SetJavaScriptEnabled")
+    private fun resolveWithWebView(request: Request): Request? {
+
+        val latch = CountDownLatch(1)
+
+        var webView: WebView? = null
+
+        val origRequestUrl = request.url.toString()
+
+        val jsinterface = JsObject(latch, client)
+
+        // JavaSrcipt bypass recaptcha FUCK GOOGLE RECAPTCHA v0.1
+        val jsScript = """
+            (function(){
+                let intervalIdA = setInterval(() => {
+                    let iframewindow = document.querySelector('iframe[title="reCAPTCHA-Aufgabe läuft in zwei Minuten ab"]').contentWindow;
+                    if (iframewindow) {
+                        clearInterval(intervalIdA);
+                        let audiobutton = iframewindow.document.querySelector('#recaptcha-audio-button');
+                        let event = iframewindow.document.createEvent('HTMLEvents');
+                        event.initEvent('click',false,false);
+                        audiobutton.dispatchEvent(event);
+                        let intervalIdB = setInterval(() => {
+                            let source = iframewindow.document.querySelector('#audio-source').getAttribute('src');
+                            if (source) {
+                                clearInterval(intervalIdB);
+                                let audioresponse = iframewindow.document.querySelector('#audio-response');
+                                let verifybutton = iframewindow.document.querySelector('#recaptcha-verify-button');
+                                var solved = window.android.client(source);
+                                var tries = 0
+                                while((solved == "0" || solved.includes("<") || solved.includes(">") || solved.length < 2 || solved.length > 50) && tries <= 3) {
+                                    solved = window.android.client(source);
+                                    if(solved == "0" || solved.includes("<") || solved.includes(">") || solved.length < 2 || solved.length > 50){
+                                        tries++;
+                                    } else {
+                                        tries = 3
+                                    }
+                                }
+                                if(solved == "0" || solved.includes("<") || solved.includes(">") || solved.length < 2 || solved.length > 50){
+                                    window.android.passPayload("");
+                                } else {
+                                    audioresponse.value = solved;
+                                    verifybutton.dispatchEvent(event);
+                                    const originalOpen = iframewindow.XMLHttpRequest.prototype.open;
+                                    iframewindow.XMLHttpRequest.prototype.open = function(method, url, async) {
+                                        if(url.includes('userverify')){
+                                            originalOpen.apply(this, arguments); // call the original open method
+                                            this.onreadystatechange = function() {
+                                                if (this.readyState === 4 && this.status === 200) {
+                                                    const responseBody = this.responseText;
+                                                    window.android.passPayload(responseBody);
+                                                }
+                                            };
+                                        }
+                                    };
+                                }
+                            }
+                        }, 2000);
+                    }
+                }, 2000);
+            })();
+        """
+
+        val headers = request.headers.toMultimap().mapValues { it.value.getOrNull(0) ?: "" }.toMutableMap()
+
+        var newRequest: Request? = null
+
+        var isDataLoaded = false
+
+        handler.post {
+            val webview = WebView(context)
+            webView = webview
+            with(webview.settings) {
+                javaScriptEnabled = true
+                domStorageEnabled = true
+                databaseEnabled = true
+                useWideViewPort = false
+                loadWithOverviewMode = false
+                userAgentString = "Mozilla/5.0 (Linux; Android 12; Pixel 5 Build/SP2A.220405.004; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/100.0.4896.127 Safari/537.36"
+                webview.addJavascriptInterface(jsinterface, "android")
+                webview.webViewClient = object : WebViewClient() {
+                    override fun onPageFinished(view: WebView?, url: String?) {
+                        view?.clearCache(true)
+                        view?.clearFormData()
+                        val customHtml = """
+                            <html lang='de'><head> <meta charset='utf-8'> <title>Überprüfung</title> <meta name='robots' content='noindex, nofollow'> <meta name='description' content='AniWorld Stream Weiterleitung'> <meta name='keywords' content='AniWorld.to, serien stream, online stream, serien kostenlos, serien gratis, serien deutsch kostenlos, s.to, serienstream, serien gratis, kino, stream, maxdome kostenlos, netflix kostenlos, kinox.to, Android Stream, kinox.to alternative, movie2k, iPad Stream, movie4k, burning series, burning-seri.es, iphone stream, burning series app, burning series down, mobile stream, burning series serien, Onlineserien'> <meta name='viewport' content='width=device-width, initial-scale=1.0'> <link rel='icon' href='https://aniworld.to/public/img/favicon.ico'> <meta name='theme-color' content='#637cf9'> <script type='text/javascript' src='https://aniworld.to/public/js/jquery.min.js'></script> <script type='text/javascript' src='https://aniworld.to/public/js/jquery-ui.min.js'></script> <!--[if IE]> <script src='/public/js/html5shiv.min.js'></script> <script src='/public/js/respond.min.js'></script><![endif]--> <script> var init = function () { grecaptcha.render('captcha', { 'sitekey': '6LfrJ14aAAAAANcuphB2k-5B856Ky9FpOsVrXJCO', 'size': 'invisible', 'callback': securitCaptcha }); grecaptcha.execute(); }; var securitCaptcha = function (token) { ${'$'}('.securityToken').val(token); ${'$'}('.securityTokenForm').submit(); }; </script> <style type='text/css'> @import url(//fonts.googleapis.com/css?family=Open+Sans:400,600,700); html, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, img, ins, kbd, q, s, samp, small, strike, strong, sub, sup, tt, var, b, u, i, center, dl, dt, dd, ol, ul, li, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td, article, aside, canvas, details, embed, figure, figcaption, footer, header, menu, nav, output, ruby, section, summary, time, mark, audio, video { margin: 0; padding: 0 0 0 0; border: 0; vertical-align: baseline; box-sizing: border-box; } html { line-height: 1; font-family: 'Open Sans', 'Helvetica Neue', helvetica, arial, sans-serif; background: #fafafa; } html, body { height: 100%; text-align: center; } body { background: #0f1620; height: 100%; } h1, p, small { text-align: center; } h1 { color: #fff !important; font-size: 200%; } small { margin-top: 50px; color: #fff !important; display: inline-block; opacity: 0.7; } a:hover { color: #159cf5; !important; } p { color: #fff !important; font-size: 150%; margin-top: 20px; } .logo-wrapper { width: 100%; text-align: center; margin-bottom: 65px; } .logo-wrapper > a { text-align: center; } .logo-wrapper > a > .header-logo { float: none; display: inline-block; } .loader { display: inline-block; width: 60px; height: 60px; position: relative; border: 4px solid #637cf9; top: 50%; margin: 100px auto; animation: loader 2.5s infinite ease; } .loader-inner { vertical-align: top; display: inline-block; width: 100%; background-color: #637cf9; animation: loader-inner 2.5s infinite ease-in; } @keyframes loader { 0% { transform: rotate(0deg); } 25% { transform: rotate(180deg); } 50% { transform: rotate(180deg); } 75% { transform: rotate(360deg); } 100% { transform: rotate(360deg); } } @keyframes loader-inner { 0% { height: 0%; } 25% { height: 0%; } 50% { height: 100%; } 75% { height: 100%; } 100% { height: 0%; } } </style><style class='darkreader darkreader--cors' media='screen'>html, body, div, span, applet, object, iframe, h1, h2, h3, h4, h5, h6, p, blockquote, pre, a, abbr, acronym, address, big, cite, code, del, dfn, em, img, ins, kbd, q, s, samp, small, strike, strong, sub, sup, tt, var, b, u, i, center, dl, dt, dd, ol, ul, li, form, label, legend, table, caption, tbody, tfoot, thead, tr, th, td, article, aside, canvas, details, embed, figure, figcaption, footer, header, menu, nav, output, ruby, section, summary, time, mark, audio, video { margin: 0; padding: 0 0 0 0; border: 0; vertical-align: baseline; box-sizing: border-box; } html { line-height: 1; font-family: 'Open Sans', 'Helvetica Neue', helvetica, arial, sans-serif; background: #fafafa; } html, body { height: 100%; text-align: center; } body { background: #0f1620; height: 100%; } h1, p, small { text-align: center; } h1 { color: #fff !important; font-size: 200%; } small { margin-top: 50px; color: #fff !important; display: inline-block; opacity: 0.7; } a:hover { color: #159cf5; !important; } p { color: #fff !important; font-size: 150%; margin-top: 20px; } .logo-wrapper { width: 100%; text-align: center; margin-bottom: 65px; } .logo-wrapper > a { text-align: center; } .logo-wrapper > a > .header-logo { float: none; display: inline-block; } .loader { display: inline-block; width: 60px; height: 60px; position: relative; border: 4px solid #637cf9; top: 50%; margin: 100px auto; animation: loader 2.5s infinite ease; } .loader-inner { vertical-align: top; display: inline-block; width: 100%; background-color: #637cf9; animation: loader-inner 2.5s infinite ease-in; } @keyframes loader { 0% { transform: rotate(0deg); } 25% { transform: rotate(180deg); } 50% { transform: rotate(180deg); } 75% { transform: rotate(360deg); } 100% { transform: rotate(360deg); } } @keyframes loader-inner { 0% { height: 0%; } 25% { height: 0%; } 50% { height: 100%; } 75% { height: 100%; } 100% { height: 0%; } }</style><style class='darkreader darkreader--sync' media='screen'></style> </head> <body> <div id='wrapper'> <div class='container' style='padding: 10px'> <form method='GET' class='securityTokenForm'> <input type='hidden' name='token' class='securityToken'> <input type='hidden' name='original' value=''> </form> <h1>Dein Stream wird überprüft...</h1> <p>Falls nötig, löse bitte das Captcha, um die Serie weiterschauen zu können.</p> <span class='loader'><span class='loader-inner'></span></span> <div id='captcha'></div> <script src='https://www.google.com/recaptcha/api.js?onload=init&amp;render=explicit' async='' defer=''></script> </div> </div> </body></html>
+                        """
+                        if (!isDataLoaded) {
+                            view?.loadDataWithBaseURL("https://www.google.com/", customHtml, "text/html", "UTF-8", null)
+                            isDataLoaded = true
+                        }
+                        view?.evaluateJavascript(jsScript) {}
+                    }
+                }
+                webView?.loadUrl(origRequestUrl, headers)
+            }
+        }
+
+        latch.await(120, TimeUnit.SECONDS)
+
+        handler.post {
+            webView?.stopLoading()
+            webView?.destroy()
+            webView = null
+        }
+        newRequest = GET(request.url.toString(), headers = Headers.headersOf("url", jsinterface.payload.substringAfter("uvresp\",\"").substringBefore("\",")))
+        return newRequest
+    }
+}
diff --git a/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/RedirectInterceptor.kt b/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/RedirectInterceptor.kt
index 2e9b3cd4a..30e02b284 100644
--- a/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/RedirectInterceptor.kt
+++ b/src/de/aniworld/src/eu/kanade/tachiyomi/animeextension/de/aniworld/RedirectInterceptor.kt
@@ -26,7 +26,7 @@ class RedirectInterceptor : Interceptor {
     override fun intercept(chain: Interceptor.Chain): Response {
         val originalRequest = chain.request()
 
-        val newRequest = resolveWithWebView(originalRequest) ?: throw Exception("Bitte Captcha in WebView lösen")
+        val newRequest = resolveWithWebView(originalRequest) ?: throw Exception("Versuche es später nochmal")
 
         return chain.proceed(newRequest)
     }
@@ -40,6 +40,7 @@ class RedirectInterceptor : Interceptor {
         var webView: WebView? = null
 
         val origRequestUrl = request.url.toString()
+
         val headers = request.headers.toMultimap().mapValues { it.value.getOrNull(0) ?: "" }.toMutableMap()
 
         var newRequest: Request? = null
@@ -53,9 +54,7 @@ class RedirectInterceptor : Interceptor {
                 databaseEnabled = true
                 useWideViewPort = false
                 loadWithOverviewMode = false
-                userAgentString = // request.header("User-Agent")
-                    // ?: "\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4324.150 Safari/537.36 Edg/88.0.705.63\""
-                    "Mozilla/5.0 (Linux; Android 12; Pixel 5 Build/SP2A.220405.004; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/100.0.4896.127 Safari/537.36"
+                userAgentString = "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:106.0) Gecko/20100101 Firefox/106.0"
             }
 
             webview.webViewClient = object : WebViewClient() {
@@ -63,22 +62,13 @@ class RedirectInterceptor : Interceptor {
                     view: WebView,
                     request: WebResourceRequest,
                 ): WebResourceResponse? {
-                    if (request.url.toString().contains("token") || request.url.toString().contains("https://dood") || request.url.toString().contains("https://streamtape") ||
-                        request.url.toString().contains("https://voe") || request.url.toString().contains("https://realfinanceblogcenter") ||
-                        request.url.toString().contains("https://launchreliantcleaverriver") ||
-                        request.url.toString().contains("https://fraudclatterflyingcar") ||
-                        request.url.toString().contains("https://uptodatefinishconferenceroom")
-                    ) {
-                        if (!request.url.toString().contains("ad.js")) {
-                            newRequest = GET(request.url.toString(), request.requestHeaders.toHeaders())
-                            latch.countDown()
-                        }
+                    if (request.url.toString().contains("payload")) {
+                        newRequest = GET(request.url.toString(), request.requestHeaders.toHeaders())
+                        latch.countDown()
                     }
-                    if (request.url.toString().contains("token") || request.url.toString().contains("https://vidoza.net/embed-")) {
-                        if (request.url.toString().contains(".html")) {
-                            newRequest = GET(request.url.toString(), request.requestHeaders.toHeaders())
-                            latch.countDown()
-                        }
+                    if (request.url.toString().contains("https://aniworld.to/redirect/") && request.url.toString().contains("token")) {
+                        newRequest = GET(request.url.toString(), request.requestHeaders.toHeaders())
+                        latch.countDown()
                     }
                     return super.shouldInterceptRequest(view, request)
                 }