1.2.0

.gitignore

@@ -1,2 +1,5 @@
 /node_modules
 .DS_Store
+/crunchyroll
+crunchyroll.apk
+crunchyroll.xapk

README.md

@@ -1,6 +1,6 @@
-# Crunchys
+# Crextractor
 
-A utility to extract secrets from Crunchyroll mobile app
+Utility for extracting credentials from the Crunchyroll Android app
 
 ## Prerequisites
 
@@ -10,17 +10,39 @@ A utility to extract secrets from Crunchyroll mobile app
 ## Installation
 
 ```bash
-npm i crunchys
+npm i crextractor
 ```
 
 ## Usage
 
+### Fetching already extracted secrets
+
+```js
+async function main() {
+  const url = 'https://raw.githubusercontent.com/vitalygashkov/crextractor/refs/heads/main/credentials.tv.json';
+  const data = await fetch(url).then((response) => response.json());
+
+  // You can use the extracted secrets to obtain access tokens for Crunchyroll APIs
+  const response = await fetch('https://beta-api.crunchyroll.com/auth/v1/token', {
+    headers: {
+      Authorization: data.authorization,
+      'User-Agent': 'Crunchyroll/ANDROIDTV/3.42.1_22267 (Android 16; en-US; sdk_gphone64_x86_64)',
+      // ...
+    },
+    method: 'POST',
+    body: JSON.stringify({
+      // ...
+    }),
+  });
+}
+```
+
 #### Library
 
 ```js
-import { extractSecrets } from 'crunchys';
+import { extract } from 'crextractor';
 
-const { id, secret, encoded, header } = await extractSecrets();
+const { id, secret, encoded, authorization } = await extract();
 
 // Do something with the extracted secrets
 ```
@@ -28,9 +50,11 @@ const { id, secret, encoded, header } = await extractSecrets();
 #### Command-line interface
 
 ```bash
-npx crunchys
+npx crextractor --target mobile --output ./credentials.mobile.json
 ```
 
+> Results will be printed to the console and saved to `credentials.mobile.json` file. By default, the target is TV, but you can change it with `--target mobile` option.
+
 ## License
 
 MIT

bin/cli.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+
+const { parseArgs } = require('node:util');
+const { extract } = require('../crextractor');
+
+const args = parseArgs({
+  options: {
+    target: {
+      type: 'string',
+      default: 'tv',
+    },
+    output: {
+      type: 'string',
+    },
+    cleanup: {
+      type: 'boolean',
+      default: false,
+    },
+  },
+});
+
+extract({
+  target: args.values.target,
+  output: args.values.output ?? (args.values.target === 'tv' ? 'credentials.tv.json' : 'credentials.mobile.json'),
+  cleanup: args.values.cleanup,
+});

credentials.mobile.json

@@ -0,0 +1,7 @@
+{
+  "version": "3.89.2 (952)",
+  "id": "n0q2nxl37zig0dqn0aio",
+  "secret": "P0j3he4N8UG8W2w0-PvDadjGuv62fN2d",
+  "encoded": "bjBxMm54bDM3emlnMGRxbjBhaW86UDBqM2hlNE44VUc4VzJ3MC1QdkRhZGpHdXY2MmZOMmQ=",
+  "authorization": "Basic bjBxMm54bDM3emlnMGRxbjBhaW86UDBqM2hlNE44VUc4VzJ3MC1QdkRhZGpHdXY2MmZOMmQ="
+}

credentials.tv.json

@@ -0,0 +1,7 @@
+{
+  "version": "3.42.1 (22267)",
+  "id": "bmbrkxyx3d7u6jsfyla4",
+  "secret": "AIN4D5VE_cp0wVzfNoP0YqHUrYFp9hSg",
+  "encoded": "Ym1icmt4eXgzZDd1NmpzZnlsYTQ6QUlONEQ1VkVfY3Awd1Z6Zk5vUDBZcUhVcllGcDloU2c=",
+  "authorization": "Basic Ym1icmt4eXgzZDd1NmpzZnlsYTQ6QUlONEQ1VkVfY3Awd1Z6Zk5vUDBZcUhVcllGcDloU2c="
+}

crextractor.d.ts

@@ -5,6 +5,6 @@ export function extractSecrets(): Promise<{
   secret: string;
   // Base64 encoded `id:secret` string
   encoded: string;
-  // Basic `Authorization` header to access Crunchyroll mobile APIs
+  // HTTP header with Basic Authorization to access Crunchyroll mobile APIs
-  header: string;
+  authorization: string;
 }>;

crextractor.js

@@ -0,0 +1,135 @@
+const { execSync } = require('node:child_process');
+const { join } = require('node:path');
+const { readdir, readFile, writeFile, rm } = require('node:fs/promises');
+const { download } = require('molnia');
+const { existsSync } = require('node:fs');
+
+const downloadMobileApk = async () => {
+  const source = 'https://apkcombo.com/crunchyroll/com.crunchyroll.crunchyroid/download/apk';
+  const page = await fetch(source);
+  const html = await page.text();
+  const route = '/r2' + html.split('/r2')[1]?.split('"')[0];
+  const url = `https://apkcombo.com${route}`;
+  const filepath = join(process.cwd(), 'crunchyroll.xapk');
+  await download(url, {
+    output: filepath,
+    onError: (error) => console.error(error),
+  });
+  return filepath;
+};
+
+const downloadTvApk = async () => {
+  const source = 'https://webservices.aptoide.com/webservices/3/getApkInfo';
+  const formData = new FormData();
+  formData.append('identif', 'id:71305225');
+  formData.append('mode', 'json');
+  const response = await fetch(source, {
+    method: 'POST',
+    body: formData,
+  });
+  const json = await response.json();
+  const url = json.apk.path;
+  const filepath = join(process.cwd(), 'crunchyroll.apk');
+  await download(url, {
+    output: filepath,
+    onError: (error) => console.error(error),
+  });
+  return filepath;
+};
+
+const decompileApk = (apkPath) => {
+  try {
+    execSync(`jadx ${apkPath}`, { stdio: 'inherit' });
+  } catch (error) {}
+  return apkPath.replace('.xapk', '').replace('.apk', '');
+};
+
+const findConfigurationImpl = async (sourcesDir) => {
+  const entries = await readdir(sourcesDir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const moduleDir = join(sourcesDir, entry.name);
+    const moduleEntries = await readdir(moduleDir, { withFileTypes: true });
+    for (const moduleFile of moduleEntries) {
+      if (moduleFile.isDirectory()) continue;
+      const moduleFilePath = join(moduleDir, moduleFile.name);
+      const moduleContents = await readFile(moduleFilePath, 'utf8');
+      if (moduleContents.includes(' ConfigurationImpl.kt')) {
+        return moduleContents;
+      }
+    }
+  }
+};
+
+const parseCredentials = async (decompiledDir) => {
+  const sourcesDir = join(decompiledDir, 'sources');
+  const configurationImpl = await findConfigurationImpl(sourcesDir);
+  if (configurationImpl) {
+    const lines = configurationImpl.split('\n');
+    const startIndex = lines.findIndex((line) => line.includes('https://sso.crunchyroll.com'));
+    const endIndex = lines.findIndex((line) => line.includes('CR-AndroidMobile-SSAI-Prod'));
+    const results = lines
+      .slice(startIndex, endIndex)
+      .map((line) => line.replaceAll(';', ''))
+      .map((line) => line.replaceAll('"', ''))
+      .map((line) => line.split('= ')[1])
+      .map((line) => line.trim());
+    const [, , id, secret] = results;
+    if (id && secret) return { id, secret };
+  }
+
+  const constantsPath = join(decompiledDir, 'sources', 'com', 'crunchyroll', 'api', 'util', 'Constants.java');
+  const constants = await readFile(constantsPath, 'utf8');
+  return {
+    id: constants.split(' PROD_CLIENT_ID = "')[1].split('"')[0],
+    secret: constants.split(' PROD_CLIENT_SECRET = "')[1].split('"')[0],
+  };
+};
+
+const parseVersion = async (decompiledDir) => {
+  const manifestJsonPath = join(decompiledDir, 'resources', 'manifest.json');
+  const manifestXmlPath = join(decompiledDir, 'resources', 'AndroidManifest.xml');
+  if (existsSync(manifestJsonPath)) {
+    const manifest = require(manifestJsonPath);
+    const version = `${manifest.version_name} (${manifest.version_code})`;
+    return version;
+  } else if (existsSync(manifestXmlPath)) {
+    const manifest = await readFile(manifestXmlPath, 'utf8');
+    const version = `${manifest.match(/versionName="([^"]+)"/)[1]} (${manifest.match(/versionCode="([^"]+)"/)[1]})`;
+    return version;
+  }
+};
+
+const extract = async ({ target, output, cleanup = false } = {}) => {
+  console.log('Downloading APK...');
+  const apkPath = target === 'tv' ? await downloadTvApk() : await downloadMobileApk();
+
+  console.log('Decompiling APK...');
+  const decompiledDir = decompileApk(apkPath);
+
+  console.log('Parsing version...');
+  const version = await parseVersion(decompiledDir);
+
+  console.log('Parsing credentials...');
+  const { id, secret } = await parseCredentials(decompiledDir);
+  const encoded = Buffer.from(`${id}:${secret}`).toString('base64');
+  const authorization = `Basic ${encoded}`;
+
+  console.log(`Cleaning up files...`);
+  if (cleanup) await rm(apkPath, { recursive: true, force: true });
+  if (cleanup) await rm(decompiledDir, { recursive: true, force: true });
+
+  console.log(`Version: ${version}`);
+  console.log(`ID: ${id}`);
+  console.log(`Secret: ${secret}`);
+  console.log(`Encoded ID with secret: ${encoded}`);
+  console.log(`Authorization: ${authorization}`);
+
+  if (output) {
+    await writeFile(output, JSON.stringify({ version, id, secret, encoded, authorization }, null, 2));
+  }
+
+  return { version, id, secret, encoded, authorization };
+};
+
+module.exports = { extract };

crunchys-cli.js

@@ -1,5 +0,0 @@
-import { extractSecrets } from './crunchys';
-
-(async () => {
-  await extractSecrets();
-})();

crunchys.js

@@ -1,90 +0,0 @@
-const { join, basename } = require('node:path');
-const { createWriteStream } = require('node:fs');
-const { readdir, readFile, rm } = require('node:fs/promises');
-const { execSync } = require('node:child_process');
-const { Readable } = require('node:stream');
-
-const downloadLatestApk = async () => {
-  const source = 'https://www.apk20.com/apk/com.crunchyroll.crunchyroid/download/';
-  const page = await fetch(source);
-  const html = await page.text();
-  const url = html.split('<link rel="canonical" href="')[1]?.split('"')[0];
-  const id = url.split('/').reverse().at(0);
-  const downloadUrl = `https://srv01.apk20.com/com.crunchyroll.crunchyroid.${id}.xapk`;
-  const fileName = basename(downloadUrl);
-  const response = await fetch(downloadUrl);
-  if (response.ok && response.body) {
-    const filePath = join(process.cwd(), fileName);
-    const writer = createWriteStream(filePath);
-    Readable.fromWeb(response.body).pipe(writer);
-    await new Promise((resolve) => writer.on('finish', resolve));
-  }
-  return join(process.cwd(), fileName);
-};
-
-const decompileApk = (apkPath) => {
-  try {
-    execSync(`jadx ${apkPath}`, { stdio: 'inherit' });
-  } catch (error) {
-    console.error(error);
-  }
-  return apkPath.replace('.xapk', '');
-};
-
-const findConfigurationImpl = async (sourcesDir) => {
-  const entries = await readdir(sourcesDir, { withFileTypes: true });
-  for (const entry of entries) {
-    if (!entry.isDirectory()) continue;
-    const moduleDir = join(sourcesDir, entry.name);
-    const moduleEntries = await readdir(moduleDir, { withFileTypes: true });
-    for (const moduleFile of moduleEntries) {
-      if (moduleFile.isDirectory()) continue;
-      const moduleFilePath = join(moduleDir, moduleFile.name);
-      const moduleContents = await readFile(moduleFilePath, 'utf8');
-      if (moduleContents.includes(' ConfigurationImpl.kt')) {
-        return moduleContents;
-      }
-    }
-  }
-};
-
-const parseSecrets = (contents) => {
-  const lines = contents.split('\n');
-  const startIndex = lines.findIndex((line) => line.includes('https://sso.crunchyroll.com'));
-  const endIndex = lines.findIndex((line) => line.includes('CR-AndroidMobile-SSAI-Prod'));
-  const results = lines
-    .slice(startIndex, endIndex)
-    .map((line) => line.replaceAll(';', ''))
-    .map((line) => line.replaceAll('"', ''))
-    .map((line) => line.split('= ')[1])
-    .map((line) => line.trim());
-  const [, , id, secret] = results;
-  const encoded = Buffer.from(`${id}:${secret}`).toString('base64');
-  const header = `Basic ${encoded}`;
-  return { id, secret, encoded, header };
-};
-
-export const extractSecrets = async ({ cleanup = true } = {}) => {
-  console.log('Downloading latest APK...');
-  const apkPath = await downloadLatestApk();
-
-  console.log('Decompiling APK...');
-  const decompiledDir = decompileApk(apkPath);
-
-  console.log('Searching for secrets...');
-  const sourcesDir = join(decompiledDir, 'sources');
-  const configurationImpl = await findConfigurationImpl(sourcesDir);
-
-  console.log('Parsing secrets...');
-  const { id, secret, encoded, header } = parseSecrets(configurationImpl);
-
-  console.log(`Cleaning up files...`);
-  if (cleanup) await rm(apkPath, { recursive: true, force: true });
-  if (cleanup) await rm(decompiledDir, { recursive: true, force: true });
-
-  console.log(`ID: ${id}`);
-  console.log(`Secret: ${secret}`);
-  console.log(`Encoded ID with secret: ${encoded}`);
-
-  return { id, secret, encoded, header };
-};

package-lock.json

@@ -1,24 +1,77 @@
 {
-  "name": "crunchys",
+  "name": "crextractor",
-  "version": "1.0.0",
+  "version": "1.2.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
-      "name": "crunchys",
+      "name": "crextractor",
-      "version": "1.0.0",
+      "version": "1.2.0",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://t.me/tribute/app?startapp=dqW2"
+        }
+      ],
       "license": "MIT",
+      "dependencies": {
+        "molnia": "^0.1.5"
+      },
       "bin": {
-        "crunchys": "cli.js"
+        "crextractor": "bin/cli.js"
       },
       "devDependencies": {
-        "typescript": "^5.8.2"
+        "typescript": "^5.9.2"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/fastq": {
+      "version": "1.19.1",
+      "resolved": "https://registry.npmjs.org/fastq/-/fastq-1.19.1.tgz",
+      "integrity": "sha512-GwLTyxkCXjXbxqIhTsMI2Nui8huMPtnxg7krajPJAjnEG/iiOS7i+zCtWGZR9G0NBKbXKh6X9m9UIsYX/N6vvQ==",
+      "license": "ISC",
+      "dependencies": {
+        "reusify": "^1.0.4"
+      }
+    },
+    "node_modules/molnia": {
+      "version": "0.1.5",
+      "resolved": "https://registry.npmjs.org/molnia/-/molnia-0.1.5.tgz",
+      "integrity": "sha512-Kb3bhlvNVWJ9Z8tGZGkhmChpXQY8OLFPkxXFvLJb+foLwfH7JyyJl+DbKuUKAIK1vnxs5sBFuQb3wxOIwWBpiA==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://t.me/tribute/app?startapp=dqW2"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "fastq": "^1.19.1",
+        "undici": "^7.15.0"
+      },
+      "bin": {
+        "molnia": "molnia.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/reusify": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/reusify/-/reusify-1.1.0.tgz",
+      "integrity": "sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==",
+      "license": "MIT",
+      "engines": {
+        "iojs": ">=1.0.0",
+        "node": ">=0.10.0"
       }
     },
     "node_modules/typescript": {
-      "version": "5.8.2",
+      "version": "5.9.2",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.8.2.tgz",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.2.tgz",
-      "integrity": "sha512-aJn6wq13/afZp/jT9QZmwEjDqqvSGp1VT5GVg+f/t6/oVyrgXM6BY1h9BRh/O5p3PlUPAe+WuiEZOmb/49RqoQ==",
+      "integrity": "sha512-CWBzXQrc/qOkhidw1OzBTQuYRbfyxDXJMVJ1XNwUHGROVmuaeiEm3OslpZ1RV96d7SKKjZKrSJu3+t/xlw3R9A==",
       "dev": true,
       "license": "Apache-2.0",
       "bin": {
@@ -28,6 +81,15 @@
       "engines": {
         "node": ">=14.17"
       }
+    },
+    "node_modules/undici": {
+      "version": "7.15.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.15.0.tgz",
+      "integrity": "sha512-7oZJCPvvMvTd0OlqWsIxTuItTpJBpU1tcbVl24FMn3xt3+VSunwUasmfPJRE57oNO1KsZ4PgA1xTdAX4hq8NyQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.18.1"
+      }
     }
   }
 }

package.json

@@ -1,16 +1,41 @@
 {
-  "name": "crunchys",
+  "name": "crextractor",
-  "version": "1.0.0",
+  "version": "1.2.0",
-  "description": "A utility to extract secrets from Crunchyroll mobile app",
+  "description": "Utility for extracting credentials from the Crunchyroll Android app",
-  "main": "crunchys.js",
+  "main": "crextractor.js",
-  "types": "crunchys.d.ts",
+  "bin": {
-  "bin": "crunchys-cli.js",
+    "crextractor": "bin/cli.js"
+  },
+  "files": [
+    "bin",
+    "crextractor.d.ts",
+    "crextractor.js"
+  ],
+  "types": "crextractor.d.ts",
+  "type": "commonjs",
   "scripts": {
+    "start": "node bin/cli.js",
     "test": "echo \"Error: no test specified\" && exit 1"
   },
+  "keywords": [
+    "crunchyroll"
+  ],
   "author": "Vitaly Gashkov <vitalygashkov@vk.com>",
   "license": "MIT",
+  "readmeFilename": "README.md",
+  "funding": [
+    {
+      "type": "individual",
+      "url": "https://t.me/tribute/app?startapp=dqW2"
+    }
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {
+    "molnia": "^0.1.5"
+  },
   "devDependencies": {
-    "typescript": "^5.8.2"
+    "typescript": "^5.9.2"
   }
 }