o11pro-unpacked/README.md

O11 Pro Cracked - Unpacked Version

O11 Pro is a streaming media server capable of proxying, remuxing, and redistributing IPTV/OTT live and VOD streams. It features a built-in web UI, EPG support, HLS/DASH handling, and DRM decryption via CDM integration.

---

Further Reading

Document	Description
API.md	Complete REST API reference all endpoints, methods, and auth details
RE.md	Reverse engineering notes frontend deobfuscation analysis, Vue component map, config schema, and TODO

---

Quick Start

# Minimum: just set a port
./o11pro_unpacked -p 8080

# With web UI login credentials
./o11pro_unpacked -p 8080 -user admin -password yourpassword

# Headless mode (no web UI)
./o11pro_unpacked -p 8080 -headless

# With separate EPG and streaming ports
./o11pro_unpacked -p 8080 -epgport 8081 -streamport 8082

# Debug mode
./o11pro_unpacked -p 8080 -v 3 -stdout

When started without -user and -password, a temporary admin account is auto-generated and printed to the log:

WARN: Use temporary account to login to Web UI: admin / OtoN4Fx0

Open http://<your-ip>:<port> in a browser to access the web interface.

---

Command-Line Options

Server & Network

Flag	Description	Default
-p	HTTP port to listen on (required)	0 (none must be set)
-b	HTTP bind address	0.0.0.0 (all interfaces)
-https	Enable HTTPS (requires server.crt and server.key in the O11 directory)	false
-baseurl	HTTP base URL (for reverse proxy setups)	(empty)
-streamport	Dedicated streaming port. If not set, the HTTP port is used	0 (shares HTTP port)
-streambind	Streaming bind address	0.0.0.0
-epgport	EPG (Electronic Program Guide) port	0 (disabled)
-epgbind	EPG bind address	0.0.0.0
-allow	Comma-separated list of no-auth admin source IP addresses (e.g. 192.168.1.0/24,10.0.0.1)	(empty)

Authentication & Security

Flag	Description	Default
-user	Static admin username for web UI login	(empty temp account generated)
-password	Static admin password for web UI login	(empty temp account generated)
-jwtsecret	JWT secret for login sessions. Default is randomly generated on each start	(random)

Configuration & Files

Flag	Description	Default
-c	Main config file path	o11.cfg
-job	Jobs config file path	o11-job.cfg
-rec	Recordings config file path	o11-rec.cfg
-path	Working directory. All sub-directories (HLS, logs, etc.) are created here	current directory
-providers	Providers directory path	providers/
-keys	File with KID:KEY pairs for decryption fallback	keys.txt
-f	FFmpeg binary path	ffmpeg
-tsplay	Tsplay binary path (for UDP output mode)	tsplay

Logging

Flag	Description	Default
-v	Log level: 0=error, 1=warning, 2=info, 3=debug, 4=verbose, 5=trace	2 (info)
-stdout	Log to stdout instead of log files	false
-logsize	Max log file size in MB (per file)	100
-logscount	Number of log file rotations to keep	7
-logtomain	Also send stream-specific logs to the main log	false
-logtomainonly	Only send stream logs to main log (no separate stream logs)	false
-V	Module to enable special debug logs from (e.g. subtitles)	(empty)

Runtime Behavior

Flag	Description	Default
-headless	Run without the web UI	false
-noautostart	Do not auto-start providers/channels on launch	false
-flushperiod	Seconds between config/key flushes to disk. 0 to disable	300
-keep	Keep temp media files after processing (debugging)	true
-noramfs	Allow FFmpeg mode even if ./hls/live is not a RAMFS	false
-remuxondisk	Write internal remuxer temporary files to disk instead of RAM	false
-debugspeed	Print current fragment download queue per channel/media type	false
-defaultprovid	Default provider ID to display when none specified	(empty)

Playlist & Stream Naming

Flag	Description	Default
-plstreamname	Format for stream names in playlists. %p = provider name, %s = stream name	[%p] %s
-alteventdateformat	Use alternate date format 02 Jan. 2006 15:04 for EPG events	false
-novodmetadata	Disable metadata for VOD tracks	false
-pipeoutputcmd	Pipe output command format (overridable per provider). %s = format placeholder	tsplay -stdin %s

Replay Mode

Flag	Description	Default
-replay	Local stream path to replay (from hls/live/)	(empty)
-replaymode	Replay mode: ffmpeg, internalremuxer, etc.	internalremuxer

User-Agent & HTTP Headers

Flag	Description	Default
-a	Default User-Agent for HTTP connections	Chrome 122 on macOS

VOD Downloader

These options are used when downloading and converting VOD (Video On Demand) streams:

Flag	Description	Default
-manifest	Download and convert this manifest URL to MP4, then exit	(empty)
-video	Video track index to grab	(empty all)
-audio	Audio track indexes to grab (comma-separated)	(empty all)
-subs	Subtitle indexes to grab (comma-separated or all)	(empty none)
-extrasubs	Extra subtitle file URL. Can be used multiple times	(empty)
-maxsegments	Max segments to download (0 = unlimited)	0
-dashperiod	Force DASH period index. -1 = all non-ad periods	-2

DRM / CDM Decryption

Flag	Description	Default
-usecdm	Enable CDM script for DRM decryption	false
-cdmtype	CDM type: widevine, playready, or verimatrix	widevine
-cdmmode	CDM mode: internal or external	internal
-script	CDM script name	auto
-cdmparams	CDM script parameters	(empty)
-key	KID:KEY pair for decryption. Can be used multiple times	(empty)
-doh	DNS-over-HTTPS URL for CDM requests	(empty)
-H	Custom HTTP header for VOD requests (format: key:value). Can be used multiple times	(empty)

---

Web UI Pages

The Vue.js frontend provides the following pages accessible via the navigation sidebar:

Page	Route	Description
Providers	/providers	List of configured IPTV/OTT providers. Add, edit, delete, import, export providers
Linear	/linear	Live channel management. Start/stop streams, view on-air status
Events	/events/:provider?	Scheduled event streams with filtering and replay support
VOD	/vod	Video-on-demand library per provider. Download and convert to MP4
Recordings	/recordings/:provider?	Manage stream recordings. Schedule and review recorded events
Monitoring	/monitoring	Real-time stream status overview, running streams dashboard
Logs	/logs/:provider?/:stream?	Per-channel and main log viewer. Export and clean logs
Users	/users	User management. Create/edit users, set admin, assign provider access
Config	/config	Provider configuration (script, CDM, network, channels, stream options)
Help	/help	Built-in documentation with table of contents
Login	/login	Authentication page. JWT-based token auth

---

Examples

Basic IPTV Proxy

./o11pro_unpacked -p 8080 -user admin -password mysecretpass

Access the web UI at http://localhost:8080, log in with admin / mysecretpass, and add your providers through the interface.

Separate Streaming + EPG Ports

./o11pro_unpacked -p 8080 -streamport 9090 -epgport 9091 -user admin -password pass

• Web UI: http://localhost:8080
• Streaming: http://localhost:9090
• EPG: http://localhost:9091

HTTPS Mode

# Place your certificates in the working directory first
cp server.crt server.key /path/to/o11/
./o11pro_unpacked -p 8443 -https -user admin -password pass

Access via https://localhost:8443.

VOD Download with DRM

# Download with manual decryption keys
./o11pro_unpacked -manifest "https://example.com/manifest.mpd" \
  -key "eb676abbcb345e96bbcf616630f1a3da:234567890abcdef1234567890abcdef1" \
  -video 0 -audio 0,1 -subs all

# Download with CDM script
./o11pro_unpacked -manifest "https://example.com/manifest.mpd" \
  -usecdm -cdmtype widevine -cdmmode internal

Headless with Custom Config

./o11pro_unpacked -p 8080 -headless -c /etc/o11/myconfig.cfg \
  -path /var/lib/o11 -providers /etc/o11/providers/

Bind to Localhost Only

./o11pro_unpacked -p 8080 -b 127.0.0.1 -streambind 127.0.0.1

Full Debug Mode

./o11pro_unpacked -p 8080 -v 5 -stdout -debugspeed

Replay a Local Stream

./o11pro_unpacked -p 8080 -replay my_channel_stream -replaymode internalremuxer

---

Directory Structure

When using -path, O11 creates the following sub-directories:

o11pro-unpacked/
├── hls/
│   ├── live/          # Live HLS segments (recommend RAMFS)
│   ├── replay/        # Replayed stream segments
│   └── vod/           # VOD stream segments
├── dl/
│   └── tmp/           # VOD download temp files
├── epg/               # EPG data cache
├── fonts/             # Custom fonts
├── logos/             # Channel/provider logos
├── logs/              # Rotating log files
├── manifests/         # Downloaded manifest cache
├── offair/            # Off-air placeholder media
├── overlay/           # Picture overlays for streams
├── providers/         # Provider configuration files & scripts
├── rec/               # Recording output files
├── scripts/           # CDM scripts (o11.py auto-generated)
├── keys.txt           # KID:KEY decryption fallback
├── o11.cfg            # Main configuration
├── o11-job.cfg        # Jobs configuration
└── o11-rec.cfg        # Recordings configuration

---

EPG Access

O11 serves EPG data in multiple formats:

Format	URL
XML (gzip)	http://ip:epgport/providerid.xml.gz
XML (plain)	http://ip:epgport/providerid.xml
Web UI	http://ip:port/epg
API	GET /epg/:provider?/:stream?

Use the -epgport flag to enable the EPG endpoint.

---

Playlist Access

Streams are accessible via playlist format. The -plstreamname flag controls the display name format:

• Default: [%p] %s shows [ProviderName] StreamName
• Custom: -plstreamname "%s (%p)" shows StreamName (ProviderName)

---

Log Levels Reference

Level	Name	Description
0	Error	Critical errors only
1	Warning	Warnings and errors
2	Info	General operational info (default)
3	Debug	Detailed debug information
4	Verbose	Very detailed output
5	Trace	Maximum verbosity, including internal state

---

Notes

• The -p flag is required. The binary will not start without an HTTP port.
• Without -user / -password, a temporary admin account is generated on each start and printed to the log.
• For HTTPS, both server.crt and server.key must exist in the O11 working directory.
• The -key flag accepts KID:KEY pairs in hex format and can be specified multiple times for multiple keys.
• The -H flag for custom headers can be repeated: -H "Authorization:Bearer token" -H "X-Custom:value".
• VOD downloader mode (-manifest) downloads, converts, and exits it does not start the server.
• Script accounts use the format: user=join@mail.com password=mypassword device=123456 pin=1234
• Proxy support: http://user:pass@ip:port and socks5://user:pass@ip:port

Credits

• Nulled (Cracked o11pro)
• Lossui011