Dumper is a Frida script to dump L3 CDMs from any Android device.

Use pip to install the dependencies:

pip3 install -r requirements.txt

• Enable USB debugging
• Start frida-server on the device
• Execute dump_keys.py
• Start streaming some DRM-protected content

A few phone brands let us use the L1 keybox even after unlocking the bootloader (like Xiaomi). In this case, installation of a Magisk module called liboemcrypto-disabler is necessary.

It seems like Google made some changes in their OEMCrypto library and it broke the script. Further investigation is needed to make it work on Android 11+, feel free to open PRs.

Thanks to the original author of the code.