Skip to content

MangaLivre: Decrypt API responses and self-heal rotated keys#17685

Open
Deivison-Costaa wants to merge 1 commit into
keiyoushi:mainfrom
Deivison-Costaa:mangalivre-decrypt-gate
Open

MangaLivre: Decrypt API responses and self-heal rotated keys#17685
Deivison-Costaa wants to merge 1 commit into
keiyoushi:mainfrom
Deivison-Costaa:mangalivre-decrypt-gate

Conversation

@Deivison-Costaa

Copy link
Copy Markdown
Contributor

Chapters fail with HTTP 403: the site moved its reading gate to a double-submit toon_v cookie plus Rabbit-cipher (CryptoJS) response bodies whose key rotates daily.

  • Decrypt the {"<dataKey>":"<ciphertext>"} bodies (MangaLivreDecryptor).
  • On 403, prime the toon_v cookie via a hidden WebView (TokenResolver).
  • Re-extract the rotating key constants from the live JS bundle, so daily rotations self-heal without a new release.

Closes #17638

Verified end-to-end on a real device: opened never-cached chapters, including the self-heal path with deliberately stale built-in constants.

Checklist:

  • Updated versionCode value in build.gradle.kts
  • Updated baseVersionCode in build.gradle.kts (if updated multisrc theme code)
  • Referenced all related issues in the PR body (e.g. "Closes #xyz")
  • Set the contentWarning configuration in build.gradle.kts appropriately
  • Have not changed source names
  • Have explicitly kept the id if a source's name or language were changed
  • Have tested the modifications by compiling and running the extension through Android Studio
  • Have removed web_hi_res_512.png when adding a new extension
  • This PR is AI-assisted, I have reviewed the changes manually and confirmed they are not slop

The reading gate now serves Rabbit-cipher (CryptoJS) bodies behind a double-submit toon_v cookie. Decrypt them, prime the cookie via a hidden WebView on 403, and re-extract the daily-rotating key constants from the live bundle so rotations self-heal without a release.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Manga Livre: HTTP 403 error

2 participants