[tiktok] Found a new way to get information about TikTok videos

[valsoray-dev]

[tiktok] Found a new way to get information about TikTok videos

[valsoray-dev]

Are you sure that would work reliably? X-Argus and X-Gorgon are security parameters used to lock down this endpoint. I get an empty response without the security headers / cookies.

In my case, only X-Argus is needed. I tried to make it empty or just put a space - it works, and I get the result. I tried it from my IP and from a VPN in the US.

[valsoray-dev]

You can try running this code.

Code

import requests

url = "https://api16-normal-c-useast1a.tiktokv.com/aweme/v1/multi/aweme/detail/"

params = {
    # "aweme_ids": "[7376024324995583275]",
    "iid": "7379691220551141126",
    "device_id": "7379690547022071302",
    "channel": "googleplay",
    "aid": "1233",
    "app_name": "musical_ly",
    "version_code": "350103",
    "version_name": "35.1.3",
    "device_platform": "android",
    "device_type": "Pixel 8 Pro",
    "os_version": "14",
}

payload = {"aweme_ids": "[7376024324995583275]"}
headers = {
    "content-type": "application/x-www-form-urlencoded",
    "User-Agent": "com.zhiliaoapp.musically/2023501030 (Linux; U; Android 14; en_US; Pixel 8 Pro; Build/TP1A.220624.014;tt-ok/3.12.13.4-tiktok)",
    "x-argus": "",
}

try:
    response = requests.post(url, data=payload, headers=headers, params=params)
    # response = requests.get(url, headers=headers, params=params)
    json = response.json()

    bit_rates = json["aweme_details"][0]["video"]["bit_rate"]

    for item in bit_rates:
        print(item["gear_name"])
        print(item["play_addr"]["url_list"][0])
        print()

except Exception as e:
    print("Empty response or something gone wrong")
    raise e

The result should look something like this.

Result

adapt_lowest_1080_1
https://v77.tiktokcdn.com/8d11dd56cdc7a010f10e1392f17e5aa4/66733ca5/video/tos/maliva/tos-maliva-ve-0068c799-us/oA0KcASWnpQTMiEzpLifBAwcF6yZHDItIEBwCX/?a=1233&bti=OUBzOTg7QGo6OjZAL3AjLTAzYCMxNDNg&ch=0&cr=13&dr=0&er=0&lr=all&net=0&cd=0%7C0%7C0%7C&cv=1&br=1382&bt=691&cs=2&ds=4&ft=XMebYqT2mLDPD12mXDR73wUY~vgijeF~O5&mime_type=video_mp4&qs=15&rc=NjY7ODU4OWZlZjU8ZDg3ZEBpajhrd2o5cmVoczMzZzczNEBjMS4zYjBeXzIxXl82LmFjYSMuMS5qMmRzNGJgLS1kMS9zcw%3D%3D&vvpl=1&l=202406191415434FBD8A4F6BB10B0B234A&btag=e00088000&cc=13

adapt_lower_720_1
https://v77.tiktokcdn.com/4f3348834a567b1209a5679db54d16de/66733ca5/video/tos/maliva/tos-maliva-ve-0068c799-us/oEfvxKjCOmo7QgEe0YkFbEjDBwFGXIR5OhSAgD/?a=1233&bti=OUBzOTg7QGo6OjZAL3AjLTAzYCMxNDNg&ch=0&cr=13&dr=0&er=0&lr=all&net=0&cd=0%7C0%7C0%7C&cv=1&br=906&bt=453&cs=2&ds=3&ft=XMebYqT2mLDPD12mXDR73wUY~vgijeF~O5&mime_type=video_mp4&qs=14&rc=ZTY6Z2g2Z2U5O2Y6ODs7aUBpajhrd2o5cmVoczMzZzczNEBiLWM1XmI2NjUxMmAyXzBfYSMuMS5qMmRzNGJgLS1kMS9zcw%3D%3D&vvpl=1&l=202406191415434FBD8A4F6BB10B0B234A&btag=e00088000&cc=13

adapt_540_1
https://v77.tiktokcdn.com/b1cedaf88720bd2b815e65a5459379e9/66733ca5/video/tos/maliva/tos-maliva-ve-0068c799-us/ocww0F6XAtHCnwpzImDABSMTHiEXIQicb9CLfB/?a=1233&bti=OUBzOTg7QGo6OjZAL3AjLTAzYCMxNDNg&ch=0&cr=13&dr=0&er=0&lr=all&net=0&cd=0%7C0%7C0%7C&cv=1&br=764&bt=382&cs=2&ds=6&ft=XMebYqT2mLDPD12mXDR73wUY~vgijeF~O5&mime_type=video_mp4&qs=11&rc=PGlnNWY0OTg5aWg2NDQ1OkBpajhrd2o5cmVoczMzZzczNEBgLWAwYjQyXjAxNDIxYWMxYSMuMS5qMmRzNGJgLS1kMS9zcw%3D%3D&vvpl=1&l=202406191415434FBD8A4F6BB10B0B234A&btag=e00088000&cc=13

lower_540_1
https://v77.tiktokcdn.com/30bc850f3c0b92aef82963f886509e03/66733ca5/video/tos/maliva/tos-maliva-ve-0068c799-us/o4pBiAMtnCwHF5HcIQCHifDXp6LBzEA0KBSIwv/?a=1233&bti=OUBzOTg7QGo6OjZAL3AjLTAzYCMxNDNg&ch=0&cr=13&dr=0&er=0&lr=all&net=0&cd=0%7C0%7C0%7C&cv=1&br=666&bt=333&cs=2&ds=6&ft=XMebYqT2mLDPD12mXDR73wUY~vgijeF~O5&mime_type=video_mp4&qs=4&rc=M2RmOjxpNzk7OTMzODU0aEBpajhrd2o5cmVoczMzZzczNEBiYTA2X2EuNjYxMjVgLy5gYSMuMS5qMmRzNGJgLS1kMS9zcw%3D%3D&vvpl=1&l=202406191415434FBD8A4F6BB10B0B234A&btag=e00088000&cc=13

lowest_540_1
https://v77.tiktokcdn.com/63cc51afe400823f12f1589ef16e42aa/66733ca5/video/tos/maliva/tos-maliva-ve-0068c799-us/owfRQEObGhvE6Co5KeBxI9Y0ggFKDmAOXkDS6E/?a=1233&bti=OUBzOTg7QGo6OjZAL3AjLTAzYCMxNDNg&ch=0&cr=13&dr=0&er=0&lr=all&net=0&cd=0%7C0%7C0%7C&cv=1&br=458&bt=229&cs=2&ds=6&ft=XMebYqT2mLDPD12mXDR73wUY~vgijeF~O5&mime_type=video_mp4&qs=5&rc=NjpnM2VpNDg6ZGZlOTc1PEBpajhrd2o5cmVoczMzZzczNEAtLjVeNWNjNTAxMjAyMjVhYSMuMS5qMmRzNGJgLS1kMS9zcw%3D%3D&vvpl=1&l=202406191415434FBD8A4F6BB10B0B234A&btag=e00088000&cc=13

[seproDev]

I was able to replicate your findings in that the signature parameters are currently seemingly not checked.
This still leaves the problems of having users provide their own IID and device ID, as these are checked. The last time the yt-dlp extractor included IIDs they were banned in a short time.

[bashonly]

#10216