Hulubox Addon Kodi Video Review
Hulubox addon is one of the latest addons that Metalkettle has released on his repository for Kodi.
Hulubox addon is one of the latest addons that Metalkettle has released on his repository for Kodi.
Just off the press! The Tkilla 2.0 addon for Kodi Isengard and jarvis 16 is now out. This is a great live Iptv addon with tons off spanish live tv and sports. Do not miss any more soccer or Baseball games ever again. Very stable and from a group of guys that have done an incredible job at giving us free tv with such hard work.Thank you
Livestream addon showcases a bunch of news channels from all different states of the US. Basically a free to air but on the internet.
Kodi Official Repository
Facebook: Xbmc Tips And tricks https://www.facebook.com/groups/565124710285772/
Need to keep the wife busy and allow you time to watch your sports or tinker with Kodi? look no further! This Soap Addon for Kodi will keep her entertained. This addon is for UK users as USA soaps have not been added yet. But certainly a wife pleaser.
just Install the Metalkettle repo: http://kodi.metalkettle.co
you can setup Metalkettle FTP repo by selecting File manager un der system and adding the above source.
Icefilms has released a new update that fixes the addon by Eldorado. You can download the addon below. plugin.video.icefilms-1.15.0
Icefilms Github Download
|[B]v1.15.0 (Tuesday, 06 October 2015):[/B]|
|– Added resume support|
|– Fixed HugeFile resolver|
|– Fixed issue (hopefully) with occasional error (_getitem_) when loading list of sources|
|[B]v1.14.0(Friday, 02 October 2015):[/B]|
|– Small fix to catch and bypass errors encountered with ad’s|
|[B]v1.13.0(Friday, 25 September 2015):[/B]|
|– Fixed ClicknUpload resolver|
|– Fixed 180Uploads resolver|
|– Small bug fix in tv show episodes listing|
|[B]v1.12.0(Friday, 11 September 2015):[/B]|
|– Small update to help fix Ice Ads|
|[B]v1.11.0(Tuesday, 8 September 2015):[/B]|
|– Fixed syntax error with MySQL table creation|
|– Added referrer when grabbing Icefilms ads to ensure impressions are hit|
Here is a list and downloads for all of the addons listed in Kodi Isengard Fusion repo. Makes it easy if you just need a quick download. Also listed is the actual ftp repo for Fusion TV addons.ag
Stream All The Soutces SALT Addon has been updated with more options.
The main difference between Stream All The Sources and Genesis is that SALTs grabs its metadata from Trakt, while Genesis uses IMDB. Other than that, both are used as an interface to TV show and movies. Many of the same HD sources appear in both add-ons!
Stream All The Sources works best with the Trakt add-on, which allows you to track your favorite shows and movies and what you’ve watched. Sync your Trakt account with your Trakt add-on in Kodi and to the Trakt settings in SALTs to take advantage of all features.
The new Stream All The Sources 1.0.59 update fixes and adds numerous scrapers. If you are unfamiliar, a scraper is a script that runs in the background of SALTs that allows it to interface with various streaming sites on the internet. It uses these scrapers to pull content and links for every TV show and movie into the Stream All The Sources 1.0.59 add-on. Streaming sites are constantly tweaking their back-end, which requires updates to the scrapers in order for them to work correctly.
SALTs 1.0.59 Change Log
The generous Adryan has updated his Adryanlist addon to include all of the iptv stalker live tv channels. That includes English and Spanish. El generoso Adryan agrego los canales de Iptv Stalker a su Adryanlist Addon Hoy. Ahora incluye mas canales en ingles y Espanol.#Adryanlist updated with Stalker Channels US and UK n Latin. TP for maxico and Entretenimiento para Todos
Add this or add this url to livestreampro: http://adryanlist.info
Here is a list of IPTV addons for 2015 that are working quite well. Iptv addons are very unpredictable as they come and go. Sure there are a few that have been around for while but the links might not be that great. But with that being said here are a few that will get you some free live tv.
DexterTV – During the time of writing this is actually the best IPTV/Live TV add-on available. An absolute must have add-on
Ccloud addon- An execllent live tv iptv
Adryanlist – An IPTV add-on with a lot of The spanish language speaking channels
BBC iPlayer – All of the BBC channels live. This may need you to maintain the United kingdom and have a United kingdom VPN.
BBTS – You might have used the IPTV list from BBTS previously. Lucrative comes with an add-up with various sports and worldwide channels.
Channel PEAR – A brand new add-on for Kodi (June 2015) but looks excellent. Has some good streams and it is something you can examine out.
Chicago List – Plenty of The spanish language live Television channels
Daffys IPTV & VOD – A comparatively new IPTV add-on but appears like a high quality one, certainly something really worth trying.
Nederlander Cloud TV – Although this add-on is targeted towards Nederlander customers with a lot of Nederlander speaking content you will find also links with other live TV channles from U.S., Italia and The country. You will probably find a couple of surprises inside for a while to check on all of the channels.
F.T.V – Lots of channels for the viewing pleasure. Lot’s of United kingdom channels which are not geo-specific so that you can watch them with no VPN.
.F.U.B.A.R. – A great add-on. Lots of preference within the IPTV section to look at plenty of live channels (Svenska TV Kanaler)
FreeTuga – This add-on has an abundance of live channels from The country and Portugal among others. Also provides live sports.
Halow Live – A great little add-on and also the dev is definitely on the top of products ensuring the streams will work and adding new streams because he finds them. It’s plenty of sport in addition to channels from a variety of nations.
IsraeLIVE – This add-on is loaded with lots of United kingdom, US & Israeli Television channels and more from around the globe.
iStream – The most popular add-on. Launch it and choose the Live TV link and you may spend your entire day surfing through all of the channels it’s available. Plenty of terrestrial & satellite channels available. Sport channels too.
ITV – All of the ITV channels live. Requires United kingdom VPN/Proxy
Lihat IPTV – An excellent add-on with a lot of channels to select from.
Navi-X – Among the earliest and renowned add-ons it has an excessive amount of stuff to list out. But instead of getting a hyperlink within the add-with that goes straight to live TV searching for that funnel you’re attempting to watch.
Operation Robocop – A pleasant IPTV add-up with numerous channels to select from
P2P Streams – Plenty of sport shows and a lot of Russian (most likely another east European language channels too – my cyrillic decoding abilities aren’t good so am supposing the majority are Russian).
Phoenix – Woodsy is no more on here but Staael updates his live channels constantly and try to includes a good stream if you want watching your football, One242415 is loaded with lots of worldwide live streams and Crusader88 has more worldwide channels than you are able to shake a stick at. Plus there’s lots of other things in the room.
Renegades TV – This add-on enables you to employ an EPG to which you’ll link preset add-ons. This really is regularly up-to-date and really worth searching at.
RobinHood Project – An accumulation of lists to numerous live Television channels and Sporting occasions from around the globe.
SportsDevil – Does not need any introduction. It’s sport shows.
Stream Engine – An add-up with links to reside Sport shows along with other stuff too.
StreamStorm TV – An Obsessed Person-like IPTV add-on. Highly suggested
United kingdom Turks Live Streams – An add-on with lots of live United kingdom Sports and television channels.
United kingdom TV Sports HD Playlist on Navi-X – This playlist is loaded with lots of excellent quality sports streams along with other channels. Certainly worth cecking out.
VDubT25 – You’ll want seen a VDub tutorial online. For those who have used XBMC/Kodi for just about any period of time you’ll have heard the man, he’s great, he provides lessons to make it simpler to get great add-ons. He’s their own add-on and that he updates this regularly. Really worth contributing to your collection.
Zem TV – Plenty of Pakistani and Indian live TV in addition to Sky Sports. plenty of cricket channels
Download your favorite Kodi Isengard wizard setup below. Some of them do require a password but for the most part are free. So take a look and play with them.
New live tv addon, Streamstomtv for kodi Isengard Jarvis. It has a ton of fully working live tv channels from all over the world. Seems to be a mix between dexter addon and iptv stalker addon. It is as someone is redoing and copying these addons. Anywho, seems to be working great on this end so give it a go.
The count down begins for Apple to release their Apple TV 4 Media center box. It loos like it will have tons of power under the hood and we are dying to see what the ios looks like. The remote is supposed to be touch screen with big icons to easily navigate. I am sure their will soon be a Jailbrake for it so that we can install, yes Kodi Isengard!! For now let the count down commence!
Yes, a brand new Apple TV by having an Application Store is arriving October!
We are super-looking forward to the brand new Apple TV and SDK, and also have already began focusing on a shiny latest version of Infuse with this amazing new platform.
Keep an eye on this space as i will be posting development updates because the application begins to get together.
This list was passed on to me through an email and I felt it was a pretty decent list of best top Kodi isengard addons that the community uses. I personally use a smaller list but non the less here it is:
BBTS – LIVE TV
CARTOON HD – KIDS,MOVIES
CARTOONS 8 – YOUNGER KIDS
CHANNEL PEAR – LIVE TV ***
CLIQ – VARIOUS, IF YOU GO UNDER USER SUBMITTED PLAYLISTS,THEN STANDARD PLAYLISTS,LOOK FOR NAVI-X LISTS,
FOR EXAMPLE, MOST RECENTLY UPDATED, ONCE YOU FIND SOMETHING YOU WANT TO SAVE YOU CAN NOW SAVE THROUGH CLIQ
TO YOUR FAV`S FOLDER IN KODI. ( IF YOU WERE TO DO THIS WITHIN NAVI-X THIS WOULD ONLY SAVE TO THE ADDON)
CCLOUD – CURRENTLY NOT WORKING BUT IS SUPPOSEDLY BEING FIXED
DUTCH CLOUD TV – LIVE TV *****
DIJ ENT – MOVIES,TV,KIDS
DEXTER TV – VARIOUS LIVE TV & MOVIES
FILM DICTATOR – HD MOVIES
FILM HD – MOVIES,TV
FTV – LIVE TV
FLIXANITY – MOVIES & TV
GENESIS – BEST FOR TV,MOVIES,SKY MOVIES UNDER CHANNELS THAT START FROM BEGINNING *****
FUBAR – LIVE TV & MOVIES *****
GORILLA STREAMS LIVE TV *****
HALOW TV – LIVE TV ****
ICEFILMS – MOVIES ( NEEDS A WORKING CUSTOM URL)
LIVE TV – VARIOUS LIVE CHANNELS
MD WATCH SERIES – TV
MOVIE NIGHT – MOVIES *****
MOVIES RX – MOVIES
MOVIES XK – MOVIES
MUCKYDUCK WIZ – FOR FIXING ADDONS URLS ( THIS IS USED IF YOUR ADDON WHEN OPENED IS EMPTY )
MODBRO – LIVE TV ETC
NAVI-X MOVIES, TV, LIVE TV
ONLINE MOVIES PRO – MOVIES
PRIMEWIRE – BEST FOR TV, MOVIES ***** ( NEEDS A CUSTOM URL)
PROJECTFREE TV.SO GREAT FOR TV & MOVIES *****
ROBINHOOD – GREAT FOR EVERYTHING,MOVIES,SPORTS,LIVE TV & KIDS *****
RELEASE HUB – LOTS OF SOURCES FOR MOVIES,TV,SPORT & MUSIC ******
PHEONIX – TV,MOVIES,SPORT,KIDS *****
STREAM ENGINE – BEST SPORT CHANNELS, MOVIES, TV, KIDS *****
SPORTSDEVIL LIVE TV *****
SALTS – GOOD ADDON FOR MOVIES & TV
SUPER FAVORITES – SAVE YOUR FAVORITE TV SHOWS,MOVIES,SPORTS CHANNELS & MUSIC TO A FOLDER
SPARKY`S FOOTBALL – FOOTBALL HIGHLIGHTS
SHADOW BUILDS – CUSTOM BUILDS FOR KODI
SENAL LATINA – LIVE TV, SOME ENGLISH
SPORTS LIVE TV – SPORTS
IVUE – LIVE TV ( WORK IN PROGRESS )
MUTTS NUTS – MOVIES *****
RENEGADES TV GUIDE LIVE TV *****
THE GIDDYUP N/WK LIVE TV
TV PLAYER – UK CHANNELS
TV RAGE – ADD FAV TV SHOWS TO KEEP TRACK WHEN NEXT AIRED
TV DIRETO – SPORTS & LIVE TV
TEEVEE – VARIOUS TV
UK TURKS – MOVIES,TV,LIVE TV & SPORTS *****
VDUBT25 – GOOD FOR LIVE SPORTS *****
VODLOCKER – MOVIES
RAW MAINTENANCE – A MUST OF FIRE TV STICK OR LOW STORAGE DEVICES, CLEAR CACHE, REMOVE PACKAGES( LEFT OVER DATA NO LONGE NEEDED ONCE ADDONS HAVE BEEN INSTALLED)
BACK UP – FOR MAKING FULL BACKUPS OF YOUR ADDONS ETC
TOTAL INSTALLER – VARIOUS ADDONS & COMMUNITY BUILDS
XUNITY MAINTENANCE – FOR USING TO CLEAR CACHE, FIXES & TWEAKS
USB SDCARD WIZARD – BACKUPS ETC
ADDON INSTALLER – INSTALL ADDONS DIRECT TO KODI
Transform Mega ( Megatron rom)
Solved No Issue
HOW TO INSTALL NEW VERSION OF TOTAL INSTALLER V2
I do not take credit for this list. It was past on to me. Thanks to the creator!!!
Fubar is still kicking it big withu pdates. F.u.b.a.r Addon now includes links from pandamovie.me. Another great update for the addon. Hope they keep developing and making it bigger and better.
ToSetup do the following steps:
Go into your Kodi Isengard system and below it select file manager
Click add source
For path enter: http://muckys.kodimediaportal.ml/
And for name enter: Mucky Duck
You can now go into system, addons, install from zip and scroll to Mucky Duck. Here
you can install the wizard or just the addons.
Amazon Best Android Boxes: http://kodiiptvxbmc.com
kodi Isengard Tutorials: http://kodim3u.com
Bikini Girls: http://bikiniviral.com
Funny Videos: http://querisavines.com
kitchen Gadgets: http://funkykitchengadgets.com
IPVanish VPN Link: https://www.ipvanish.com/?a_aid=559b2ebabc791&a_bid=48f95966
Best kodi Isengard skin: http://Elsabio78Skins.com
Greate site: http://1stopsite.com
Kodi m3u iptv list August 2015 #EXTINF:0,Updated:8/15-CBSN http://cbsnews-linear.mdialog.com/video_assets/cbsnews.m3u8? #EXTINF:0,Updated:8/15-Russia Today http://rt-a.akamaihd.net/ch_04@325608/720p.m3u8 #EXTINF:0,Updated:8/15-ABC News http://abclive.abcnews.com/i/abc_live4@136330/index_800_av-b.m3u8? #EXTINF:0,Updated:8/15-CNBC NEWS http://18.104.22.168:1935/flu555/_definst_/jcnbc/playlist.m3u8?token= #EXTINF:0,Updated:8/15-WSVN Fox News 7 http://wsvn.mpl.miisolutions.net:1935/wsvn-live01/_definst_/mp4:apple_med/playlist.m3u8 #EXTINF:0,Updated:8/15-BBC World News http://22.214.171.124:5555/pl.m3u8?channel=144 #EXTINF:0,Updated:8/15-Sky News http://126.96.36.199:5555/pl.m3u8?channel=311 #EXTINF:0,Updated:8/15-France 24 (EN) http://188.8.131.52:5555/pl.m3u8?channel=309 #EXTINF:0,Updated:8/15-CNN HD http://184.108.40.206:1935/flu555/_definst_/jcnn/playlist.m3u8?token= #EXTINF:0,Updated:8/15-WGN (CW) http://wgntribune-lh.akamaihd.net/i/WGNPrimary_1@304622/index_350_av-p.m3u8? #EXTINF:0,Updated:8/15-CTV 1 http://220.127.116.11/live/2062.high.stream/2062.high.stream/index.m3u8 #EXTINF:0,Updated:8/15-CTV 2 http://18.104.22.168/live/2054.high.stream/2054.high.stream/index.m3u8 #EXTINF:0,Updated:8/15-CTV 3 http://22.214.171.124/live/2059.high.stream/2059.high.stream/index.m3u8 #EXTINF:0,Updated:8/15-Weather Nation http://cdnapi.kaltura.com/p/931702/sp/93170200/playManifest/entryId/1_oorxcge2/format/applehttp/protocol/http/uiConfId/28428751/a.m3u8 #EXTINF:0,Updated:8/15-Bloomberg http://cdn3.videos.bloomberg.com/btv/us/master.m3u8 #EXTINF:0,Updated:8/15-CCTV http://origin2.live.web.tv.streamprovider.net/streams/877ba7a57aa68fd898b838f58d51a69f/index.m3u8 #EXTINF:0,Updated:8/15-NDTV http://ndtv.live-s.cdn.bitgravity.com/cdn-live-b7/_definst_/ndtv/live/ndtv247live.smil/playlist.m3u8 #EXTINF:0,Updated:8/15-i24 News (EN) http://bcoveliveios-i.akamaihd.net/hls/live/215102/master_english/398/master.m3u8 #EXTINF:0,Updated:8/15-i24 News (AR) http://bcoveliveios-i.akamaihd.net/hls/live/215102/master_arabic/391/master.m3u8 #EXTINF:0,Updated:8/15-News Asia http://d1g7sccev8onz8.cloudfront.net/dvrcf/smil:87cna.smil/playlist.m3u8 #EXTINF:0,Updated:8/15-London Live http://bcoveliveios-i.akamaihd.net/hls/live/217434/3083279840001/master_900.m3u8 #EXTINF:0,Updated:8/15-Alabariya News http://alhadath-geo-live.hls.adaptive.level3.net/hls-live/alhadath-channel01/_definst_/live/stream1.m3u8?v=2913751298 #EXTINF:0,Updated:8/15-Samaa News http://samaatr.videocdn.scaleengine.net/samaatr-iphone/play/samaatr_264k.stream/playlist.m3u8 #EXTINF:0,Updated:8/15-DD News http://126.96.36.199:8080/hls-live/livepkgr/_definst_/ddnewslive.m3u8 #EXTINF:0,Updated:8/15-Telesur http://cdn2.telesur.ultrabase.net/livecf/telesurLive/chunklist.m3u8 #EXTINF:0,Updated:8/15-Azteca Noticias http://urtmpkal-f.akamaihd.net/i/077zoqxzy_1@130091/index_3_av-p.m3u8 #EXTINF:0,Updated:8/15-RTVE 24 Horas http://hlslive.rtve.es/24H_LV3_IPH/bitrate_1.m3u8 #EXTINF:0,Updated:8/15-A24 News http://iphone-streaming.ustream.tv/ustreamVideo/17916700/streams/live/playlist.m3u8 #EXTINF:0,Updated:8/15-C5N News http://c5n.stweb.tv:1935/c5n/live_media/sat.m3u8 #EXTINF:0,Updated:8/15-TVI 24 http://video-live.iol.pt:1935/live_tvi24/smil:LIVE_TVI24/chunklist_w272103575_b814000.m3u8
#EXTINF:-1,RCN Televisión de Colombia T-K
#EXTINF:-1,CANAL UNO COLOMBIA T-K
#EXTINF:-1,TELEANTIOQUIA HD T-K
#EXTINF:-1,CANAL CAPITAL T-K
#EXTINF:-1,CANAL U T-K
#EXTINF:-1,TV AGRO T-K
#EXTINF:-1,Cable Noticias T-K
#EXTINF:-1,El Tiempo T-K
#EXTINF:-1,UNE TV Manizales T-K
#EXTINF:-1,UNE TV CARIBE T-K
#EXTINF:-1,UNE TV ARMENIA T-K
#EXTINF:-1,TELE VIDA T-K
#EXTINF:-1,TRENDY MUSICA T-K
#EXTINF:-1,MIMUSICA HD T-K
#EXTINF:-1,TELE AMIGA T-K
#EXTINF:-1,TIGO MUSIC T-K
#EXTINF:-1,CANAL ONCE URUGUAY T-K
#EXTINF:-1,TV PUBLICA T-K
#EXTINF:-1,OCHO TV T-K
#EXTINF:-1,Tve 24h HD T-K
#EXTINF:-1,Foro TV T-K
#EXTINF:-1,Canal De Las Estrellas T-K
#EXTINF:-1,Canal De Las Estrellas T-K
#EXTINF:-1,Canal 7 T-K
Mtlfreetv addon has several must have addons built in to their arsenal. Below are just a few addons and apk for your Android Tv box. At the bottom the repo is listed if you want to add to your file manager with the steps to do so.
This new addon Dexter was just released for both Kodi and Isengard. Iy has premium channels channels like HBO, Cinemax and Showtime. Has an Bang Bang section along with live TV iptv xbmc. iptv section includes sports and other basic channels. Worth trying out but not sure if it is self-updating. I guess we will have to find out and see.
I believe it came from Soloman.
Here are the best adult addons for kodi Isengard. They just keep on cuming out the woodwork! To name a few Kodi adult addons: jav Stream, Wood Rocket,Likuoo, Ultimate white cream, Cherrypie, BeeG, Erotix, Videodevil, Tube8, Lubetube, Youjizz, Fantastic, Erotik, Empflix and I hope that is enough for you. There are a few more out there if you really need them.
Jav Stream Addon Wood Rocket Addon Likuoo Addon
Cherry Pie Ultimate White Cream Erotik
Fantastic.cc YouJizz Tube8
Links for download:
(Ptom)Includes: Jav Stream Addon Wood Rocket Addon Likuoo Addon
Ultimate white Cream Addon (UWC)
Here are a few downloads for the Black Kodi or Black Isengard Apk setup.
Another descent addon for live Tv for the arsenal. Iy has a nice selection of Sports, Movies , kids and regular Tv channels. To install just download from the Xunity repo. To install ALLTV.ch:
If you have the below xunity Talk repo, all you need to do is go into:
System, addons, Get addons, XunityTalk, Video addons and click to install.
or direct donwload Xunitalk repo: Download and go into
install From Zip and point it to download
Then, go into Get addons, Xunity talk, Video addons and click ALLTV.ch and install. Enjoy
NEW Update pushed for Gorilla Streams its now taken a different direction and is a modified version of sportsdevil/dragon streams. News from Stuart D.
Do a force refresh on your repos by going into system, addons, get addons, hit menu key and select force refresh. You will update all addons including the Gorilla Streams Addon. New options inside!
Inside Mucky Ducks repo: http://muckys.kodimediaportal.ml/
New update for the SportsDevil addon with more sources. Tons of sports from all over the world. Everything from Cricket, basketball, NFL,NBA, Volleyball,Soccer,Races and more. You now get more sites and links listed on the new SportsDevil update. this is one of the longest addons that xbmc kodi Isengard has running. It pulls from serveral sites like vipbox, Rojadirecta and many more. So get your fix today!!
Go into system
install From Zip
point it to the Sportsdevil zip.
Home media player software Kodi (formerly known as XBMC) has been found vulnerable to man-in-the-middle attacks that may jeopardize the security of home users, according to Bitdefender research.
Kodi is mostly used by those who want to build their own home media centers without investing in dedicated hardware or software. This open-source solution is compatible with a wide range of operating systems (Linux, OS X, Windows, iOS, and Android), and it’s the preferred choice for many enthusiasts.
Although Team Kodi, a group of volunteers located around the world, have successfully developed and maintained the software for years, we have analyzed Kodi from a security point of view and identified several attack scenarios based on man-in-the-middle attacks.
Team Kodi has been notified about the vulnerabilities found and they’re working on issuing patches. No time of release has been estimated.
Kodi features a set of add-ons that allows users to access popular services such as YouTube, Dropbox, Grooveshark, etc. Every time Kodi is launched, it automatically checks if installed add-ons have updates. When a new add-on version is found, it is automatically downloaded and installed. A pop-up notifies users that the add-on has been updated.
The add-on update check and communication is handled entirely over HTTP, with no encryption. Here’s the update process, step by step:
1. The software asks the md5 hash for the latest “addons.xml” file, containing information about add-ons, including their latest version numbers;
2. If the md5 of the latest “addons.xml” file is different than the one stored locally by Kodi, it requests the actual file;
3. The local versions of the installed add-ons are compared against the ones in the latest “addons.xml” file;
4. If a new version is available for an add-on, a request is made for the md5 of the latest add-on package;
5. The new add-on is downloaded, which consists of a zip archive containing Python modules and configuration xml files;
6. An md5 hash is obtained from the downloaded zip file and compared against the md5 received previously. If they match, the add-on is installed.
Because of the lack of encryption and authentication during the above process, an attacker who intercepts the network traffic can modify add-ons to execute code on the system Kodi is installed on. Specifically, when the request for the latest “addons.xml” md5 file is made, the attacker will send a random md5.
This doesn’t need to be the exact md5 hash for the file that will be sent, as it seems this is not verified. Afterwards, the attacker sends a crafted “addons.xml” file containing a higher version of a specific add-on he’s targeting. In the end, he will have to send the correct md5 hash for his add-on package and the actual zip archive with the malicious add-on. Once the add-on is installed, the attacker’s malicious Python code is executed.
On Windows, an attacker will have the same privileges as the user under which Kodi is running. We were able to download the executable and place it in the startup directory under the user with these privileges.
On OpenElec, (a Raspberry Pi Linux distribution with Kodi installed), we focused on retrieving sensitive user data. To this end, we modified the YouTube add-on to retrieve user credentials.
The official add-on uses the OAuth2 authentication method, meaning that no username or password need be entered into the add-on itself. We added a fake dialog to the add-on we sent – displayed at startup – asking the user to sign in with his YouTube credentials. The obtained credentials were sent to a remote site using a GET HTTP request.
Interestingly, although the legitimate YouTube add-on uses HTTPS for authentication, it doesn’t check if the certificate used for the communication is actually trusted. This can easily be observed when analyzing the add-ons code, as certificate validation is disabled.
All calls are made with “Verify=False”, meaning no certificate validation is triggered.
An attacker who intercepts network traffic can obtain the refresh token used for authenticating a device and, along with the client secret ID, which is hardcoded into the add-on, he can access content, such as private videos, from the user’s channel. This can be achieved without modifying any add-on – by only sniffing traffic. Because Kodi has its own Python package (the analyzed version has v2.7.8), other add-ons that don’t explicitly check the validity of the SSL certificate and rely only on checks made by utllib2 could be susceptible to this type of attack.
We have also modified the Dropbox add-on (Dbmc) so that each time the add-on is launched or it syncs files, it uploads all content from the local Dropbox directory to an FTP server of our choice. By default, the Dropbox add-on syncs only media files but, because the code can be modified, it can be forced to download all available files from the Dropbox account.
The problems described here rely on the lack of encryption and authentication when updating add-ons and not in the actual add-ons themselves. The lack of certificate validation in the YouTube add-on is an entirely different problem.
Our research has shown that not only a man-in-the-middle attack would be successful, but also that it doesn’t take impressive skills to pull it off. Implementing a secure communication channel for any application that connects through the internet to any server or marketplace should become a standard. Otherwise, any information passed back and forward could easily be tampered with by anyone eavesdropping.
The implications of the lack of encryption or strong authentication methods could potentially involve a complete takeover of the targeted machine or the loss of critical and sensitive user data (e.g. passwords, files).
Note: This article is based on technical information provided courtesy of Bogdan Timofte, Bitdefender Researcher.
Check out the new skin by ElSabio78. It has tons of features like iptv stalker working, USTVNOW fully working including a tv guide that uses both addons. WOW!! plus, it has the top addons and custom menus with cool background images. Cannot top this. Remember to leave any donation is appreciated as it is a lot of work for him. I already dropped a few dimes. Thanks ElSabio78
The just released Tkilla addon is a must have for the spanish speaking community. It brings you the latest movies and tv shows in spanish. It also has a nice selection of live tv channels. The channels are from all over the world. This means it also includes English speaking channels as well. Definetly a must have. Take a look for yourself and download the addon below. http://adf.ly/1M6nzV
Cartoon HD Extra addon resurfaces once again after being dropped for several months. The great cartoon, Movie and TV show addon is working very real and we are thankful that it was brought back.
It is very easy to setup:
-Select SYSTEm > File Manager
-Select Add Source
-Click on none
Here type exactly : http://xunitytalk.com/xfinity/
-Enter Name: .Xunity
Return back to kodi home screen
Now click system
Install from Zip
Point it to where you save the file
Once installed go back into “Get Addons”
At the top you will see .xunity (or whatever you named it)
click videos and look for cartoon HD Extra.
Apple TV 2 has been Officially Dropped by Kodi. The workhorse that it was has now come to a dead end. The makers of xbmc/kodi explain that the hardware is very old and how they had stopped making fixes back when Frodo was released. The Apple TV 2 was an awesome box and it is understandable why it was dropped, since their is no Jailbreak for the Apple TV 3. Here is what Kodi.TV had to say:
As the current maintainer of the AppleTV2 platform for Kodi, I wanted you to know that I have decided to stop official support for it. I know that the fact that XBMC/Kodi runs on Apple’s black puck has been the main reason for buying one for many people, but it has become a dead end for Kodi.
If you are currently using an AppleTV2 for Kodi, you may already have realised how the quality of the XBMC/Kodi experience has degraded on the device since the release of Frodo. The HD playback is unstable and liable to crash the device, and the overall performance is beginning to fall behind other platforms which are based on more recent hardware. From a developer’s point of view the AppleTV2 is a major challenge because Apple never released any Software Development Kit for it. The fact that XBMC/Kodi has ever been able to run on it is a testament to the countless hours of hacking by Scott Davilla and Edgar Huceke. I want to personally give a big thanks to both of them for all they have done with the box. Without this work XBMC/Kodi would never have been able to support the iOS platform at all, and yet today it remains alive and well on numerous tablets and phones.
Maintaining the AppleTV2 for XBMC/Kodi became more and more demanding each time Apple decided to update the AppleTV2′s iOS Version. The big bang was iOS6 where I had to rewrite a substantial amount of the AppleTV2 specific code to do runtime hooking, an obscure means of adding functionality to iOS that Apple never intended iOS to have, because Apple made it even more obvious that they didn’t want 3rd party apps to be run on the black box by removing the private Framework which all our work previously relied upon. There are no tools to work for this platform – most of the work can only be done by trial and error and carefully watching log files. That’s not the way sane development works in 2015 anymore.
All in all I am sadly not able to restore the stability of Frodo in the current Kodi versions. The memory of the AppleTV2 is limited to 256MB and each time Apple decides to push a new app to it (like Netflix) there is less free memory for us. Also there is a lot of new code hitting our mainline tree daily and it’s almost impossible to keep an eye on its influences to this closed platform.
This virtual impossibility of maintaining stability while introducing new features and other refactors demanded by technological progress is why we will now stop building our code for this platform.