VRChat added VRCA (?maybe VRCW too) protection

[AkkoTheFish]

thats my friends personal model and there not giving that one out

[AG420]

If anyone can find the VRCA or original model of https://vrchat.com/home/avatar/avtr_e3f4aa12-2144-4d4d-b56c-c8f8507aa680 I'll be incredibly grateful, since the original is lost media to my knowledge.

[xedinho]

@Basya heres the vrca
[register or login to view this hidden content]

[Myong]

Is there any lurkers here willing to get some VRCAs for me w/o me needing to add them on discord through this sites message function or something? if so DM me

[nonohun]

merp

[Hardware98]

I'd like a few worlds ripped if ripping worlds is still possible. Tried the old way of getting it via cache, no dice
.

[agent287]

This post is deleted!

[Hardware98]

@agent287 I just need like 3, I really don't feel like getting my discord logged. If anyone's willing to offer here that'd be dope.

[jaxoy]

@nonohun are you able to decrypt smth for me too or?

[Alisan]

I been wondering that too. Even if some methods are being kept hidden, has decrypting become possible or is everyone just doing the "rip before decryption"?

[tokimekitiara]

@Alisan People are hiding behind paid for services.

[Alisan]

@teapotts I understand that too. Just curious if decrypting has also become possible

[tokimekitiara]

@Alisan As far as I know, not yet. VRchat moderators have used a custom key that no one has access to but them.

[Daito1234]

I was able to get unencrypted vrcw files but only through a very buggy method (no avatar loading(I wish brother)). This confirms at least for me that NO SERVER SIDE ENCRYPTION is happening.

[Reym]

@Daito1234 what buggy method?

[AA_Raiden_MK]

Still waiting for answers about the buggy method. Also, encrypted files do nothing but cause problems in VRChat.

[Linze]

This post is deleted!

[edenware]

@Linze i don't think so, just off a glance it doesn't import any crypto libraries. after some further investigation its definitely just for encoding media stuff.

i have a full dma set up and i could get started poking around the game to try to find something useful, but i figured id look around here first. i mean if i can just grab vrca's from memory that would be pretty sick. it seems like most of the stuff from gameassembly is encrypted but i have found a few things like the avatarmanager and the player objects, im just not sure what to make of it all. if anyone has any advice of what to be looking for that would be great.

[Reym]

here my research i been doing so far
so every unencrypted file of vrca or vrcw they contain unityFS version like this
UnityFS 5.x.x 2022.3.22f1
while encrypted or game contains
UnityFS 5.x.x 2022.3.22f1-DWR
i do not know what DWR for but it could be a clue, every unencrypted today contain like BuildPlayer-(world name here).sharedAssets and for avatar file they contain CAB-(number letters here), which readable in assetripper
while encrypted has none and has bunch of @@@@@@@@@@ spam at the end of every vrca-vrcw file, i look dll files, inspecting any clue i found they use AES-CBC-GCM-SHA256 kind of encryption in game dll, try to look into game data so far i only been looking into the GameAssembly.dll and PhotonEncryptorPlugin.dll and other dll i may forgot when looking into them

post mentions of game encrypt in unity
https://discussions.unity.com/t/how-would-you-secure-an-encryption-key-in-the-client/640245/36

document of encryption
https://docs.unity3d.com/Packages/[email protected]/manual/encrypt-a-model.html

idea i have are either the assets being streamed in something in our machine or they are stored somewhere as .sharedAssets, i am not sure if this will help someone in the future of getting unencrypted file including private avatar, hope it helps

[edenware]

@Reym is it just encrypted while in game and in your filesystem? if you can just grab the vrca asset url and its unencrypted then profit?