VRChat added VRCA (?maybe VRCW too) protection
-
Another request for https://vrchat.com/home/avatar/avtr_207260b6-0828-42ea-8218-94b7a32bb5aa if anyone could help
-
here my research i been doing so far
so every unencrypted file of vrca or vrcw they contain unityFS version like this
UnityFS 5.x.x 2022.3.22f1
while encrypted or game contains
UnityFS 5.x.x 2022.3.22f1-DWR
i do not know what DWR for but it could be a clue, every unencrypted today contain like BuildPlayer-(world name here).sharedAssets and for avatar file they contain CAB-(number letters here), which readable in assetripper
while encrypted has none and has bunch of @@@@@@@@@@ spam at the end of every vrca-vrcw file, i look dll files, inspecting any clue i found they use AES-CBC-GCM-SHA256 kind of encryption in game dll, try to look into game data so far i only been looking into the GameAssembly.dll and PhotonEncryptorPlugin.dll and other dll i may forgot when looking into thempost mentions of game encrypt in unity
https://discussions.unity.com/t/how-would-you-secure-an-encryption-key-in-the-client/640245/36document of encryption
https://docs.unity3d.com/Packages/[email protected]/manual/encrypt-a-model.htmlidea i have are either the assets being streamed in something in our machine or they are stored somewhere as .sharedAssets, i am not sure if this will help someone in the future of getting unencrypted file including private avatar, hope it helps
-
Abyss has been dead for a while. At this point, HEX is the only one that still works and bypasses EAC properly.
Currently, I can still extract models using the Abyss client.
-
@Linze for method 1, you need the SSL thing, which only can be decrypt on wireshark, but vrchat has detection and debug off for those, the only way to get it by MITM or something, based of my old research, the log i have in the archive contain the said SSL and handshakes, but we need the decrypt key that can be obtain through SSLKEYLOG, again the key does not generate on games, only browser with debug on by default, as for MITM i have not tested it when i decide to stop my research, due to lack of device and tech
Note, vrchat on the wireshark will constantly spam something around 0.5 millisecond at the same time, so getting it would be thoroughly hard or impossible
-
K Kleiner referenced this topic on
-
Sooo, last time I ripped an Avatar was in August 2024.
Currently we're almost in 2026, still no actual feasible way to decrypt? I have some interesting things on cache with that _data format that I would like to extract. Please!
🥺 -
i think i have went into every ripping method that was easily feasible on my own from cashe ripping, SARS, ARC, and even reading this whole thread in the pursuit to get the files to one vrc avi, and the question i have from all of this is, is ripping dead now?
-
i think i have went into every ripping method that was easily feasible on my own from cashe ripping, SARS, ARC, and even reading this whole thread in the pursuit to get the files to one vrc avi, and the question i have from all of this is, is ripping dead now?
@SillyBoober69 no lmao
-
@SillyBoober69 no lmao
@agent287 ig i gotta learn more then bc idk how to rip what i want at this point, id prob be better off finding someone else that has the knowledge on how to do so
-
there is a free option for ripping, from a discord server if you want a link to it let me know
-
there is a free option for ripping, from a discord server if you want a link to it let me know
@Ibark4him2 ill take the link in dms
-
There are some articles discussing about them:
https://reshax.com/topic/18635-pc-vrchat-__data-files/#comment-102067
https://github.com/Escartem/AnimeStudio/issues/32 -
there is a free option for ripping, from a discord server if you want a link to it let me know
@Ibark4him2 any shot you would be willing to share the discord? Methods for any of this seem so scarce now.. would very much appreciate it!
-
there is a free option for ripping, from a discord server if you want a link to it let me know
@Ibark4him2 send me link in DM
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login