VRChat added VRCA (?maybe VRCW too) protection
-
Sitting here reading this thread is honestly hilarious. AES-CBC-GCM-SHA256? PKCS#7 padding?
You guys are overcomplicating everything and looking in completely the wrong places.- Forget trying to decompile GameAssembly.dll or sniffing packets. The 'true form' doing the heavy lifting Native, not managed C# code. If you know, you know.
- The decryption key isn't sent by the server every time you load a world, avis. It's client-side and tied to your machine. Dump it once from memory and you're good.
- Keep wasting time trying to guess the Associated Data (AD) for GCM. Spoiler: there isn't any. It's raw.
- And here is why your attempts to decrypt it and drop it into AssetStudio end up with Corrupted or Truncated errors: VRChat fakes the file size in the UnityFS Header AND inflates the BlockInfo metadata at the end of the file to account for the AES block overhead. If you don't mathematically reverse their metadata patching, Unity will never load your raw decrypted data. Good luck figuring out the exact formula.
Anyway, I’ve successfully written a fully working offline decryptor and bulk-dumped what I wanted, but I’ve quit playing VRChat and I’m moving on from this scene. I'm not dropping the source code here. If you're serious about getting the working method or the tool, find a way to contact me. Otherwise, have fun guessing
-
Sitting here reading this thread is honestly hilarious. AES-CBC-GCM-SHA256? PKCS#7 padding?
You guys are overcomplicating everything and looking in completely the wrong places.- Forget trying to decompile GameAssembly.dll or sniffing packets. The 'true form' doing the heavy lifting Native, not managed C# code. If you know, you know.
- The decryption key isn't sent by the server every time you load a world, avis. It's client-side and tied to your machine. Dump it once from memory and you're good.
- Keep wasting time trying to guess the Associated Data (AD) for GCM. Spoiler: there isn't any. It's raw.
- And here is why your attempts to decrypt it and drop it into AssetStudio end up with Corrupted or Truncated errors: VRChat fakes the file size in the UnityFS Header AND inflates the BlockInfo metadata at the end of the file to account for the AES block overhead. If you don't mathematically reverse their metadata patching, Unity will never load your raw decrypted data. Good luck figuring out the exact formula.
Anyway, I’ve successfully written a fully working offline decryptor and bulk-dumped what I wanted, but I’ve quit playing VRChat and I’m moving on from this scene. I'm not dropping the source code here. If you're serious about getting the working method or the tool, find a way to contact me. Otherwise, have fun guessing
-
@daswdas https://github.com/VRC1337/VRChatStudio I think I saw your username somerwhere, But can't remember.
what about this? -
@daswdas
The program looks promising cus I am patient for one by one steps, but the encryptionKey part got me stuck. Do you have a method of getting that? -
@Alisan https://streamable.com/ty43kf
So many downvotes, and people are even calling me fake. I tried so hard to give hints about what to do, but I just like to hold back that's all@daswdas I think the problem is that you are in a way gate keeping a method you have discovered, instead of contributing to the community. You essentially said, "Hey hi, I have a working method to extract the files, but I am not going to share with you how to do it."
Its just a big look at me situation saying I have what everyone has been working to try and figure out.
-
that's probably the case, but I did give hints on how to do it I just didn't drop it in the thread, that's all. I'm only willing to share it privately
@daswdas Since you are at least willing to share your method privately, are you willing to explain to me how you do that in a DM?
I am by far no expert when it comes to these types of things, but if you can explain to me how you are achieving this then I will be able to figure things out a bit as I can still follow and understand a lot of what is happening, and capable of learning. -
-
can some one rip these avatar's for me? https://vrchat.com/home/avatar/avtr_723045f0-c464-4f06-be83-8b20052a27ef https://vrchat.com/home/avatar/avtr_88236f61-fcd8-42ee-8e14-2462a602dd73 https://vrchat.com/home/avatar/avtr_fd3ed848-0268-40ad-b92f-22470498485b i would love if some one could
-
@Dr.beep You do be speakin fax, i dont care whether its "public" or "personal" if i want it, imma get it.
@NewbKid Good luck with that lols
-
Thank you for doing this. is it possible to get a privated avi? https://vrchat.com/home/avatar/avtr_5412660f-f411-44c5-b8c4-3fdcbffefd03
-
@firms not from the api like that, to get private avatars you have to be in the lobby with the person who is wearing it
-
@bankwrupt thank you
-
Could someone rip this avatar if possible? I love all the toggles and emotes! https://vrchat.com/home/avatar/avtr_54cdcce4-e7c0-4854-a4cd-e2d113a78d28
-
that's probably the case, but I did give hints on how to do it I just didn't drop it in the thread, that's all. I'm only willing to share it privately
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login