Understanding VRChat Cache Encryption
-
D daswdas referenced this topic on
-
Bump and upvoted. Keep fighting the good fight!
I don't want to sound like that kind of person, but I'd sure love to know how you cracked VRC's asset encryption. Isn't it AES-256 or something complex like that? -
wow cool..
two, your PP is blowing my mind LOL -
What's the chances they change the encryption scheme once a noob friendly tool is available. And honestly how much farther can they go to try and secure the files.(I can think of a few ways) If EAC is anything like the other anticheats out there once a hash for a tool is identified it can just refuse to run while that known exe is in the process list. The way we got around that with VAC back in the day was loading another processes suspended, carving it out with RunPE. Then connecting to a randomised port that acted as a serial on another device to hook and read remotely.
-
@pendatron
You're exactly right about the caching behavior when EAC is disabled. That's precisely why this "base version" I'm releasing at 50 upvotes will only work for avatars you own or the public official ones. It strictly requires VRChat to be launched with EAC disabled.As for your method, hooking CreateCached_Injected to null the key is a classic way to stop the encryption from happening. But my tool takes a different route. Instead of preventing the cache encryption from the start, I hook directly into... well, let's just say I dynamically dump the live keys straight from memory as the game naturally decrypts the blocks.
I'm still holding onto the advanced version that safely extracts keys while the game is running normally with EAC fully loaded. I want to see the feedback on the base version first before deciding if I'll ever release the full bypass.
Let's hit that 50 upvotes goal first and I'll drop the base version
-
Bump
-
can you release the version with bypass and make it paid
-
can you release the version with bypass and make it paid
@Petite-Biscotte
I honestly don't really want to deal with setting up a login system or anti-crack protections. My current idea is to either just release it completely for free, or maybe set a donation goal and drop it once that's met.Plus, everyone here on Ripper shares everything anyway. Rather than waiting for someone else to inevitably leak it, I figure it's probably better to just release it myself directly. But anyway, I'll wait and see the feedback first. Who knows, if I just drop the base version, someone else might pick it up, improve on the rest, and share it anyway
-
@Petite-Biscotte
I honestly don't really want to deal with setting up a login system or anti-crack protections. My current idea is to either just release it completely for free, or maybe set a donation goal and drop it once that's met.Plus, everyone here on Ripper shares everything anyway. Rather than waiting for someone else to inevitably leak it, I figure it's probably better to just release it myself directly. But anyway, I'll wait and see the feedback first. Who knows, if I just drop the base version, someone else might pick it up, improve on the rest, and share it anyway
-
can some one rip these avatar's for me? https://vrchat.com/home/avatar/avtr_723045f0-c464-4f06-be83-8b20052a27ef https://vrchat.com/home/avatar/avtr_88236f61-fcd8-42ee-8e14-2462a602dd73 https://vrchat.com/home/avatar/avtr_fd3ed848-0268-40ad-b92f-22470498485b i would love if some one could
-
@pendatron thank you for the explanation. How does one inject / hook to VRC without setting off EAC? I've been reluctant to do anything related to messing with the process itself.
-
interesting way of getting something patched, might as well just tell the vrchat developers how you bypass encryption
-
Only a few upvotes left before the public drop. Here's a little teaser for the ones waiting: https://streamable.com/37nx1q I might drop the full Source Code or the EAC Fully-Loaded bypass later. Still deciding how many upvotes those two are worth. Also, is dropping a donation link against the rules here?
-
I mean, I could try to buy the full version. Maybe.
-
Only a few upvotes left before the public drop. Here's a little teaser for the ones waiting: https://streamable.com/37nx1q I might drop the full Source Code or the EAC Fully-Loaded bypass later. Still deciding how many upvotes those two are worth. Also, is dropping a donation link against the rules here?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better π
Register Login