Understanding VRChat Cache Encryption
-
@daswdas wait so ur telling me that the only avatars the program you released gets are the public ones found in (insert drive name):\Steam\steamapps\common\VRChat\VRChat_Data\StreamingAssets\Avatars that are unencrypted, and your own avatars which you can get your encryption key from the json of vrcx
-
biggest trojan psyop ever, buddy just released a compiled flagged .exe file just to "decrypt" already decrypted avatars and people be falling for it lmao.
-
@B_Bread1 my antivirus didnt have to do anything yo my browsers wouldnt let me download it at all
-
I'm not going to teach you how to use it, good luck with that.
Download Link (workupload.com)Next: 150 upvotes for the full source code and a study guide on how it works under the hood
@daswdas why not send the source code for what you already compiled instead of this exe. Hard to trust the exe rn, id rather compile it myself after iv confirmed here is no malicious code running in it that can harm my pc or steal shit. you have been a lil quiet since people have been pointing out it that may contain unwanted code in it.
-
This article written in Chinese explained how the game handle encrypted assets. Shouldn't be that hard to decrypt them. May give us a hint. https://linux.do/t/topic/1312391
@En1gma alright so i looked through it with google translate, i have no clue what they're talking about, that's in the realm of coding stuff.
I did see il2cpp mentioned in the decryption process so if anyone wants to take a crack at it heres the "obfuscated" exports list https://pastebin.com/T2d4Xia2
-
@daswdas why not send the source code for what you already compiled instead of this exe. Hard to trust the exe rn, id rather compile it myself after iv confirmed here is no malicious code running in it that can harm my pc or steal shit. you have been a lil quiet since people have been pointing out it that may contain unwanted code in it.
why not send the source code for what you already compiled instead of this exe. Hard to trust the exe rn, id rather compile it myself after iv confirmed here is no malicious code running in it that can harm my pc or steal shit. you have been a lil quiet since people have been pointing out it that may contain unwanted code in it.
If you don't trust it, then don't use it. I don't care. I just came to drop it. I never wanted to be some kind of god in this thread. Either way, go figure out how to dump from libsodium.dll yourselves. I don't come to the ripper store that often, that's all. And I went quiet — don't act stupid about it
-
Here, take the source code. And I'm done giving out stuff or getting involved anymore. Goodbye. If anyone builds it and it still flags as a trojan, just read the source code yourself and figure out why you idiots. I told you from the start that I'm done with this game. So take it. I won't be releasing anything else anymore. This one is just from where I originally started, everything I've worked on I just added imgui to give to you guys, that's all. That's why it looked like something new
-
Here, take the source code. And I'm done giving out stuff or getting involved anymore. Goodbye. If anyone builds it and it still flags as a trojan, just read the source code yourself and figure out why you idiots. I told you from the start that I'm done with this game. So take it. I won't be releasing anything else anymore. This one is just from where I originally started, everything I've worked on I just added imgui to give to you guys, that's all. That's why it looked like something new
Here, take the source code. And I'm done giving out stuff or getting involved anymore. Goodbye. If anyone builds it and it still flags as a trojan, just read the source code yourself and figure out why you idiots. I told you from the start that I'm done with this game. So take it. I won't be releasing anything else anymore. This one is just from where I originally started, everything I've worked on I just added imgui to give to you guys, that's all. That's why it looked like something new
We thank you for the source. And sorry about the frustration. But consider it from our perspective, I have tools and bots for CSGO, Pokemon, LOL, Overwatch ext. If I just sent you a folder with exes in it would you trust me and just run it? Or would you throw it in virus total before running it and see a big ass trojan redflag and be apprehensive.
-
VRChat protects its downloaded content by storing it as encrypted cache files on your local drive. When you load a world or an avatar, the game downloads the data and immediately scrambles it using strong encryption.
The unique keys required to unscramble this data are generated dynamically and held only temporarily within the game's active memory while the item is actively loading. Because of this security measure, simply copying the cached files from your hard drive is completely useless. Unless you extract the specific memory key while the game is running and apply the exact decryption formula, those files remain entirely unreadable garbage.
I have developed a custom solution that captures these live memory keys and perfectly reconstructs the original, unencrypted files.
Originally, I was considering setting up a donation goal for the full release. To be completely honest, though, I am pretty annoyed by the amount of people in this community who are just hungry for free handouts and beg for tools without ever contributing anything of value. Because of that, I am completely changing how I release this
[ Release Goal: 50 Upvotes ]
If this post reaches 50 upvotes, I will publicly release the base version of my decryptor for you guys to play around with. This version successfully extracts keys and decrypts your cache files, but it strictly requires VRChat to be launched with Easy Anti-Cheat disabled (EAC Disabled)As for the advanced version that can safely extract live keys and decrypt files while the game is running normally with EAC fully enabled... I am going to hold onto it and think about it for a while. I have no intention of spoon-feeding a premium, fully working bypass to people who just want to leech. I will see what the feedback is like on the base version first before I decide if I am ever going to release the full bypass
Drop an upvote if you want to try the base version. Once it hits the goal, I will drop in here
-
Here, take the source code. And I'm done giving out stuff or getting involved anymore. Goodbye. If anyone builds it and it still flags as a trojan, just read the source code yourself and figure out why you idiots. I told you from the start that I'm done with this game. So take it. I won't be releasing anything else anymore. This one is just from where I originally started, everything I've worked on I just added imgui to give to you guys, that's all. That's why it looked like something new
-
@ripton Doesn't look like they'll be back
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login