Understanding VRChat Cache Encryption
-
I'm not going to teach you how to use it, good luck with that.
Download Link (workupload.com)Next: 150 upvotes for the full source code and a study guide on how it works under the hood
@daswdas why not send the source code for what you already compiled instead of this exe. Hard to trust the exe rn, id rather compile it myself after iv confirmed here is no malicious code running in it that can harm my pc or steal shit. you have been a lil quiet since people have been pointing out it that may contain unwanted code in it.
-
This article written in Chinese explained how the game handle encrypted assets. Shouldn't be that hard to decrypt them. May give us a hint. https://linux.do/t/topic/1312391
@En1gma alright so i looked through it with google translate, i have no clue what they're talking about, that's in the realm of coding stuff.
I did see il2cpp mentioned in the decryption process so if anyone wants to take a crack at it heres the "obfuscated" exports list https://pastebin.com/T2d4Xia2
-
@daswdas why not send the source code for what you already compiled instead of this exe. Hard to trust the exe rn, id rather compile it myself after iv confirmed here is no malicious code running in it that can harm my pc or steal shit. you have been a lil quiet since people have been pointing out it that may contain unwanted code in it.
why not send the source code for what you already compiled instead of this exe. Hard to trust the exe rn, id rather compile it myself after iv confirmed here is no malicious code running in it that can harm my pc or steal shit. you have been a lil quiet since people have been pointing out it that may contain unwanted code in it.
If you don't trust it, then don't use it. I don't care. I just came to drop it. I never wanted to be some kind of god in this thread. Either way, go figure out how to dump from libsodium.dll yourselves. I don't come to the ripper store that often, that's all. And I went quiet β don't act stupid about it
-
Here, take the source code. And I'm done giving out stuff or getting involved anymore. Goodbye. If anyone builds it and it still flags as a trojan, just read the source code yourself and figure out why you idiots. I told you from the start that I'm done with this game. So take it. I won't be releasing anything else anymore. This one is just from where I originally started, everything I've worked on I just added imgui to give to you guys, that's all. That's why it looked like something new
-
Here, take the source code. And I'm done giving out stuff or getting involved anymore. Goodbye. If anyone builds it and it still flags as a trojan, just read the source code yourself and figure out why you idiots. I told you from the start that I'm done with this game. So take it. I won't be releasing anything else anymore. This one is just from where I originally started, everything I've worked on I just added imgui to give to you guys, that's all. That's why it looked like something new
Here, take the source code. And I'm done giving out stuff or getting involved anymore. Goodbye. If anyone builds it and it still flags as a trojan, just read the source code yourself and figure out why you idiots. I told you from the start that I'm done with this game. So take it. I won't be releasing anything else anymore. This one is just from where I originally started, everything I've worked on I just added imgui to give to you guys, that's all. That's why it looked like something new
We thank you for the source. And sorry about the frustration. But consider it from our perspective, I have tools and bots for CSGO, Pokemon, LOL, Overwatch ext. If I just sent you a folder with exes in it would you trust me and just run it? Or would you throw it in virus total before running it and see a big ass trojan redflag and be apprehensive.
-
VRChat protects its downloaded content by storing it as encrypted cache files on your local drive. When you load a world or an avatar, the game downloads the data and immediately scrambles it using strong encryption.
The unique keys required to unscramble this data are generated dynamically and held only temporarily within the game's active memory while the item is actively loading. Because of this security measure, simply copying the cached files from your hard drive is completely useless. Unless you extract the specific memory key while the game is running and apply the exact decryption formula, those files remain entirely unreadable garbage.
I have developed a custom solution that captures these live memory keys and perfectly reconstructs the original, unencrypted files.
Originally, I was considering setting up a donation goal for the full release. To be completely honest, though, I am pretty annoyed by the amount of people in this community who are just hungry for free handouts and beg for tools without ever contributing anything of value. Because of that, I am completely changing how I release this
[ Release Goal: 50 Upvotes ]
If this post reaches 50 upvotes, I will publicly release the base version of my decryptor for you guys to play around with. This version successfully extracts keys and decrypts your cache files, but it strictly requires VRChat to be launched with Easy Anti-Cheat disabled (EAC Disabled)As for the advanced version that can safely extract live keys and decrypt files while the game is running normally with EAC fully enabled... I am going to hold onto it and think about it for a while. I have no intention of spoon-feeding a premium, fully working bypass to people who just want to leech. I will see what the feedback is like on the base version first before I decide if I am ever going to release the full bypass
Drop an upvote if you want to try the base version. Once it hits the goal, I will drop in here
-
Here, take the source code. And I'm done giving out stuff or getting involved anymore. Goodbye. If anyone builds it and it still flags as a trojan, just read the source code yourself and figure out why you idiots. I told you from the start that I'm done with this game. So take it. I won't be releasing anything else anymore. This one is just from where I originally started, everything I've worked on I just added imgui to give to you guys, that's all. That's why it looked like something new
-
@ripton Doesn't look like they'll be back
-
@dobyp there probably isnt a point lol, the one he released "decrypted" shit that was never encrypted in the first place. this whole thing was probably just something for upvotes bc he was flagged and didnt like it
-
Well I'm hoping someone figures it out I was even considering paying for an program that decrypts the files I just want to be able to what er all used to be able to do until this dumb encryption update. I just know nothing about any of this stuff.
-
yo my friend made a working ripper, if you'd like some more details such as how to get it, dm me on discord.
it as of now successfully captures and decrypts vrca's, vrcw's, and vrcp's
( yes it costs money im sorry )sorry about that, but after the first person tried to buy it we realized his payment handler (stripe) decided to fuck him over and like not give him his money. so until around mid April comes (which is when he is able to resolve that issue), no ripper.
we are looking towards a possible temporary solution, but that may not come. -
yo my friend made a working ripper, if you'd like some more details such as how to get it, dm me on discord.
it as of now successfully captures and decrypts vrca's, vrcw's, and vrcp's
( yes it costs money im sorry )sorry about that, but after the first person tried to buy it we realized his payment handler (stripe) decided to fuck him over and like not give him his money. so until around mid April comes (which is when he is able to resolve that issue), no ripper.
we are looking towards a possible temporary solution, but that may not come.@agent287
how match?(price)In Japan, users and creators tend to place strong importance on manners and community norms, and they often try to encourage people to legitimately purchase avatars, outfits, and other items on BOOTH. When they learn that assets are being shared illegally, they tend to form a common enemy and attempt to impose social sanctions.
Because of that, sites that distribute assets like the ones here are extremely valuable to me, and the idea of going out of my way to purchase them feels completely ridiculous.
Just like in Grand Theft Auto V, letβs steal the assets, throw them into a duffel bag, and share them with the people who want them.
In particular, when playing VRC, you should be careful about entering worlds that have a large number of Japanese users.
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better π
Register Login