VRChat added VRCA (?maybe VRCW too) protection
-
This post is deleted!
-
[[topic:post-is-deleted]]
@StinkerGuy115 Good one. But I doubt eventually it will shutdown. This reminds me of what VRCPirate does in past, they shutdown their avatar downloader because VRChat staff trapped their bot accounts.
I'm not profressional technician, leave your own mind, original sentences "the bot grabs the avatar info from vrchat server anyway, they can easily catch you up by manually use your bot and put an invalid/trap avatar id" -
Well just adding in that i logged into vrchat and i see "The security checks on this avatar have failed and it cannot be selected." Either its a bug cause their servers have been doing down and theyre trying to implement the new market place...or vrchat might be killing off some models who knows.
Im leaning to it being a bug im just putting this issue out here for people who future google this issue.
-
hope we can find a work around..
-
@qwwee Only "bypass" that's known is having a modified client. People around say you can just "intercept" the model during the download process. Its been confirmed here and on other places, as well as recently on a VRChat forum.
https://feedback.vrchat.com/bug-reports/p/the-new-vrca-client-side-encryption-can-still-be-bypassed
-
I am hesitant at sharing what I know as I am sure the devs watch these forums but I assume it is safe to at least share this:
-
everything must be decrypted before it get's passed to the Unity Engine. Otherwise it is just gibberish. Find out the functions/classes called or the memory address space used for the byte stream and bam you got it.
-
VRChat must use a fast encryption/decryption (vrc_fast_crypto.dll ???) method otherwise players would notice a lot of lag when loading models. Fast methods tend to mean less secure methods.
2a. Think about it, the model is downloaded unencrypted for a reason, to just download an unencrypted model then encrypt it then decrypt it is slow, this leads me to one conclusion: its for the Unity Engine. The encryption is just for your local cache, this allows for fast rendering and prevention of lag. In a hex editor, compare the __data file that is stored in the Unity/Temp folder that gets immediately deleted vs the __data file in the VRChat/Cache folder. You'll notice something
-
-
This post is deleted!
-
I am hesitant at sharing what I know as I am sure the devs watch these forums but I assume it is safe to at least share this:
-
everything must be decrypted before it get's passed to the Unity Engine. Otherwise it is just gibberish. Find out the functions/classes called or the memory address space used for the byte stream and bam you got it.
-
VRChat must use a fast encryption/decryption (vrc_fast_crypto.dll ???) method otherwise players would notice a lot of lag when loading models. Fast methods tend to mean less secure methods.
2a. Think about it, the model is downloaded unencrypted for a reason, to just download an unencrypted model then encrypt it then decrypt it is slow, this leads me to one conclusion: its for the Unity Engine. The encryption is just for your local cache, this allows for fast rendering and prevention of lag. In a hex editor, compare the __data file that is stored in the Unity/Temp folder that gets immediately deleted vs the __data file in the VRChat/Cache folder. You'll notice something
This post is deleted! -
-
This post is deleted!
-
@qwwee Only "bypass" that's known is having a modified client. People around say you can just "intercept" the model during the download process. Its been confirmed here and on other places, as well as recently on a VRChat forum.
https://feedback.vrchat.com/bug-reports/p/the-new-vrca-client-side-encryption-can-still-be-bypassed
@StinkerGuy115 I would like to add you on Discord to learn more details, if thatβs alright with you.
-
Oh my I did not realize I got this popular >A< dang. Yes I figured out how to rip models again. No I am not telling you how to do it (devs are lurking).
I might make a thread so people can request avatar vrca files by putting an avatar ID and i put the vrca out, but then that might get me into a lotta trouble sharing around avatars vrchat sells lol. I will think about it. I dont rip to redistribute assets or make a profit, I do it cause I like tinkering with stuff and it helped me learn how to make avatars.
I was motivated to do it again cause theres so many broken models on vrchat that I fix up/improve and upload to my account. I spent years learning unity, the VRChatSDK, and other computer junk to do what I do lol.
AND IM NOT GIVING PEOPLE MY DISCORD I DONT KNOW YOU PEOPLE
-
Oh my I did not realize I got this popular >A< dang. Yes I figured out how to rip models again. No I am not telling you how to do it (devs are lurking).
I might make a thread so people can request avatar vrca files by putting an avatar ID and i put the vrca out, but then that might get me into a lotta trouble sharing around avatars vrchat sells lol. I will think about it. I dont rip to redistribute assets or make a profit, I do it cause I like tinkering with stuff and it helped me learn how to make avatars.
I was motivated to do it again cause theres so many broken models on vrchat that I fix up/improve and upload to my account. I spent years learning unity, the VRChatSDK, and other computer junk to do what I do lol.
AND IM NOT GIVING PEOPLE MY DISCORD I DONT KNOW YOU PEOPLE
@StinkerGuy115 you mentioned avi ID, does that mean you are able to do it while not in the same place ingame?
-
I am hesitant at sharing what I know as I am sure the devs watch these forums but I assume it is safe to at least share this:
-
everything must be decrypted before it get's passed to the Unity Engine. Otherwise it is just gibberish. Find out the functions/classes called or the memory address space used for the byte stream and bam you got it.
-
VRChat must use a fast encryption/decryption (vrc_fast_crypto.dll ???) method otherwise players would notice a lot of lag when loading models. Fast methods tend to mean less secure methods.
2a. Think about it, the model is downloaded unencrypted for a reason, to just download an unencrypted model then encrypt it then decrypt it is slow, this leads me to one conclusion: its for the Unity Engine. The encryption is just for your local cache, this allows for fast rendering and prevention of lag. In a hex editor, compare the __data file that is stored in the Unity/Temp folder that gets immediately deleted vs the __data file in the VRChat/Cache folder. You'll notice something
@StinkerGuy115 i believe in unity/temp they also get encrypted same like vrchat/cache folder? i know what you mean but i do not see any difference
-
-
Oh my I did not realize I got this popular >A< dang. Yes I figured out how to rip models again. No I am not telling you how to do it (devs are lurking).
I might make a thread so people can request avatar vrca files by putting an avatar ID and i put the vrca out, but then that might get me into a lotta trouble sharing around avatars vrchat sells lol. I will think about it. I dont rip to redistribute assets or make a profit, I do it cause I like tinkering with stuff and it helped me learn how to make avatars.
I was motivated to do it again cause theres so many broken models on vrchat that I fix up/improve and upload to my account. I spent years learning unity, the VRChatSDK, and other computer junk to do what I do lol.
AND IM NOT GIVING PEOPLE MY DISCORD I DONT KNOW YOU PEOPLE
-
Oh my I did not realize I got this popular >A< dang. Yes I figured out how to rip models again. No I am not telling you how to do it (devs are lurking).
I might make a thread so people can request avatar vrca files by putting an avatar ID and i put the vrca out, but then that might get me into a lotta trouble sharing around avatars vrchat sells lol. I will think about it. I dont rip to redistribute assets or make a profit, I do it cause I like tinkering with stuff and it helped me learn how to make avatars.
I was motivated to do it again cause theres so many broken models on vrchat that I fix up/improve and upload to my account. I spent years learning unity, the VRChatSDK, and other computer junk to do what I do lol.
AND IM NOT GIVING PEOPLE MY DISCORD I DONT KNOW YOU PEOPLE
@StinkerGuy115 Can you share some ideas rather than some certain methods about how to get the vrca files? I mean I tried wireshark and memory dump, both of them didn't work.
-
@StinkerGuy115 Can you share some ideas rather than some certain methods about how to get the vrca files? I mean I tried wireshark and memory dump, both of them didn't work.
@tb17074107 pretty sure its modded vrc clients like abyss or hex
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better π
Register Login