C# C# Unity game encrypt HTTP requests !

[C#] C# Unity game encrypt HTTP requests ! - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] C# Unity game encrypt HTTP requests ! (/showthread.php?tid=5829727)

C# Unity game encrypt HTTP requests ! - BrilliantAdam - Apr 26, 2018

Hello
I'm trying to crack (Empires and Allies) Android game built with unity , I used (dnSpy) to get the source code of the (Assembly-CSharb.dll) file . At the moment i'm facing a problem , All data is encrypted in HTTP Request when i try to intercept it with (Burpsuite) , i tried to look at the code and spot the line that encrypt it but i can't find it because there are many many files called (Hashing , HashAssembly , Encryption , ..etc ) , i'll attach an HTTP Request when i collect loots from factory in the game .

Code 
POST /firepower-delta/GameService.asmx/ExecuteActions HTTP/1.1

Accept: Application/ProtobufBase64

authorization: token (###DELETED###)

X-Unity-Version: 5.3.6p8

User-Agent: Dalvik/2.1.0 (Linux; U; Android 5.1.1; SM-G930F Build/LMY48Z)

Host: api.zynga.com

Connection: close

Accept-Encoding: gzip, deflate

Content-Type: application/x-www-form-urlencoded

Content-Length: 221

actionList=1%3e48%3aMoc.GameLogic.CollectAction%7cogECCH0Izs%2bG1wUY%2bho%3d&hash=5267a2eb0d09dae7ca387a8ab090c325&deviceId=###DELETED###&clientId=13&clientMajorVersion=58&clientMinorVersion=1092240

Can anyone help me to find the file which encrypt the http request like that in Assemly-CSharb.dll ? ,

Warm Regards ,

RE: C# Unity game encrypt HTTP requests ! - Dalvik - Apr 26, 2018

You ask us to find the function responsible for encrypting, but do not even offer the DLL that you are reversing...

RE: C# Unity game encrypt HTTP requests ! - BrilliantAdam - Apr 26, 2018

(Apr 26, 2018 06:39 AM)Dalvik Wrote: You ask us to find the function responsible for encrypting, but do not even offer the DLL that you are reversing...

Thanks for your visit and concern ! Actually , i tried earlier to attach a link but the website here prevented me as i'm still under 50 posts , Anyway , i'll attach the link here of the whole file of the game (Managed) , when u extract it you will get all programming files as they are all "OOP" and each file depends on the other files .

Code 
mediafire.c om/file/w71ac41fssxykbi/Managed.rar

(Delete the space between "com")

Thanks again !

Best Regards =)

RE: C# Unity game encrypt HTTP requests ! - Siy⁯ - Apr 26, 2018

https://www.virustotal.com/#/file/e22ae004097ebf82a5dd15f74660ecd2d0232876e0c77e369451d20d2c59b72a/detection

0/60 Clean File

Open at your own risk

RE: C# Unity game encrypt HTTP requests ! - Dalvik - Apr 26, 2018

(Apr 26, 2018 09:24 AM)Siy⁯ Wrote: -LINK-
0/60 Clean File

0/60 doesn't mean anything. Crypters do that, and they are public and free.

RE: C# Unity game encrypt HTTP requests ! - Siy⁯ - Apr 26, 2018

(Apr 26, 2018 09:43 AM)Dalvik Wrote: 0/60 doesn't mean anything. Crypters do that, and they are public and free.

100% True, meant to say 'Clean file, open at your own risk' <3

RE: C# Unity game encrypt HTTP requests ! - BrilliantAdam - Apr 26, 2018

(Apr 26, 2018 09:43 AM)Dalvik Wrote: 0/60 doesn't mean anything. Crypters do that, and they are public and free.

Hello again ,

I don't understand you , first you make fun of me because i didn't attach a file and now after i did you somehow still replaying negatively ! MAN I MENTIONED THE NAME OF THE GAME BEFORE AND THE PLATFORM , you can easily go to play store and download it ! Hilarious ! Crypto ? huh !

RE: C# Unity game encrypt HTTP requests ! - Dalvik - Apr 26, 2018

(Apr 26, 2018 10:41 AM)BrilliantAdam Wrote: Hello again ,

I don't understand you , first you make fun of me because i didn't attach a file and now after i did you somehow still replaying negatively ! MAN I MENTIONED THE NAME OF THE GAME BEFORE AND THE PLATFORM , you can easily go to play store and download it ! Hilarious ! Crypto ? huh !

First of all, you are completely misinterpreting what I said. Second, you expect many people to just download the app, take it apart, and take a look just for you? I find it hard to believe that people will go through all this hassle just to help you, when the least you can do is upload the DLL. If you are expecting help, you should offer as many resources as possible to the people who can potentially help you. Not have them figure it out themselves. People asking for help on a forum are in no position to make demands, unless they are paying, which is against the rules in this section.

RE: C# Unity game encrypt HTTP requests ! - BrilliantAdam - Apr 26, 2018

Thank you guys anyway ! really appreciate it !

RE: C# Unity game encrypt HTTP requests ! - blackpaper - Jun 1, 2018

This is probably the dumbest question to ask. But, when you mention you are using dnSpy to hack the C# (dll) files you are using it on the computer correct? Also what are you trying hack per-say (like money /stats ect) if it's "in-app purchases"? I fear the amount of work may not be worth the time if it is the IAP section. Because in my experience with hacking Faeria on (Steam) which I never got around the security aspect, but was able to hack a number of other things. I feel like to actually break the encrypted code section you might need some pretty decent C# / security background. But, regardless if you can post a list of what you actually want done, and where to find the file. I will try take a look at it ( but I can't make any promises). Before wasting a ton of time is this a MMORPG by chance similar to Clash Of Clans or something? Basically if you could give a more detailed request I would know if I even have the slightest knowledge how to help you resolve this.