+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Help? Cookie Authentication Bypass (Roblox) (/showthread.php?tid=6003679)
Help? Cookie Authentication Bypass (Roblox) - Nondescript - Aug 31, 2019
So Roblox is pretty much hosting all of their game files on 8 different domains. (c[0-7]rbxcdn.com) with no permissions so anyone can get a file with a hash.
Each file is hashed though, each game's own XML to MD5, which is impossible to get unless you made the game or bruteforce and get some random files. (useless)
Every other asset (incl. games) are also hosted on their main site (www.roblox.com/asset/?id=) but requires the correct .ROBLOSECURITY cookie.
Is there something that can be done to bypass that authentication?
If there's any information you need then send me a message or add me on discord: Nondescript#2291