Hello
I'm trying to crack (Empires and Allies) Android game built with unity , I used (dnSpy) to get the source code of the (Assembly-CSharb.dll) file . At the moment i'm facing a problem , All data is encrypted in HTTP Request when i try to intercept it with (Burpsuite) , i tried to look at the code and spot the line that encrypt it but i can't find it because there are many many files called (Hashing , HashAssembly , Encryption , ..etc ) , i'll attach an HTTP Request when i collect loots from factory in the game .
Code POST /firepower-delta/GameService.asmx/ExecuteActions HTTP/1.1
Accept: Application/ProtobufBase64
authorization: token (###DELETED###)
X-Unity-Version: 5.3.6p8
User-Agent: Dalvik/2.1.0 (Linux; U; Android 5.1.1; SM-G930F Build/LMY48Z)
Host: api.zynga.com
Connection: close
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 221
actionList=1%3e48%3aMoc.GameLogic.CollectAction%7cogECCH0Izs%2bG1wUY%2bho%3d&hash=5267a2eb0d09dae7ca387a8ab090c325&deviceId=###DELETED###&clientId=13&clientMajorVersion=58&clientMinorVersion=1092240
Can anyone help me to find the file which encrypt the http request like that in Assemly-CSharb.dll ? ,
Warm Regards ,
DO NOT DEAL WITH THIS MEMBER
You ask us to find the function responsible for encrypting, but do not even offer the DLL that you are reversing...
(Apr 26, 2018 06:39 AM)Dalvik Wrote: You ask us to find the function responsible for encrypting, but do not even offer the DLL that you are reversing...
Thanks for your visit and concern ! Actually , i tried earlier to attach a link but the website here prevented me as i'm still under 50 posts , Anyway , i'll attach the link here of the whole file of the game (Managed) , when u extract it you will get all programming files as they are all "OOP" and each file depends on the other files .
Code mediafire.c om/file/w71ac41fssxykbi/Managed.rar
(Delete the space between "com")
Thanks again !
Best Regards =)
Apr 26, 2018 09:24 AM
(This post was last modified: Apr 26, 2018 09:49 AM by Siy.)
DO NOT DEAL WITH THIS MEMBER
(Apr 26, 2018 09:24 AM)Siy Wrote: -LINK-
0/60 Clean File
0/60 doesn't mean anything. Crypters do that, and they are public and free.
(Apr 26, 2018 09:43 AM)Dalvik Wrote: 0/60 doesn't mean anything. Crypters do that, and they are public and free.
100% True, meant to say 'Clean file, open at your own risk' <3
(Apr 26, 2018 09:43 AM)Dalvik Wrote: 0/60 doesn't mean anything. Crypters do that, and they are public and free.
Hello again ,
I don't understand you , first you make fun of me because i didn't attach a file and now after i did you somehow still replaying negatively ! MAN I MENTIONED THE NAME OF THE GAME BEFORE AND THE PLATFORM , you can easily go to play store and download it ! Hilarious ! Crypto ? huh !
DO NOT DEAL WITH THIS MEMBER
Apr 26, 2018 11:21 AM
(This post was last modified: Apr 26, 2018 11:21 AM by Dalvik.)
(Apr 26, 2018 10:41 AM)BrilliantAdam Wrote: Hello again ,
I don't understand you , first you make fun of me because i didn't attach a file and now after i did you somehow still replaying negatively ! MAN I MENTIONED THE NAME OF THE GAME BEFORE AND THE PLATFORM , you can easily go to play store and download it ! Hilarious ! Crypto ? huh !
First of all, you are completely misinterpreting what I said. Second, you expect many people to just download the app, take it apart, and take a look just for you? I find it hard to believe that people will go through all this hassle just to help you, when the least you can do is upload the DLL. If you are expecting help, you should offer as many resources as possible to the people who can potentially help you. Not have them figure it out themselves. People asking for help on a forum are in no position to make demands, unless they are paying, which is against the rules in this section.
Apr 26, 2018 01:39 PM
(This post was last modified: Apr 26, 2018 02:46 PM by BrilliantAdam.)
Thank you guys anyway ! really appreciate it !
This is probably the dumbest question to ask. But, when you mention you are using dnSpy to hack the C# (dll) files you are using it on the computer correct? Also what are you trying hack per-say (like money /stats ect) if it's "in-app purchases"? I fear the amount of work may not be worth the time if it is the IAP section. Because in my experience with hacking Faeria on (Steam) which I never got around the security aspect, but was able to hack a number of other things. I feel like to actually break the encrypted code section you might need some pretty decent C# / security background. But, regardless if you can post a list of what you actually want done, and where to find the file. I will try take a look at it ( but I can't make any promises). Before wasting a ton of time is this a MMORPG by chance similar to Clash Of Clans or something? Basically if you could give a more detailed request I would know if I even have the slightest knowledge how to help you resolve this.
|
