-
Notifications
You must be signed in to change notification settings - Fork 8
/
Copy pathToDoList
20 lines (12 loc) · 1.32 KB
/
ToDoList
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
This is just a list of things that I aim to do with this project.
1) Edit the manifest file to set the apk into a debuggable state.
2) Use Android Studio or equivalent Android debugging application to scan which files and their locations are being called.
3) Extract encryption keys.
4) Develop CLI application that can automate conversion of a user's JSON's data to plain/human-readable text. (I have no coding skills, so someone else can do this lol)
Potential issues with this method:
1 - Currently, the game can operate completely normally in an offline state, as it stores the encryption key on the user's internal disk drive.
However, if the encryption key was made dynamic in any form or even worse, online-only, this project will be made ineffective.
Example: If the game used a rolling-code system, where the client will use a key and a piece that increases by one, while the system stores the current and future keys.
Let's say the current key is "N#8e&N&9rP$15C" with a SHA-1 hash of 7fce7dfaf4d31700b6cac431ca93a5c03fcb1b35, then the new key is N#8e&N&9rP$15C + D = N#8e&N&9rP$15D, hence the SHA-1 hash would be: 4c73a7808839eef2ee6e993d09014c242c603354.
This would take a long time to figure out the original key, and to generate possible combinations.
2 - Since the game runs in Unity, the game's code is difficult to examine.