Skip to content

tool to extract the obfuscated protobuf messages from dump.cs file (works on GI <3.5.5, SR)

Notifications You must be signed in to change notification settings

Hiro420/Dumpcs2Protobuf

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

26 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Dumpcs2Protobuf

some shit i tried to make to extract the obfuscated protobuf messages from dump.cs file (needs to set manually the repetitive string that comes after the class name)

DOESNT WORK ON 3.6 AND PRETTY MUCH DEAD AND ABANDONED PROJECT, REVIVE IF YOU WANT

SUPPORTS SR

YOU WILL NEED A FULL DUMP.CS FILE CONTAINING 100% FULL DUMP (INCLUDING ALL FULL FIELDS AND VALUES) ELSE IT WONT WORK

USAGE

1- edit the "string searchString" in the code to match the repetitive string that comes after the class name

2- build it via Visual Studio 2022

3- put the dump.cs file NAMED AS "dump.cs" in same folder as the executable

4- run the program

5- you will be left with an output folder, containing the protobuf messages as .cs files, looking like this:
image

and a defs folder containing SOME protos. please remember, this tool isnt perfect and may not parse all of them perfectly
image

6- profit

I WILL NOT GUIDE YOU ON HOW TO DEOBFUSCATE PROTOS, YOU CAN DO IT USING TOOLS OR MANUALLY IF YOU'RE CRAZY ENOUGH

KNOWN ISSUES:

  • oneof's are not being parsed

About

tool to extract the obfuscated protobuf messages from dump.cs file (works on GI <3.5.5, SR)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages