This repository has been archived by the owner on Mar 9, 2022. It is now read-only.
- Updated for VRChat build 1169.
- Core
- Now intercepts Unity internals in order to capture bundles just prior to loading.
- Added YARA binary scanning engine from VirusTotal and Airbus CERT.
- Added AssetTools.NET for detailed inspection of assetbundles.
- Auto-updated files (YARA rules, hash list DLL) are now verified to be from me by way of PGP key validation.
- Configuration
- Added
UserData/BundleBouncer/My-Allowed-Avatars.txt
to allow manually whitelisting avatar IDs. - Added
UserData/BundleBouncer/My-Blocked-Avatars.txt
to allow manually blacklisting avatar IDs. - Added
UserData/BundleBouncer/My-Allowed-Asset-Hashes.txt
to allow manually whitelisting asset hashes. - Added
UserData/BundleBouncer/My-Blocked-Asset-Hashes.txt
to allow manually blacklisting asset hashes. - Added
UserData/BundleBouncer/User-YARA-Rules/
so users can provide their own YARA rules.
- Added
- Known issues
- Progress bars do not work due to internal Unity weirdness. I currently don't know how Unity sends feedback to UnityWebRequest from AssetBundleDownloadHandlers in their native code, so until I can figure this out, stuff will appear to be frozen until downloads complete.
- Downloads seem to take a bit longer due to the post-download scans they are subjected to.
- Since 1169, cached files are not scanned.