Anyone get Whitout Survival / Kingshot working?

[jaredcat]

I've been trying for a few days to try to figure out how to get data out of a game called Kingshot (com.run.tower.defense) which is a reskin/re-release of Whiteout Survival (com.gof.global)

I'm quite sure the games use anti-cheat and encrypted game files, making it really hard to do basically anything.

I mainly want to just sniff the game traffic so I can get stats of my alliance members so we can log the information for statistics tracking. I've tried quite a few things, but mostly always ran into dead-ends.

From my understanding, i either need to be able to decrypt the global-metadata.dat file or get frida-il2cpp-brdige working, but I only got this far with the bridge using the hello world example:

$ frida -l dist/index.js --runtime qjs -f com.run.tower.defense --device emulator-5554
     ____
    / _  |   Frida 16.6.6 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to Android Emulator 5554 (id=emulator-5554)
Spawned `com.run.tower.defense`. Resuming main thread!                  
[Android Emulator 5554::com.run.tower.defense ]-> Hello, Unity 2022.3.52f1

I'm pretty sure that Kingshot is using unity 2022.3.52f1

com.android.games.engine.build_fingerprint file:

2022.3.52f1;IL2CPP;Release;StripEngineCode:1;OptimizedFramePacing:0;

I saw a few other posts around the internet trying to do the same thing but never saw any one post any success. So this is my last attempt at hoping someone else might have some insight here.

[vfsfitvnm]

Hi! frida-il2cpp-bridge >=0.10.0 needs Frida >= 16.7.0 and < 17. If you cannot change it, use frida-il2cpp-bridge <=0.9.1

[jaredcat]

Ah! Good to know. Im using 16.6.6 because i got a crash and found you suggesting to use 16.6.x to another user which did fix that issue. Updating my original post now that i seems to at least running hello world example with 0.9.1 of bridge.