Roblox-RakNet-Decompilation-Project

KO | EN

gitlite — search

#android #mysql #ruby #api #command-line #dotnet #chatgpt #ui #rust #http

Roblox-RakNet-Decompilation-Project

(★ 9)

Short project focused on reverse engineering + learning more about anti-bot measures. This was paired with another project relating to Roblox but I'm not very fond of the code there. Still requires work for a truly headless client but shouldn't be too hard if you're compentent

파일 탐색기

ZIP 다운로드

- - CMakeLists.txt
  - README.md
- headless_join.cpp
- INNER_PROTOCOL.md
- PROVENANCE.md
- WEB_JOIN_FLOW.md
- - __init__.py
  - aead.py
  - decode.py
  - framing.py
  - inner.py
- README.md
- requirements.txt
.gitignore
LICENSE
README.md

# CDN으로 사용하기

jsDelivr

jsDelivr는 공개 GitHub 리포지토리를 별도 설정 없이 CDN으로 즉시 서빙합니다. 버전과 파일을 고르면 웹페이지에 바로 붙일 수 있는 링크와 예시 코드가 만들어집니다.

버전

파일

링크

예시

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

Decodes Roblox's RakNet-over-UDMUX game traffic, from the outer datagram framing through the
AEAD envelope (cipher, keys, nonce) down to the inner RakNet reliability and replication
grammar. There are also notes on the web join flow and where the session key comes from.

Everything works off a capture from your own client, the same idea as a Wireshark dissector. It
doesn't connect to Roblox, doesn't log in, and isn't a game client or a cheat. Session keys are
per-connection and aren't included. Don't use any of this to break Roblox's ToS.

## What's here

| Path | What |
|---|---|
| `python/rbxraknet/` | The reference decoder. Framing, AEAD, inner grammar. Only needs `cryptography`, and has a CLI. |
| `cpp/decoder/` | The same decoder as a C++/OpenSSL library, with CMake and unit tests. |
| `cpp/headless_join.cpp` | Sketch of the whole flow from web join to ECDH to decrypt. The two unfinished bits are marked. |
| `docs/WEB_JOIN_FLOW.md` | The HTTPS join flow, and where the AEAD key comes from (ephemeral X25519 ECDH). |
| `docs/INNER_PROTOCOL.md` | The inner RakNet grammar, with the byte-level evidence. |
| `docs/PROVENANCE.md` | What's measured vs inferred, claim by claim. |

## Quick start (Python)

```
cd python
pip install -r requirements.txt          # just: cryptography
python -m rbxraknet.decode --capture cap.hex --key-17 <hex> --key-1f <hex>
```

`cap.hex` is one hex UDP payload per line. Keys are per-direction, 32-byte AES-256-GCM. The
library API, the wire layout, and test coverage are in `python/README.md`.

## Status

Verified against a live session. The outer framing round-trips losslessly across 16,797
payloads. The AEAD is AES-256-GCM in both directions, the nonce is `LE64(counter) || "mbeR"`,
and the AAD is empty. The inner grammar tiles 100% in both directions. Property and event values
aren't decoded yet. They need the class schema that comes down in `ID_NEW_SCHEMA`.

Two pieces are written up but not reversed, and they're the only thing between this and a
headless session. One is the KDF that turns the ECDH shared secret into the AEAD key. The other
is the per-packet anti-tamper token. Both live inside the client binary. See
`cpp/headless_join.cpp` for where they'd go.

## License

MIT. See `LICENSE`.

Roblox-RakNet-Decompilation-Project

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

Download README