dbd-prestige-injector

KO | EN

gitlite — search

#api #kubernetes #java #golang #graphql #chatbot #reactjs #php #postgresql #cli

dbd-prestige-injector

(★ 9)

Dead by Daylight prestige injector - automate P0 to P100 in minutes via BHVR's unpatched Bloodweb API. Open source vulnerability disclosure.

파일 탐색기

ZIP 다운로드

- - cat.png
  - PrestigeIcon.ico
- - API.cs
  - EclipsedApi.cs
  - PrestigeInjector.cs
  - TargetItems.cs
- - ViewModels.cs
- - SessionCapture.cs
- App.xaml
- App.xaml.cs
- DbdPrestigeInjector.csproj
- MainWindow.xaml
- MainWindow.xaml.cs
.gitattributes
.gitignore
DbdPrestigeInjector.slnx
LICENSE
README.md

# CDN으로 사용하기

jsDelivr

jsDelivr는 공개 GitHub 리포지토리를 별도 설정 없이 CDN으로 즉시 서빙합니다. 버전과 파일을 고르면 웹페이지에 바로 붙일 수 있는 링크와 예시 코드가 만들어집니다.

버전

파일

링크

예시

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# DBD Prestige Injector

> This project is released to force BHVR to patch a critical vulnerability in Dead by Daylight's Bloodweb API that has been exploited for profit by private tool developers.

## What This Is

A standalone, documented proof-of-concept demonstrating how Dead by Daylight's prestige system can be fully automated through direct API calls - bypassing the game client entirely. A character can be taken from Prestige 0 to Prestige 100 in under 5 minutes.

## Why It's Being Open-Sourced

Private developers have been selling this exploit as a service, charging players money for something that costs them nothing to run. By releasing the full technical details publicly:

1. BHVR can understand exactly what to patch - every API call, header, and payload is documented
2. Nobody can profit from it anymore - the exploit is free and public
3. Players are informed - transparency over security through obscurity

---

## Project Structure

```
DbdPrestigeInjector/
  Assets/              Images and static resources
  Core/                API clients and prestige logic
    API.cs             BHVR API wrapper (bloodweb, prestige, bulk spend)
    EclipsedApi.cs     Eclipsed.top API for character/item data
    PrestigeInjector.cs  Main prestige loop with logging
    TargetItems.cs     Selective item purchasing during bloodweb spend
  Models/              View models and converters
    ViewModels.cs      CharacterViewModel, ItemViewModel
  Services/            Background services
    SessionCapture.cs  FiddlerCore HTTPS proxy for API Key capture
  App.xaml             Application resources and theme
  MainWindow.xaml      Main UI layout
  MainWindow.xaml.cs   UI logic and event handlers
```

---

## Features

- Automatic prestige loop from current level to any target
- API Key capture via built-in HTTPS proxy (FiddlerCore)
- Target item selection - farm specific items, perks, add-ons, or offerings while prestiging
- Real-time logging of every operation
- Platform support for Steam, Epic Games, and Windows/Xbox

---

## The Vulnerability

### Summary

BHVR's `bulk-spending-bloodweb` API endpoint performs zero server-side validation that the client has actually rendered a bloodweb or that the player interacted with the game UI. The server blindly trusts all client-submitted bloodweb operations.

### The Core Exploit (3 API Calls)

#### Step 1 - Probe Bloodweb

```
POST api/v1/dbd-character-data/bloodweb/v2

{
  "characterName": "K01",
  "entityBlockedNodeIds": [],
  "operationOrder": [],
  "selectedNodeIds": []
}
```

Returns the current `prestigeLevel`, `bloodWebLevel`, and all available nodes with their items.

#### Step 2 - Bulk Spend (Skip Entire Bloodweb Level)

```
POST api/v1/dbd-character-data/bulk-spending-bloodweb

{
  "characterName": "K01",
  "entityBlockedNodeIds": ["101","102","103",...,"412"],
  "numOfLevel": 1,
  "selectedNodeIds": []
}
```

This is the key exploit. By sending ALL node IDs as `entityBlockedNodeIds`, the entity (game AI) consumes every node on the bloodweb. The player buys nothing. The server advances the bloodweb by one level and spends bloodpoints automatically.

Repeat this call approximately 50 times to reach bloodweb level 51.

#### Step 3 - Prestige Up

```
POST api/v1/dbd-character-data/bulk-spending-bloodweb

{
  "characterName": "K01",
  "entityBlockedNodeIds": [],
  "numOfLevel": 1,
  "selectedNodeIds": ["0"]
}
```

Node ID "0" is the prestige node. When `bloodWebLevel` reaches 51, sending `selectedNodeIds: ["0"]` triggers the prestige increment. The server resets the bloodweb and increments the prestige level.

Loop back to Step 2 for each additional prestige.

### What The Server Fails To Validate

| Check | Status |
|-------|--------|
| Client rendered the bloodweb UI | Not checked |
| Node IDs exist in current bloodweb | Not checked |
| Player interacted with the game | Not checked |
| Time between requests is realistic | Not checked |
| Request payload has valid signature/HMAC | Not checked |
| Bloodpoints were actually earned in-game | Not checked |
| Client is the actual game executable | Not checked (User-Agent only) |

### Authentication

The only authentication is the `api-key` header containing the API Key. There is:
- No request signing
- No HMAC
- No client certificate
- No rate limit per character (only global IP limits)

---

## How To Get an API Key

The API Key is a session cookie issued when the game client authenticates with BHVR's servers. It can be obtained by:
1. Using the built-in Capture button (starts an HTTPS proxy that intercepts the key automatically)
2. Intercepting HTTPS traffic from the game client manually (Fiddler, mitmproxy)

---

## API Endpoints

### Base URLs (by platform)

| Platform | Base URL |
|----------|----------|
| Steam | `https://steam.live.bhvrdbd.com/` |
| Epic Games | `https://egs.live.bhvrdbd.com/` |
| Windows/Xbox | `https://grdk.live.bhvrdbd.com/` |

### Required Headers (every request)

```
Connection: Keep-Alive
Content-Type: application/json
User-Agent: DeadByDaylight/DBD_Quiche_REL_Steam_Shipping_8_3172922 (http-legacy) Windows/10.0.19045.1.256.64bit
x-kraken-analytics-session-id: {random-guid}
x-kraken-client-platform: steam
x-kraken-client-provider: steam
x-kraken-client-resolution: 1920x1080
x-kraken-client-timezone-offset: -120
x-kraken-client-os: 10.0.19045.1.256.64bit
x-kraken-client-version: 9.5.0
api-key: {your-api-key}
```

---

## Bloodweb Node Structure

The bloodweb response contains `ringData` with nodes organized in 4 rings:
- Ring 1 (inner): Nodes 101-106 (6 nodes)
- Ring 2: Nodes 201-212 (12 nodes)
- Ring 3: Nodes 301-312 (12 nodes)
- Ring 4 (outer): Nodes 401-412 (12 nodes)
- Node 0: Center/prestige node (virtual - triggers prestige at level 51)

Connections between nodes are stored as `paths` in format `"parentId_childId"`.

---

## Target Items

Instead of blocking all nodes, you can selectively purchase specific items:

1. Probe the bloodweb to see available items (`contentId` in each node)
2. Trace the path from root (node "0") to the target node using the `paths` array
3. Buy the path via `bloodweb/v2` with `operationOrder` containing PLAYER actor entries
4. Block the rest via `bulk-spending-bloodweb` to advance the level

This allows farming specific items, perks, add-ons, or offerings while prestiging.

---

## Building and Running

### Prerequisites
- .NET 9 SDK (net9.0-windows)
- FiddlerCore and Telerik.NetworkConnections DLLs in `lib/`
- A valid API Key

### Build

```bash
dotnet build
```

### Run

```bash
dotnet run --project DbdPrestigeInjector
```

### Publish (single-file executable)

```bash
dotnet publish -c Release -r win-x64
```

---

## Suggested Fixes for BHVR

1. Server-side bloodweb state machine: Validate that each node purchase follows a valid path from the last confirmed state
2. Rate limiting per character: Limit bloodweb operations to a realistic pace (e.g., 1 level per 5 seconds minimum)
3. Request signing: Require cryptographic signatures on bloodweb operations that the server can verify
4. Prestige validation: Verify that all 50 levels were completed through legitimate purchases, not just entity blocks
5. Session binding: Tie bloodweb operations to an active game session, not just the auth token
6. Anomaly detection: Flag accounts that prestige multiple times in rapid succession

---

## License

MIT - See [LICENSE](LICENSE)

dbd-prestige-injector

오너의 다른 레포

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

dbd-prestige-injector

오너의 다른 레포

파일 탐색기

# CDN으로 사용하기

Was this content helpful?

Recent Feedback

Download README