This topic was archived here:

https://web.archive.org/web/20230000000000fw_/https://www.zenhax.com/viewtopic.php?t=15178

Lutzynth, posted Fri Apr 23, 2021 7:08 am (63528)

---

Introduction

Hi! as the topic we going to discuss.. i have able to obtain Minecraft Windows 10 encrypted Marketplace textures. The textures is obtained by grabbing token using Wireshark. Anyway, we're not gonna talk about "how to obtain" but the main topic is.. how we can decrypt minecraft encrypted packs?

Its really common, Marketplace prices is mostly over-charged for over simple things.. from Skinpacks, Worlds, and even Persona Skin Cosmetics especially anything regarding the skins.

Problematic

Minecraft Windows 10 using JWT or Json Web Token based with HS256 Algorithm. They used this new algorithm recently in 1.16 updates.. i suppose? Minecraft no longer using .zipe algorithm but rather they using JWT and verify the packs using signatures.json that also being encrypted. From the cache folder, you cant really see the content even though its on .png or .json format. The cache file is located at : %USERPROFILE%\AppData\Local\Packages\*Microsoft*Minecraft*\LocalState\PremiumCache

Inside the Premium Cache, there's going to be 3 folders inside. 1. Persona, 2. Skinpacks, 3. Resources (Texture Pack). If you look closely, every-single one of them have "signatures.json" even on resources pack. Enough the roots, lets get into the main idea. Since i have been able to pick on of their textures assets, we probably can do some search for in-game decrypter function or even using hash file to get the key-algorithm they used? Here im going to provide both textures. 1 is encrypted, and another is decrypted readable png that can be read by any photo viewer/editor or etc. I also going to provide some "Minecraft.Windows.exe" from the retail version 1.16, hoping to get some in-depth area.

As because they used JWT, the token can be readed here : https:https://jwt.io/ . I can achieve the token is more likely easier to decipher since its a free marketplace content that yet also encrypted. The assets i was able to get is Persona Pumpkin piece from Headware section from Persona Skin Editor / Profile.

[Encrypted Asset]
Image 1 : https://drive.google.com/file/d/1kNAtUO2j1n_nibe4254LblDnjqIneHwX/view?usp=sharing
Image 2 : https://drive.google.com/file/d/146Yni2XrneL0G2DVx4vhxUuxjq-x98U4/view?usp=sharing

[Decrypted Asset]
Image 1 : https://drive.google.com/file/d/1-4SR32NJFilBHalpDPCJuzmc7R2l1Pju/view?usp=sharing
Image 2 : https://drive.google.com/file/d/1GYhLs9LjVxeKrcpgEGnRA55Q-IU5ekzE/view?usp=sharing

[MC Retail Exe] : https://drive.google.com/file/d/1bA2u7ihT8eBRWLxH6BRxKy4RHp19BqZQ/view?usp=sharing
[Data Set] : https://drive.google.com/drive/folders/1z6hkNumx3RSmpCdr13i8Y7YCIf6BF-CW?usp=sharing

AgentB, posted Mon Apr 26, 2021 7:27 pm (63597)

---

how do you trace jwt/token using wireshark?

Lutzynth, posted Tue Apr 27, 2021 3:39 am (63602)

---

AgentB wrote:

how do you trace jwt/token using wireshark?

Wireshark contain Signature Packet. Basicly when you unlock Marketplace content, the transaction between Public Key and Private Key happen with in client and not server because its how JWT works. Wireshark Raw Signature packet may encrypted so you gotta catch up what's happening using debugging. Not all packet is encrypted though, but most of them are. As i said on the thread, you most likely easier to capture the signature if you collect free content. So the conclusion is, the handshake pretty much client sided and its a good thing.

min1111, posted Sat May 22, 2021 4:37 pm (64214)

---

Lutzynth wrote:

Wireshark contain Signature Packet. Basicly when you unlock Marketplace content, the transaction between Public Key and Private Key happen with in client and not server because its how JWT works. Wireshark Raw Signature packet may encrypted so you gotta catch up what's happening using debugging. Not all packet is encrypted though, but most of them are. As i said on the thread, you most likely easier to capture the signature if you collect free content. So the conclusion is, the handshake pretty much client sided and its a good thing.

Can you tell me in more detail how to decrypt the texture?

OwenOS, posted Wed Jun 02, 2021 8:35 pm (64447)

---

is it basically just converting the jsons and pngs or is it more complicated

shihadaman, posted Sun Jul 25, 2021 9:51 pm (65357)

---

Dear brother all the gdrive links aren't working can you reupload the content or just update the links

yevsh, posted Wed Sep 01, 2021 7:40 pm (66101)

---

Any luck yet?

Rightsphinx, posted Fri Oct 22, 2021 10:02 pm (67124)

---

hi

ItsMwamOffi, posted Sun Nov 21, 2021 6:09 pm (67637)

---

Fellow hive player I see lol

Coockio, posted Mon Dec 06, 2021 4:01 am (67968)

---

[quote="Lutzynth"]Introduction

Please step by step guide
Please step by step guide, Here I have encrypted content from the premium cache folder. What should I do with it to decipher it?

atom0s, posted Sun Apr 03, 2022 3:21 am (70829)

---

This got posted on another site today, source is released under public domain:
https://anonfiles.com/n0G2h5T0xe/McTools_zip

Credits to SilicaAndPina.

MaakuArc, posted Wed Apr 27, 2022 2:31 pm (71307)

---

atom0s wrote:

This got posted on another site today, source is released under public domain:
https://anonfiles.com/n0G2h5T0xe/McTools_zip

Credits to SilicaAndPina.

Any idea how to actually use this? Seems like it needs compiled but I'm not sure how to do that.

Ryoo1, posted Tue Sep 06, 2022 5:37 pm (73358)

---

MaakuArc wrote:

atom0s wrote:

This got posted on another site today, source is released under public domain:
https://anonfiles.com/n0G2h5T0xe/McTools_zip

Credits to SilicaAndPina.

Any idea how to actually use this? Seems like it needs compiled but I'm not sure how to do that.

I've tried to compiled this using visual studio but it doesn't seem work anymore, I don't know if it's already patched or not

Lol224, posted Sun Dec 04, 2022 12:47 am (74451)

---

atom0s wrote:

This got posted on another site today, source is released under public domain:
https://anonfiles.com/n0G2h5T0xe/McTools_zip

Credits to SilicaAndPina.

Do you have a updated file?

atom0s, posted Sun Dec 04, 2022 8:42 am (74456)

---

The latest version that SilicaAndPina posted is:
https://anonfiles.com/77dcO9Kfy5/McTools_2_zip

Note: I've had a lot of people contact me directly or join my Discord regarding this file. I am not the author of this tool. I do not play Minecraft either. I have nothing to do with the creation of, updating of, or anything related to this file/tool or anything with Minecraft.

SpicedCurry, posted Tue Dec 06, 2022 9:24 am (74471)

---

So, how to use this McTools thing? How to make it work?

ialdrich23xx, posted Fri Dec 16, 2022 2:51 pm (74638)

---

atom0s wrote:

The latest version that SilicaAndPina posted is:
https://anonfiles.com/77dcO9Kfy5/McTools_2_zip

Note: I've had a lot of people contact me directly or join my Discord regarding this file. I am not the author of this tool. I do not play Minecraft either. I have nothing to do with the creation of, updating of, or anything related to this file/tool or anything with Minecraft.

It doesn't work to encrypt textures, it just creates the content.json and the key is always the same, but it doesn't encrypt any of the content

DenizkaGG, posted Fri Jan 13, 2023 8:49 pm (74999)

---

ialdrich23xx wrote:

atom0s wrote:

The latest version that SilicaAndPina posted is:
https://anonfiles.com/77dcO9Kfy5/McTools_2_zip

Note: I've had a lot of people contact me directly or join my Discord regarding this file. I am not the author of this tool. I do not play Minecraft either. I have nothing to do with the creation of, updating of, or anything related to this file/tool or anything with Minecraft.

It doesn't work to encrypt textures, it just creates the content.json and the key is always the same, but it doesn't encrypt any of the content

Guys, how to run this machine, I'm a complete noob, not a programmer, but I want to hack the maps of the marketplace !