rakkapy/main/pages/myroidbrowse

20 lines
2.3 KiB
Plaintext
Raw Normal View History

2021-09-18 21:37:18 +10:00
<h3>MCC in browser definitive (but not yet) guide</h3>
<h4>Part A: Getting a uuid</h4>
<p>If you don't want to share your phone login with the browser, just generate a uuid4. Should be tools online to do that for you.<br/>
If you do, wait until next maint, then select all text and look right down the bottom. It says something like agg:{idgoeshere}.<br/>
Or, skip this and parts B and C, and use a packet sniffer to collect the user agent directly. This will require a mitm proxy to decrypt the TLS packets, and that needs to be installed as a system certificate or MCC won't trust it (since android 7) and you'll get nothing at all. In short, this is hard and annoying, especialy without root (virtually impossible), so I don't really recommend it. It's also the only method that other guides offer.</p>
<h4>Part B: Token up</h4>
<p>AES encrypt the uuid. Use ECB encryption mode, set the secret key to 0123456789012345, and pad the uuid out to block size of 128, using PKCS5, or PKCS7 (they should be the same thing). You might be able to do this with an online tool, not sure.<br/>
Then base64 encode the result. Should be plenty of tools online to do that.
The result is your token.</p>
<h4>Part C: User agent</h4>
<p>Construct user agent string. Base form is {browser}/{country}/AMBITION_UA/GooglePlay/Android-/MOE_ver{ver}:{token}. Country appears to be ISO_3166-1 alpha-2. ver should be 30 currently (no idea when/how it increases, probably with each new client release).<br/>
Browser is... Whatever you want, really. If you want to try to pretend to be a real client, try something along the lines of "Mozilla/5.0 (Linux; Android 8.0.0; SHIFT6m Build/O00623; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/70.0.3538.110 Mobile Safari/537.36". If you don't, which does run the risk of a ban, just put something like "gimmedatmoe/9001".<br/>
Finished result should look something like this: TODO</p>
<h4>Part D: Browsing</h4>
<p>Use a user-agent switcher (get a plugin for it for your browser, lots of them out there) to set your user agent to that whole string above.<br/>
If it has the option for only doing it for some domains, set it to us-moe-app.amz-aws.jp. That's also where you will be going to play. If you got your user agent right, loading that URL should present you with the toppage ("see myroid"/"buy AP" page).</p>