Skip to content
Jordan edited this page Sep 26, 2015 · 1 revision

Note: This tutorial is for advanced users only. It assumes that you have a way to view headers and responses to HTTPS packets. For the purposes of demonstration, this tutorial will be using Fiddler to analyze this network traffic.

This guide is only for use if you have a Steam account which is not connected to a web account. If your Steam account is connected to a web account, use your email and password as usual.

Getting your Steamworks credentials

  1. Open Fiddler.
  2. Open the options menu (Tools > Fiddler Options), select the "HTTPS" tab, and ensure that both "Capture HTTPS CONNECTs" and "Decrypt HTTPS traffic" are enabled. (screenshot)
  • Your operating system may alert you of this change, as Fiddler must install a custom root certificate on your machine to actually decrypt this traffic. This certificate is uninstalled when Fiddler is closed.
  • This certificate must be installed for these steps to work. To read more on the implications (and potential risks) of this certificate's use, you can read these additional resources. (1, 2)
  1. Open Realm of the Mad God through Steam. Once the main page loads, you should see a number of requests queued in your Fiddler window. (screenshot)
  2. Search the responses collected for an entry sent to /steamworks/getcredentials and select it. This should bring up a dialog box in your other Fiddler panel. (screenshot)
  3. In the lower-right panel, there should be a message about "SyntaxView". To change this to the desired view, select "XML" from the tabs above it. Once you have done this, you should see a list with three items: "GUID", "Secret", and "PlatformToken". (screenshot)
  4. Copy the entry for GUID and Secret. These will be entered in your accounts.js file. Once you have recorded these entries, you may close Fiddler.

Entering your Steamworks credentials into accounts.js

  1. Open your accounts.js file.

  2. Enter a new line within the accounts object. The full line should look similar to the below. (taken from example above in #5)

     'steamworks:1234567890': 'a1B2c3D4e5F6g7H8i9J0=',
    
  3. You're done! Save your accounts.js file and open Muledump.

Below is a sample accounts.js file which has two characters: one steam-connected, and one web account.

// editor with syntax hilighting is recommended (for example, notepad++ or textmate)

accounts = {

// Put your data here as shown below. Don't forget the commas and quotes!
// If your emails or passwords contain single quotes,
// escape them with backslashes (\) like this: 'pass\'word'

'steamworks:1234567890': 'a1B2c3D4e5F6g7H8i9J0=',
'rotmgaccount@example.com': 'P@ssword1'

}// don't delete this line!


// how many characters are displayed in each row (within one account)
rowlength = 7

// change to 1 to switch to testing
testing = 0

// change to 1 to enable price display in tooltips
prices = 0

// change to 1 to enable one-click login (run lib/mulelogin.au3 first)
mulelogin = 1

// 0 = use smart layout (fill empty spaces)
// 1 = show account boxes row by row
nomasonry = 0