Epic Games Xal Reverse & Document (just me blogging)

I've never seen something so easy to reverse...

Documentation:

• 1 - Requests
• 2 - Talon
• 3 - Encryption

1. Requests

Here's how I intercepted requests from EpicGames.

1. Install HTTP Toolkit.
2. Install Google Chrome.
3. Launch HTTPTK, and start a Chrome Intercepted Window.
4. You'll see all requests running on chrome.

2. Talon

talon_sdk.js is the file that contains the thing to encrypt the xal fingerprint.

3. Encryption

Just search xal in the talon_sdk deobfuscated file...

... an rc4? so easy ...

u6dq