Open Request EVA AI (ex Journey) Chat Bot

wanou said:

Does it work ?

Click to expand...

hprnv said:

I found interesting "points" may be will be useful for someone. I'm not a modder, a software engineer, so have a common knowledge. I used httpCanary, most of endpoints useless cuz looks like validating on servers additionaly, but for example changing some value with injector give possibility to read "locked" posts in the diary of character. Also same way we can read her messages that sends in sexting mode, but this data sends through the WS and by default canary can't inject to WS, but this data sends in plaintext anyway. And found a direct link for the photos that she send. If someone interested in here the link
api.ifriend.ai/images/answers/ai/v2/1 jpg (just change 1jpg to values in range from 1 to 30)

Click to expand...

SunWukong00 said:

Could you please explain how to do it with HttpCanary? I've tried and it didn't seem to work. Once captured something that I could only translate to hex and bunch of unreadable text. So please explain how to do it properly

Click to expand...

hprnv said:

Looks like...
1) issue with certificate (on the step of httpcanary install)
2) issue with certificate (yeah, again. not with canary, but with app itself, I use lsposed for unpinning, but with Frida it works too)

p.s. screenshots how it all looks like in my case.

Click to expand...

SunWukong00 said:

Alri

Alright this explains a bit. So I should simply install the certificate (since I actually skipped that part), and use Frida for unpinning? And that will show nsfw messages unblurred?

Click to expand...

hprnv said:

Wait wait wait, don't mix it up. Install certificates in http canary allow your to read cyphered HTTPS traffic in apps which are "listening" with httpcanary. Frida is using (in context of current task) for unpinng app certificate, if you know how to use Frida already you can do this with it, but if you don't, will be easier to unpin with lsposed module.

Click to expand...