Looking into a Unity-based game for Android, found some suspected vulnerabilities in the Java code. But I’m at loss trying to locate the .NET code – there are references to Assembly-CSharp.dll and other DLLs in the assets but no such files actually exist. What am I missing?


So far I think that all managed code has been compiled into the libil2cpp[.]so library. Judging by the documentation, this is possible. Strangely, nobody reverse engineering Unity games mentioned this possibility.

· · Web · 1 · 0 · 0

Suspicion confirmed and successfully analyzed the binary using Il2CppInspector application. Now that’s going somewhere…

Sign in to participate in the conversation
Infosec Exchange

A Mastodon instance for info/cyber security-minded people.