Looking into a Unity-based game for Android, found some suspected vulnerabilities in the Java code. But I’m at loss trying to locate the .NET code – there are references to Assembly-CSharp.dll and other DLLs in the assets but no such files actually exist. What am I missing?
So far I think that all managed code has been compiled into the libil2cpp[.]so library. Judging by the documentation, this is possible. Strangely, nobody reverse engineering Unity games mentioned this possibility.
Follow
Suspicion confirmed and successfully analyzed the binary using Il2CppInspector application. Now that’s going somewhere…
