Looking into a Unity-based game for Android, found some suspected vulnerabilities in the Java code. But I’m at loss trying to locate the .NET code – there are references to Assembly-CSharp.dll and other DLLs in the assets but no such files actually exist. What am I missing?
So far I think that all managed code has been compiled into the libil2cpp[.]so library. Judging by the documentation, this is possible. Strangely, nobody reverse engineering Unity games mentioned this possibility.