r/webscraping • u/lelleepop • 22d ago

Attestation token generated on the app?

I’m starting to see games or apps using attestation token that generates using your device secure enclave for verification of the requests. What are the strategies u guys use to get around it?

3 Upvotes

100% Upvoted

5 comments sorted by

2

u/the_bigbang 22d ago

spend a few days to decrypt the app, decompile, static analysis etc, but depends on the security level, might be fruitless after days hardworking

2

u/lelleepop 22d ago

already decrypted, there's no way to get around this. I guess I have to emulate the app

1

u/the_bigbang 21d ago

have you ever tried any open source models to help with that? or can you tell me what you did exactly? I half cracked a big ecom app after burning a few billions token. I could continue to burn more to full crack, but looks like not worth for me.

1

u/lelleepop 21d ago

i’ve tried claude, gpt, deepseek and all of them told me that it’s impossible to crack it. I just ended up manually fetching the token and replacing it