Uninomicon

Documenting the dark corners of the Unity Engine.

User Tools

Site Tools


unity_build_information_detection

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
unity_build_information_detection [2025/06/22 20:58] 31.23.110.60unity_build_information_detection [2025/11/05 09:46] (current) – old revision restored (2025/10/22 09:10) klea
Line 1: Line 1:
-Hey there, reader, I just ran into something weirdly brilliant, I had to pause my life and broadcast this.  +====== Inspecting Information from Built Unity Players ====== 
-  + 
-This creation is totally bonkers. It’s packed with smooth UXbold vibes, and just the right amount of designer madness.  +It can be useful to inspect information from built Unity players. This can be helpful to check whether a certain DLL is used by the gameor verify that the player built properly
-  + 
-Suspicious yet? Alright, <a href=http://xspurt.net/__media__/js/netsoltrademark.php?d=snargl.com%2Fblog%2Fbistre-examples-understanding-the-depth-and-versatility-of-this-unique-color%2F>witness the madness right on this link</a> +===== High Level ===== 
-  + 
-Need more hype? FineImagine a caffeinated unicorn dreamed of a site after watching sci-fiThat’s the frequency this thing of wonder gives.  +  * [Android] .xapk/.apk/.so can be traversed with [[https://www.7-zip.org/|7-Zip]] 
-  +  * Unity asset file headers can be inspected with any hex editor((Even Notepad works, although only for files <500KBNotepad may struggle to open bigger files.)) 
-So go aheadand bookmark it foreverBecause no lie, this is pure genius.  + 
-  +===== Unity Version ===== 
-Boom.+ 
 +Find this information in: 
 +  * ''.unity3d'' file header 
 +  * resource file headers, for example: 
 +    * ''unity default resources'' 
 +    * ''globalgamemanagers'' 
 +    * ''level<number>'' 
 +    * ''sharedassets<number>.assets'' 
 +    * files with 32 characters long names using hexadecimal characters [0-9a-f] 
 +  * [Android]((since 2017.4)) ''lib/<arch>/libunity.so/.note.unity'' 
 +  * [Windows] ''<executable>/.rsrc/version.txt'' 
 +  * [Windows] ''UnityPlayer.dll'' - Properties / Details / File version 
 + 
 +===== Used Assemblies ==== 
 +These methods work even with IL2CPP builds. 
 + 
 +  * ''ScriptingAssemblies.json'' 
 +  * Search for ''.dll'' in ''global-metadata.dat'' with a hex editor
 + 
 +Use cases: 
 + 
 +  * We can determine URP usage by looking for ''Unity.RenderPipelines.Universal.*.dll''((e.g. ''Unity.RenderPipelines.Universal.Runtime.dll'')) 
 + 
 +===== Notes ===== 
 + 
 +  * In non-IL2CPP((ie. Mono)) buildsall code that made it into a build is also available to the end user and can be viewed with tools ((dnSpy or ILSpy for .dll files)) relatively easily. Obfuscation can mitigate this, however the most effective obfuscation methods((runtime assembly generation/loading and other methods relying on JIT)) are not compatible with IL2CPP so can't be used by developers
 +  * ''global-metadata.dat'' appears to contain all the method/property/field names in UTF-8 (or at least those that were used and not stripped) from all the assemblies that were used by the build.
unity_build_information_detection.1750625897.txt.gz · Last modified: 2025/06/22 20:58 by 31.23.110.60

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki