JOB 1
### Progress Summary
- Setup:
- Downloaded Windows client, created website account, logged in via launcher to open engine.
- Created character, completed tutorial if needed, navigated to home area for testing (book icon → home).
- Tested animations: Swim in water, jump with Ctrl.
- Reverse Engineering (Cheat Engine):
- Attached to engine.exe (not launcher).
- Key address: engine.exe + 3D7B10 – breakpoint hits on animation changes.
- Registers: RBX points to dynamic animation string (e.g., "swim"); RAX/RCX/RDI update dynamically.
- Issues: Frequent crashes on manipulation; addresses shift on restarts/mid-game.
- Target: Mid-air swim (no water trigger).
- Status: Identified animation hooks; no mod built yet. Stopped due to instability.
Remaining Tasks
- Stabilize Access: Handle dynamic addresses (pointers/patterns); reduce crashes (read-only first, debugger isolation).
- Trigger Logic: Map "in water" checks; bypass via memory writes; hook functions for detours.
- Implement Mod: DLL injection or script; add toggle key; client-side only to avoid bans.
- Test/Refine: Playtest edges; debug logs; expand to other animations if desired.
Next Steps for Reverse Engineers
If interested in the job:
- Contact me with questions for clarification.
- Provide a quote based on scope.
- Suggest a timeline and milestones.
- Outline your approach/tools (e.g., CE, x64dbg, C++/ASM experience).
JOB 2
Job Posting: Reverse Engineer for Cython-Compiled Python Binary
Title: Freelance Reverse Engineer - Python/Cython Binary Analysis
Project Type:One-time project with potential for follow-up work.
Budget: $400+ (Base price, with significant bonuses for critical vulnerability discovery)
Project Overview:
We are seeking an experienced reverse engineer to analyze a Python application that has been compiled into a binary using Cython. The client's primary goal is to fully reverse and document the application's authentication, licensing, and remote communication mechanisms.
The client is particularly interested in identifying and understanding any external API endpoints, Google Services (Drive/Sheets) integrations, or other servers the application communicates with for validation. The analysis should aim to uncover potential security vulnerabilities that could be exploited.
Scope of Work:
* Analyze the provided Cython-compiled binary.
* Deobfuscate and reverse engineer the code to reveal the original logic, specifically focusing on:
* The authentication and license check process.
* All network communication (HTTP requests, API calls, connections to Google services).
* The structure and location of any external configuration files (e.g., `data.json`).
* Provide a clear report detailing the findings, including:
* Recovered code snippets for the key functions.
* Diagrams or explanations of the communication flow.
* A list of all endpoints and servers contacted.
* Bonus: Any identified security vulnerabilities or potential vectors for exploitation (e.g., DDOS, auth bypass).
Required Skills & Experience:
* Proven experience in reverse engineering.
* Specific experience with reversing Python binaries compiled with Cython, PyInstaller, Py2Exe, etc.
* Strong understanding of network protocols and API structures.
* Experience with tools like IDA Pro, Ghidra, x64dbg, and Python debugging/analysis tools.
* Ability to deliver a clear and concise report.
Nice-to-Have:
* Experience in penetration testing or security vulnerability research.
* Experience with Google APIs (Drive, Sheets).
Application Process:
Please reply with:
1. A brief description of your relevant experience, especially with Python/Cython reversal.
2. An estimated timeline for this project.
3. Any questions you have about the scope.
The client is ready to start immediately and has the files prepared for the right candidate.
### Progress Summary
- Setup:
- Downloaded Windows client, created website account, logged in via launcher to open engine.
- Created character, completed tutorial if needed, navigated to home area for testing (book icon → home).
- Tested animations: Swim in water, jump with Ctrl.
- Reverse Engineering (Cheat Engine):
- Attached to engine.exe (not launcher).
- Key address: engine.exe + 3D7B10 – breakpoint hits on animation changes.
- Registers: RBX points to dynamic animation string (e.g., "swim"); RAX/RCX/RDI update dynamically.
- Issues: Frequent crashes on manipulation; addresses shift on restarts/mid-game.
- Target: Mid-air swim (no water trigger).
- Status: Identified animation hooks; no mod built yet. Stopped due to instability.
Remaining Tasks
- Stabilize Access: Handle dynamic addresses (pointers/patterns); reduce crashes (read-only first, debugger isolation).
- Trigger Logic: Map "in water" checks; bypass via memory writes; hook functions for detours.
- Implement Mod: DLL injection or script; add toggle key; client-side only to avoid bans.
- Test/Refine: Playtest edges; debug logs; expand to other animations if desired.
Next Steps for Reverse Engineers
If interested in the job:
- Contact me with questions for clarification.
- Provide a quote based on scope.
- Suggest a timeline and milestones.
- Outline your approach/tools (e.g., CE, x64dbg, C++/ASM experience).
JOB 2
Job Posting: Reverse Engineer for Cython-Compiled Python Binary
Title: Freelance Reverse Engineer - Python/Cython Binary Analysis
Project Type:One-time project with potential for follow-up work.
Budget: $400+ (Base price, with significant bonuses for critical vulnerability discovery)
Project Overview:
We are seeking an experienced reverse engineer to analyze a Python application that has been compiled into a binary using Cython. The client's primary goal is to fully reverse and document the application's authentication, licensing, and remote communication mechanisms.
The client is particularly interested in identifying and understanding any external API endpoints, Google Services (Drive/Sheets) integrations, or other servers the application communicates with for validation. The analysis should aim to uncover potential security vulnerabilities that could be exploited.
Scope of Work:
* Analyze the provided Cython-compiled binary.
* Deobfuscate and reverse engineer the code to reveal the original logic, specifically focusing on:
* The authentication and license check process.
* All network communication (HTTP requests, API calls, connections to Google services).
* The structure and location of any external configuration files (e.g., `data.json`).
* Provide a clear report detailing the findings, including:
* Recovered code snippets for the key functions.
* Diagrams or explanations of the communication flow.
* A list of all endpoints and servers contacted.
* Bonus: Any identified security vulnerabilities or potential vectors for exploitation (e.g., DDOS, auth bypass).
Required Skills & Experience:
* Proven experience in reverse engineering.
* Specific experience with reversing Python binaries compiled with Cython, PyInstaller, Py2Exe, etc.
* Strong understanding of network protocols and API structures.
* Experience with tools like IDA Pro, Ghidra, x64dbg, and Python debugging/analysis tools.
* Ability to deliver a clear and concise report.
Nice-to-Have:
* Experience in penetration testing or security vulnerability research.
* Experience with Google APIs (Drive, Sheets).
Application Process:
Please reply with:
1. A brief description of your relevant experience, especially with Python/Cython reversal.
2. An estimated timeline for this project.
3. Any questions you have about the scope.
The client is ready to start immediately and has the files prepared for the right candidate.
![[Image: signature-ezgif-com-video-to-gif-converter-7.gif]](https://patched.sh/pbb-proxy/UUNCQ0JeTUoNGVgHA0taWkl1KWNpdHVGXhwSWQFeVxFMRVMeVB4FDAIaUgoMSE9cAlINGkxfFFJaVUxTCV5AAEtDU0EcU0wCDVE-/signature-ezgif-com-video-to-gif-converter-7.gif)
🌐 [Website] (https://www.brandforge.gg/)
💬 [Telegram] (https://t.me/brandforge_gg)
🔥 [Discord] (https://discord.gg/brandforge)
