Cʏʙᴇʀ N1LUX

• how to capture the APIs 
• learn how to patch any applications 
• how we can create our api 
• what's the use of api
• and how we can use APIs.

import json
import blackboxprotobuf


# Bytes ko JSON serializable banane ke liye helper
def byte_converter(obj):
    if isinstance(obj, bytes):
        try:
            return obj.decode("utf-8")
        except:
            return obj.hex()
    raise TypeError(f"Object of type {type(obj).__name__} is not JSON serializable")


def decode_freefire_raw_response(raw_bytes):
    try:
        print("⏳ Wait... Decoding RAW protobuf data...")

        # Step 1: Protobuf decode
        decoded_data, message_type = blackboxprotobuf.decode_message(raw_bytes)

        # Step 2: Convert to neat JSON
        json_output = json.dumps(decoded_data, indent=4, default=byte_converter)

        print("-" * 60)
        print("✅ SUCCESS! DATA DECODED:")
        print("-" * 60)
        print(json_output)
        print("-" * 60)
        print("End of Data.")

        # Step 3: Save to file
        with open("decoded_output.txt", "w", encoding="utf-8") as f:
            f.write(json_output)

        print("\n📁 FILE SAVED: decoded_output.txt")

    except Exception as e:
        print(f"❌ Error: {e}")


# 🔹 RAW RESPONSE BYTES (direct paste)
raw_response = b'\n\x14\x08\x01\x10\x9d\x9d\xc5\xb0\x03\x18\x018\x80\xe9\x0f@\x9c\xf0\xe0\xbe\x010\x01@\x01\x80\x01\x01\xb2\x01\x01\t\xb8\x01\xff\xff\xff\xff\xff\xff\xff\xff\xff\x01\xc2\x01\x01\x01'

# Run decoder
decode_freefire_raw_response(raw_response)

import aiohttp
import asyncio
import binascii

# ================= CONFIG =================

GACHA_URL = "https://client.ind.freefiremobile.com/PurchaseGacha"

GOJO_PAYLOAD = "A3 1F 3A 86 EC 5E C8 1A F1 2D 16 4D BA 36 49 19"

TOKEN = "token-dalo"  # <-- token here

# ================= GACHA REQUEST =================

async def kyro_gacha_req(session: aiohttp.ClientSession, token: str, encrypted_payload: bytes):
    headers = {
        'User-Agent': "Dalvik/2.1.0 (Linux; U; Android 9; ASUS_Z01QD Build/PI)",
        'Connection': "Keep-Alive",
        'Accept-Encoding': "gzip",
        'Content-Type': "application/octet-stream",
        'Authorization': f"Bearer {token}",
        'X-Unity-Version': "2018.4.11f1",
        'X-GA': "v1 1",
        'ReleaseVersion': "OB52"
    }

    try:
        async with session.post(
            GACHA_URL,
            headers=headers,
            data=encrypted_payload,
            ssl=False,
            timeout=aiohttp.ClientTimeout(total=15)
        ) as res:

            if res.status == 200:
                return await res.read()
            else:
                print(f"[!] HTTP ERROR: {res.status}")
                return None

    except Exception as e:
        print(f"[!] Gacha request error: {e}")
        return None

# ================= MAIN =================

async def main():
    # Hex string → bytes
    encrypted_payload = binascii.unhexlify(GOJO_PAYLOAD.replace(" ", ""))

    async with aiohttp.ClientSession() as session:
        response = await kyro_gacha_req(session, TOKEN, encrypted_payload)

        if response:
            print("[✓] Response received:")
            print(response)
        else:
            print("[✗] No response")

# ================= RUN =================

if __name__ == "__main__":
    asyncio.run(main())