-
Notifications
You must be signed in to change notification settings - Fork 121
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Note that project still works with original #211
base: master
Are you sure you want to change the base?
Conversation
@@ -1,6 +1,6 @@ | |||
# Pokemon GO Optimizer | |||
|
|||
This project is no longer being developed because as of July 30th Niantic has implemented SSL pinning, rendering this method useless. Happy hunting, everyone. | |||
**This project is only compatible with the initial release version of Pokemon Go. As of July 30th Niantic has implemented SSL pinning, rendering this method useless on any newer versions.** |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe list the version number:
As of Pokémon GO v1.1.0 (released on July 30th)
Someone just figured out how to remove the certificate pinning https://eaton-works.com/2016/07/31/reverse-engineering-and-removing-pokemon-gos-certificate-pinning/ |
That requires decompiling the apk and patching some file.... lol not going to work. It's a shame I really liked this project. |
mmm well, maybe an apk patcher would work? |
It's not really difficult patching. Just not sure if patching the apk is
really anywhere near safe enough to do on a main account. Maybe if you have
multiples and just wanted to Proof Of Concept with it you could give it a
try.
|
Patching the apk will be safer than using an external unofficial API? |
How is pokeadvisor doing it? |
https://github.com/rastapasta/pokemon-go-xposed @rastapasta the developer of the MITM did this for rooted android user: Pogo-Optimizer is working again ! |
Justr wondering if we could get Pogo-Optimizer working on Bluestacks or Nox and if so would anyone be willing to maybe share how we can do that? |
I think it's pretty much the same process. You should be able to use the
android instructions and find a path to get it working. Just a side note
though, it's pretty simple to just use the 0.29.3 apk on a phone and do the
process as normal. The servers are not version locked yet.
|
The problem right now is that I don't have an Android device. If I continue this project, then it would have to be a spoofing implementation. |
@justinleewells It should work on bluestacks, no? |
@justinleewells how about using nox to emulate android and running the
0.29.3 apk on there? In two seconds I'll be launching this through nox to
check for function. The proxy function is available in settings and using
the browser that shipped with nox I installed the cert. Launching go....
all information loaded. Works like a charm. ^.^
|
If you're able to downgrade to the previous version on your iPhone you can continue to use pogo-optimizer. That's my solution for now while I hope @justinleewells and other developers are able to figure out a workaround with the SSL pinning. |
I am pretty sure that there's no way to bypass the SSL pinning on iOS without rooting your phone. Would you guys prefer that I make an Electron version with spoofing or just close the project? I'm pretty sure they'll end up banning people who use the third-party APIs. |
Well since it works totally fine on Android with 29.3, it makes sense to me to keep it open. I still use it whenever I have lots of pokemon. |
I love the project, not too sure how protobuf would work out through
electron, but I'd love to see any kind of continuation. Honestly Niantic
doesn't seem to have any idea how to secure the platform yet. There looks
like months of being undetectable ahead or they would have version locked
the servers.
|
Also seems like their bugger concern was the pokemon maps. The kinds of
things that flooded the servers with requests causing instability.
|
Still using a root method, but the apk doesn't need to be modified anymore. https://www.reddit.com/r/pokemongodev/comments/4viajn/allow_mitm_again_with_app_version_030_xposed/ |
Is it possible, instead of using a proxy server, to scan the inventory to know the IVs? |
@quincygogo How would you “scan the inventory” without man-in-the-middling? |
@mathiasbynens I've seen some bots can know the IVs of your inventory like https://github.com/Novalys/PokemonGo-Bot-SimpleGUI , http://www.ownedcore.com/forums/pokemon-go/pokemon-go-hacks-cheats/566323-necrobot-nice-gui-coded-me.html It might require us to use third-party API, but looks doable |
@quincygogo The benefit of the MITM method is that it doesn't make API calls and you don't have to use your login information. I'd much prefer being able to find a similar method, if possible, than potentially sending info that Niantic could later ban from. |
I might just require rooting to use the app and call it a day. I can jailbreak my iPhone and install ssl kill switch. |
Note that Pokémon GO crashes on startup on jailbroken devices (by design — they go out of their way to detect it!), but there’s a workaround. |
Thanks for the information, @mathiasbynens. |
If you want to avoid rooting or jailbreaking you can try andyroid or
bluestacks. Both run on OS X fairly well, and all you need to do is log in
then delete the app data each time. At least that's what I do to avoid
getting any weirdness from the account being out of sync or anything.
|
Yes. But better rooted phone then loosing account for breaking TOS. |
It looks like the first ban-wave is coming out. Definitely not intending to do the API version now. |
I use this without rooting. I run NOx App Player on my windows desktop now
with a VM running the latest Ubuntu in bridged network mode. I use the old
apk, take the login error, and close out, but the mitm intercepts the info
it needs just fine.
|
@macmanchomp help me to understand. I have an ESXi Server running an Ubuntu server with latest build. Then log into POGO using NOX App Player and I will receive an error and it will still capture the information I needed? Is this detectable? Is using NOX detectable? |
Potentially, Niantic could detect the bad version requests. Detecting the
use of NOx App Player should be impossible unless the code was there in
version 0.29.3 which we have to use to establish the connection through the
proxy since SSL pinning was implemented in the next version. Logging in
through the old version may become a red flag later, but I don't believe
it's of concern yet, since they're currently focused on API abuse. But you
never know.
|
Sorry I've lost the context but can anyone please summary a little? I'm using an IOS device, does this great tool still work on IOS? If so, what should I do to make it work? I've tried using proxy server directly but I failed to login |
What we were just talking about was the use of an Android emulator to run On Aug 13, 2016 12:31 AM, "quincygogo" [email protected] wrote:
|
There is a very high chance using Android Emulator will get your accounts banned too. |
Hi does it still work with the old apk ? I've tried with 0.29.0 and 0.29.3 but when i launch the game, the docker crash ( the website crash and the server doesnt appear in the list when i use the command "docker ps"). Does it work for anyone or is it a problem on my side ? |
Still working for me |
I haven't used this in a couple weeks and I keep getting an error now. Not sure if it is because of the latest update, but here is the .log file: 0 info it worked if it ends with ok |
You might try npm install again. If you updated from an old version you
might just need to install the libraries that were implemented between the
two versions. Hope this helps.
|
It's still working for me — Are the DPS numbers for each move still P.S. @justinleewells this app is baller. Thank you a million times over. On Wed, Aug 24, 2016 at 1:53 AM, macmanchomp [email protected]
|
This app becomes less and less useful with the addition of the appraisal system in combination with https://pokeassistant.com/main/ivcalculator. By following the instructions I have analyzed dozens of pokemon and only 1 had an IV range of larger than 4%. Most of the time it hits it right on the head first try. Just an FYI |
Still usefull for bulk checking and pokemon counting :D |
DPS computation in pokemon.js fail when Ditto is in the inventory because the move 242 is missing from moves.json and this generate a crash. Here is the problematic line: To avoid the crash, I disabled the dps computation with the following change in pokemon.js: // calculate dps |
@dglaude Thank you for the workaround. I tried adding an entry for Transform in moves.json but it didn't solve the problem. |
@buckycu I also tried to create from scratch the missing move 242. But apparently my change were not taken into account. I might be missing one step or the other. Another issue I have is to know if the new formula are taken into account or what should I modify where. |
@dglaude Thank you for this workaround! This is still the quickest way to get IV info, I hate having to manually enter stats into an IV calc and half the time there's 2 or more possible IV ranges. If @justinleewells is still around it'd be great to have this updated with Gen 2 when it releases next week. |
I honestly didn't even know that people were still using this tool. Glad to see that it's still useful! If someone wants to submit a PR updating the game data files for the new gen, I'd be glad to merge it. |
And I honestly wasn't aware that the pokemon-go-mitm is still workin with current versions 😂 |
@justinleewells Due to the addition of baby pokemon from Gen 2, an update is needed for an inventory with new pokemon. Could you please tell me which files needs to be updated? Back when trying to solve the Ditto issue, I tried editing game/moves.json manually but it didn't work. I found the new game master file here: https://gist.githubusercontent.com/anonymous/4c7c0032156a351a7fbbbc91b2d6c333/raw/a651a52fd6ec0f5ef7c8158456bcf6882090ea13/GAME_MASTER-12.12 |
You'll have to make a script that converts the new game data into the same format the app uses, and it should be added to game/moves.json and game/pokemon.json. I'm not sure why that didn't work before, but that's certainly where it's supposed to go. |
Just wanted to chime in here and say that I'm still using this project as well.... I use an old phone with an outdated client to get the info. Thanks @justinleewells for the effort. If anybody manages to convert the new data into an updated pokemon.json and moves.json please send it upstream. Thanks |
Here are the updated pokemon.json and moves.json. However, simply updating these files is not enough. @justinleewells, it seems that the variable pkmn in lib/pokemon.js is undefined for Gen 2 pokemon and that breaks the code. Probably because some modules don't support new pokemon? A way to get around this (at least to get through to the spreadsheet with minor errors) is to set relevant variables to certain values whenever pkmn is undefined. Please see the modified pokemon.js here -- line 29-36 and 46-49. Line 66-72 is to treat Ditto issue as mentioned by @dglaude . Such pokemon will appear on the spreadsheet as a Bulbasaur with the name, for example, 'Unknown_enum_value_pokemonid_172'. (It's actually a Pichu). |
I might have found a bug in the "Evolution" tab. I wish I would understand the code better and know in witch source file this stuff is computed, but I don't, so don't expect a fix from me until someone point the finger on it for me. ;-) Name Cost Count Candy Evos Evos+ Xfers |
Apparently I am the happy owner of a baby Pokemon that comes with a new
kind of Candy.
So now it is the inventory part that went wrong and crashed everything.
So if you crash with this error message:
git/pogo-optimizer/lib/inventory.js:61
c.id = p.id;
You might want my really ugly hack to inventory.js to fill with value 99
two variables if a candy kind is not found.
Here is what I did:
Inventory.prototype.initialize = function (candy, pokemon) {
var self = this;
this.data.candy = candy;
_.forEach(this.data.candy, function (c) {
if (c.id === undefined) {
var p = _.find(PokemonData, {name: c.family_id});
if (p !== undefined) {
c.id = p.id;
c.cost = p.candy;
} else {
c.id = 99;
c.cost = 99;
}
}
});
I hope 2017 will bring you happiness and a lot of Pokemon. ;-)
2016-12-19 14:30 GMT+01:00 buckycu <[email protected]>:
… Here are the updated pokemon.json and moves.json
<https://github.com/buckycu/pogo-gen2>.
However, simply updating these files is not enough. @justinleewells
<https://github.com/justinleewells>, it seems that the variable pkmn in
lib/pokemon.js is undefined for Gen 2 pokemon and that breaks the code.
Probably because some modules don't support new pokemon?
A way to get around this (at least to get through to the spreadsheet with
minor errors) is to set relevant variables to certain values whenever pkmn
is undefined. Please see the modified pokemon.js here
<https://github.com/buckycu/pogo-gen2> -- line 29-36 and 46-49. Line
66-72 is to treat Ditto issue as mentioned by @dglaude
<https://github.com/dglaude> . Such pokemon will appear on the
spreadsheet as a Bulbasaur with the name, for example,
'Unknown_enum_value_pokemonid_172'. (It's actually a Pichu).
—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
<#211 (comment)>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/ASiRnBQm6P74IDmfes21atrigsXt8itqks5rJob6gaJpZM4JY_Di>
.
|
I'm no longer able to log in via PTC on Android running version .35, I always get the "Unable to connect" message when trying to log in. I can log in via Google, but that doesn't help since my main account is PTC. I'm assuming they changed the PTC login servers and so all older versions are SOL. Anyone else experiencing this/have a workaround? Thanks |
For a couple weeks now, I'm unable to login with 0.35.0 on Google account, even directly, after disabling the proxy. Gives me 'unable to authenticate.' |
It stops working for me. Last time I used this was three days ago and it was fine via the old 0.29 client. Now it seems like it can't get past authentication. |
Project still works fine with the original release version of PoGo. As of now, you can still catch pokemon on a newer installation, and then switch to an older version of the app to analyze the data.