Hacking Question Pulling Splatoon2 related data from the Nintendo Switch Online app

RedDucks

Well-Known Member
Newcomer
Joined
Apr 28, 2017
Messages
95
Trophies
0
Age
25
XP
719
Country
United States
I know this is an old topic, but I thought I'd bring this to you guys' attention anyway. It is possible to generate `f`. It is a SHA256 HMAC of the users `id_token` from https://accounts.nintendo.com/connect/1.0.0/api/token and a static key found in the Nintendo Switch app. The key is common to each Switch app, and is encrypted somewhere within. To my knowledge only one person has gotten the key, and they (understandably) will not give it away or give any detailed guide on how to get it. All they told me is that it is encrypted and found somewhere in the app.

However the person who found the key DOES provide their own API for generating `f`. Sending a POST request to https://elifessler.com/s2s/api/gen with the payload:
Code:
{'naIdToken': id_token}
will return a usable `f` value.

If you guys want to be generate your own `f` values without using a 3rd party (whether it's for security reasons, speed, or whatever) then your best bet is looking through the Android APK, but right now I think using this service is the easiest.

The guy has some basic requirements that boil down to "don't be a dick and abuse", https://github.com/frozenpandaman/splatnet2statink/wiki/api-docs
 
  • Like
Reactions: eliboa

eliboa

Well-Known Member
Member
Joined
Jan 13, 2016
Messages
157
Trophies
0
XP
1,257
Country
France
@frozenpandaman finally found a way to generate this f*** token !!! Congrats to him :D I can understand why he doesn't want to release this, yet I bet Nintendo won't be happy about it and will soon release an update for the NSO ios/android app.
Thank you for the info
 
Last edited by eliboa,

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • No one is chatting at the moment.
    BakerMan @ BakerMan: @salazarcosplay yeah cod's still up