A Windows tool for recovering game archive credentials and checking them against the files that use them.
Status
In development
Overview
FalkTracr is a Windows tool for recovering archive keys, passwords and custom data transforms from games. It can work from the executable and its supporting files or trace the game at runtime when the required value is created in memory.
Possible results are tested against the selected game data before they are shown. Looking like a key is not enough. The archive or container also has to confirm it.
The results that pass those checks are what appear on the Findings page. Each entry keeps the useful parts: the game build, container format and recovered details.
Features
Inspect executables or trace a running game
Check every result against the selected game files
Unreal PAK and IoStore keys
Godot encrypted PCK keys
UnityFS, UnityCN and wrapped Unity bundles
Vision.Octo catalogs and cache objects
ZIP, ZipCrypto and WinZip AES passwords
Leadwerks archive masks
Find supported containers across a game directory
Search user-created Windows memory dumps for keys and passwords
Keep separate investigations open in tabs
Terminal with history, completion and built-in help
The same recovery tools available from the command line
Gallery
A fresh FalkTracr session waiting for a target.A dynamic run recovering and checking the PCK key used by Batomon Showdown.Static analysis recovering and checking HoRoyal's SharedAssets transform.
