New save structure

[xoreaxeax]

Found out how to dump saves once again, so today I am sharing the new structure of the save. This lets us know what information the developers can see when they check over our saves. Note that all information that could be used to identify me has been edited out.

{
    "playerUId": "DEADBEEF",
    "selectedCamperIndex": 0,
    "selectedSlasherIndex": 268435456,
    "firstTimePlaying": false,
    "consecutiveMatchStreak": 0,
    "hasBeenGivenKillerTutorialEndReward": true,
    "hasBeenGivenSurvivorTutorialEndReward": true,
    "currentSeasonTicks": 0123456789,
    "lastConnectedCharacterIndex": 268435456,
    "disconnectPenaltyTime": "0001-01-01T00:00:00.000Z",
    "lastMatchEndTime": "0001-01-01T00:00:00.000Z",
    "lastMatchStartTime": "0001-01-01T00:00:00.000Z",
    "lastKillerMatchEndTime": "0001-01-01T00:00:00.000Z",
    "lastSurvivorMatchEndTime": "0001-01-01T00:00:00.000Z",
    "experience": 1000000,
    "fearTokensMigrated": true,
    "ongoingGameTime": "0001-01-01T00:00:00.000Z",
    "cumulativeMatches": 0,
    "pageVisited": [ {
        "key": "CharacterMenuContextComponent",
        "value": true
    } ],
    "cumulativeMatchesAsSurvivor": 0,
    "cumulativeMatchesAsKiller": 0,
    "lastMatchTimestamp": "0001.01.01-00.00.00",
    "lastSessionTimestamp": "0001.01.01-00.00.00",
    "cumulativeSessions": 0,
    "cumulativePlaytime": "0123456789",
    "characterData": [ {
        "key": 0,
        "data": {
            "bloodwebLevel": 1,
            "bloodWebData": {
            },
            "characterLoadoutData": {
                "item": "_EMPTY_",
                "camperPerks": [ "_EMPTY_", "_LOCKED_", "_LOCKED_", "_LOCKED_" ],
                "camperFavor": "_EMPTY_",
                "power": "None",
                "powerAddOns": [ "_EMPTY_", "_EMPTY_" ],
                "slasherFavor": "_EMPTY_"
            },
            "inventory": [ {
                "i": "Bond,1"
            }, {
                "i": "Prove_Thyself,1"
            }, {
                "i": "leader,1"
            } ],
            "currentCustomization": [ "D_Head01", "D_Torso01", "D_Legs01" ]
        }
    }, {
        "key": 268435456,
        "data": {
            "bloodwebLevel": 1,
            "timesConfronted": 0,
            "bloodWebData": {
                "versionNumber": 4,
                "level": 1
            },
            "characterLoadoutData": {
                "item": "_EMPTY_",
                "camperFavor": "_EMPTY_",
                "power": "Item_Slasher_Beartrap",
                "powerAddOns": [ "_EMPTY_", "_EMPTY_" ],
                "slasherPerks": [ "_EMPTY_", "_LOCKED_", "_LOCKED_", "_LOCKED_" ],
                "slasherFavor": "_EMPTY_"
            },
            "inventory": [ {
                "i": "Agitation,1"
            }, {
                "i": "Brutal_Strength,1"
            }, {
                "i": "Unnerving_Presence,1"
            } ],
            "currentCustomization": [ "S01_Head01", "S01_Body01", "S01_Weapon01" ]
        }
    } ],
    "dailyRituals": {
        "lastRitualReceivedDate": "0001-01-01T00:00:00.000Z",
        "lastRitualPopupDate": "0001-01-01T00:00:00.000Z",
        "lastRitualDismissedDate": "0001-01-01T00:00:00.000Z",
        "rituals": [
        ]
    },
    "lastLoadout": {
        "item": "_EMPTY_",
        "camperFavor": "_EMPTY_",
        "power": "_EMPTY_",
        "powerAddOns": [ "_EMPTY_", "_EMPTY_" ],
        "slasherFavor": "_EMPTY_"
    },
    "versionNumber": 7
}

I only included Dwight and Trapper in this just as an example, however in a real save all the characters (even ones you don't own) are present.

[Extrapolated]

Nice one, not sure if they can see modified BP based on cumulative matches tho.

[xoreaxeax]

Nice one, not sure if they can see modified BP based on cumulative matches tho.

They can't but they do keep multiple copies of these saves. Some simple comparisons on their end are not too difficult.

[hroq]

They can't but they do keep multiple copies of these saves. Some simple comparisons on their end are not too difficult.

Do we have any idea how many copies they keep or how long they keep them for? I imagine they get rid of them or overwrite them at some point.

[xoreaxeax]

Do we have any idea how many copies they keep or how long they keep them for? I imagine they get rid of them or overwrite them at some point.

Hard to tell since it's all done in backend

[federama]

Can you use Fiddler to temporary modify your bp or any other currency just tu progress in the bloodweb a couple of levels?? Or it will be detected?

[xoreaxeax]

Can you use Fiddler to temporary modify your bp or any other currency just tu progress in the bloodweb a couple of levels?? Or it will be detected?

Off topic, and Fiddler is supposedly detected anyway

[Sugoi4]

Off topic, and Fiddler is supposedly detected anyway

Can confirm, got banned while only using Fiddler after 1 week.

[idontlikedbd]

Sounds good, doesnt work

[xoreaxeax]

Sounds good, doesnt work

No idea what you're trying to say here lol

[idontlikedbd]

No idea what you're trying to say here lol

i dont remember why i said that, i think i replied the wrong post, my bad xD

[Florian2419]

Can they see when u unlocked the teachable perks?

[xoreaxeax]

Can they see when u unlocked the teachable perks?

Well yes and no. When you buy something from the shrine, it writes the perk to your save (which isn't timestamped) and also adds it to your inventory (timestamped). Inventory and save are two separate things, however the inventory is completely server sided and is very difficult to manipulate. However, that's not all. While this is the normal behaviour of the shrine, if you use something like Fiddler to manipulate it it writes the perk to your save but won't update your inventory, as there is server sided validation happening here. While this may sound ideal initially, you have to keep in mind that the devs can compare the teachables in your save (it's not hard to tell if you bought from shrine or unlocked it from bloodweb especially if you don't own the character) with your inventory. If you have teachables that came out after patch 2.0.0 in your save that don't exist in your inventory then that's a detection vector for the devs to use.

[tsv129]

Well yes and no. When you buy something from the shrine, it writes the perk to your save (which isn't timestamped) and also adds it to your inventory (timestamped). Inventory and save are two separate things, however the inventory is completely server sided and is very difficult to manipulate. However, that's not all. While this is the normal behaviour of the shrine, if you use something like Fiddler to manipulate it it writes the perk to your save but won't update your inventory, as there is server sided validation happening here. While this may sound ideal initially, you have to keep in mind that the devs can compare the teachables in your save (it's not hard to tell if you bought from shrine or unlocked it from bloodweb especially if you don't own the character) with your inventory. If you have teachables that came out after patch 2.0.0 in your save that don't exist in your inventory then that's a detection vector for the devs to use.

Thanks for the detailed info, but i want to ask you some questions. As far as I understanded both of this methods are detectable by devs:
1. Temporary unlock DLC by CE to access teachables
2. Modify save to unlock teachables (Beside the fact that save modification is detectable)

But I'm not sure that I understanded correctly so I have a couple of questions:
1. Can developers know if I bought a DLC?
2. If they can, they do it based on the save file? For example: if i have bloodweb 38 Pig (licensed killer) with couple of items and perks they assume I bought it?
3. If they can tell whether or not I bought DLC, and I have leveled up characters from DLC's that i don't have and teachables from them is it enough evidence for a ban?

I would really appreciate your help these questions.

[jipoka]

Sorry to necro but does this imply devs won't see your item inventory? I've been trying to keep mine looking legit but it would be nice to just add a few hundred of each if there's no risk.