What's new

Tutorial How to steal anyones Xbox 360 Avatar using Fiddler.

P

Professional

Administrator
Administrator
Messages
6,059
Reaction score
4,901
Today I will be showing you how to steal anyones Xbox 360 Avatar using Fiddler!
First of all you will need Windows 10, Xbox Original Avatars app and Xbox Console Companion from the Microsoft store and Fiddler
You do not require an Xbox console to do this tutorial!

So you will want to configure fiddler to accept traffic from xbox by going to the WinConfig button on the top left of fiddler
nV9BRzi.png

select the Xbox Original Avatars and Xbox Console Companion apps from the list, or simply Exempt All and save.
jLZidhy.png

You will then want to go to Tools>Options>HTTPs then select Capture HTTPS CONNECTs and Decrypt HTTPS traffic
te20JpN.png
You will then want to make sure fiddler is capturing after you open Xbox Console Companion and then continue to search a gamertag, for this example I am going to be using the Enforcement team member XBLPET Alpha
pJPnTcO.png

When you have loaded their profile like this then you will want to go back to fiddler
e3IV0HF.png

Then you will find a url containing "avatarservices" you will then want to double click that
a18aKcj.png

Right click and copy the manifest to clipboard
BiXvxMV.png

The manifest should look something like this
Code:
manifest=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
you will want to trim it down to this
Code:
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
You can close console companion now and pause capture on fiddler while you open Xbox Original Avatars and start capturing on fiddler again, then make a change to your avatar and click save.
Ahq99fI.png

Then you will want to open the composer tab on fiddler and drag the new avatar request into composer
nvbdDyF.png

Then you will want to replace the manifest with the one you captured before and click execute
1QmZhEg.png

If done successfully you wil be able to take anyones avatar even xbox staff members or exclusive items that you aren't supposed to have!
UgUFBPv.png

Here's a copy of my avatar manifest if you want to use that! feel free to post avatars in the comments for other people to use too!

Code:
AAAAAL8AAAA/gAAAABAAAAMfAAPByPEJoZyy4AAIAAADNAADwcjxCaGcsuAAIAAAAzwAA8HI8QmhnLLgAACAAALoAAPByPEJoZyy4AAAAAAAAAAAAAAAAAAAAAAAACAAAoYAA8HI8QmhnLLgAAAAAAAAAAAAAAAAAAAAAAAAQAACcQADwcjxCaGcsuA/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA//jbuf+QZjb/XDss/5F6Uf9PRj3/d23T/09GPf+BJx//gScfAAAAAgAAAAHByPEJoZyy4AACAAAAAAAAAAAAAAAAAAAAAAABAAIAA8HI8QmhnLLgAAEAAAAAAAAAAAAAAAAAAAAAACAAOgABwcjxCaGcsuAAIAAAAAAAAAAAAAAAAAAAAAAACDFG0tHDwpCpWFgIHAAIAAAAAAAAAAAAAAAAAAAAAAAQAKAAAcHI8QmhnLLgABAAAAAAAAAAAAAAAAAAAAAABURODrKjyBTZYkdSB/UFRAAAAAAAAAAAAAAAAAAAAAAQAPuRIlPEdVE7WFgIHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAA6AAHByPEJoZyy4AAgAAAAAAAAAAAAAAAAAAAAAAAQAKAAAcHI8QmhnLLgABAAAAAAAAAAAAAAAAAAAAAAAAgxRtLRw8KQqVhYCBwACAAAAAAAAAAAAAAAAAAAAAAABAJTAAPByPEJoZyy4AAEAAAAAAAAAAAAAAAAAADgAA/8SDeFGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
 
Top Bottom