📱 Cross-Platform Mobile Architecture (AOS / iOS)

Bypassing PC clients (like Purple) is straightforward because we can inject HTTP_PROXY variables directly into the process. Mobile clients (Android/iOS) for Lineage W and Aion require a different architectural approach because they enforce SSL Pinning and hardcode their DNS endpoints.

The 3-Step Mobile Bypass Solution

1. DNS Spoofing (Infrastructure Level)

Instead of modifying the game client's IP addresses (which triggers integrity checks), we spoof the DNS.

• We run CoreDNS or ind9 on our infrastructure.
• When the mobile client requests uth.plaync.com, our DNS server replies with the IP of our core-auth Rust server.

2. SSL Pinning Bypass (Frida / Xposed)

Mobile apps refuse to connect to our custom AuthServer because the SSL Certificate doesn't match NCSoft's pinned certificate.

• Android (AOS): We provide players with a pre-patched APK. We use pktool to inject the rida-gadget.so into the game library. When the game boots, Frida automatically hooks the SSL verification function (TrustManagerImpl.verifyChain) and returns rue, completely bypassing the SSL Pinning.
• iOS: Players must use a Jailbroken device or sideload an IPA containing the SSL Kill Switch 2 tweak (via TrollStore or AltStore).

3. Cross-Platform Database Schema

The database schemas in game-lineagew and game-aion have been officially updated with a platform column.

• platform: 'PC' (Purple / NC Launcher)
• platform: 'AOS' (Google Play Auth / Lineage Mobile)
• platform: 'IOS' (Apple Sign-in)

Our Rust AuthServer will parse the User-Agent or Mobile handshake headers and route the authentication token to the correct OAuth verifier.