Skip to content

Instantly share code, notes, and snippets.

@Douile
Last active March 3, 2024 02:26
Show Gist options
  • Save Douile/67daa69b59255bcdc390025053dbe295 to your computer and use it in GitHub Desktop.
Save Douile/67daa69b59255bcdc390025053dbe295 to your computer and use it in GitHub Desktop.
Getting epic games tokens (fortnite)

A guide on how to packet sniff launcher and fortnite tokens

With images

Step by step

  1. Install and run Fiddler 4
  2. Enable Https capture and decryption
  • Open tools menu image
  • Open options image
  • Goto https tab image
  • Enable Capture HTTPS Connects and Decrypt HTTPS traffic. If you have to install certificates you will have to press yes and give administrator access. image
  1. Launch epic games launcher and login (unless you have autologin)
  2. Retrieve your launcher token  * Find request to /account/api/oauth/token
  • Look in headers for Authorization image
  • Remove basic from the beginning
  • The remaining characters are your launcher token
  1. Pause capture (f12)
  2. Launch fortnite
  3. When the game says connecting/update restart capture (f12)
  4. Retrieve your launcher token  * Find request to /acount/api/oauth/token as seen before (not the one you used for launcher token)
  • Look in headers for Authorization
  • Remove basic from the beginning
  • The remaining characters are your fortnite token
  1. Have fun using your tokens to make api requests

Original guide

pfaw


I am in no way associated with epic games, all servers belong to them. This information provided without warranty and with no guarantee. By using this guide you agree that I am in no way responsible for your actions.

@BlueRed-Dev
Copy link

btw this gist is a bit wrong, it not give your token, the token you got from BASIC is the oauth2 client authentification basic token, the real token is from the same request, but in the response, in the JSON key access_token, epicgames does not provide a fix token according to oauth2. So if you want to get a token at anytime, see the form body on the request, where you can maybe see device_auth, refresh_token in the body.

@BlebDaPleb
Copy link

hi do others people here want new epic/fortnite api here?

yeah im looking for it, add me on disc "vxralware." , period included

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment