Packet Editing Flash Online Games

[dcdc]

Fancied hacking a flash game, haven't done much packet editing before. I want to change a string that holds a monetary value for example, I did a packet monitor, searched the hex value and found it, set up a filter to change it and it changes the value on my screen but I think that's just changing what my browser is displaying.

What is the best way to go about doing it so you can make your changes be reflected server side as well.

[Kosire]

To change the value serverside you would need to run the game code that submits code such as "Player X killed Player Y Gaining him 1000 Gold" over and over.

ATM it seems all your doing is editing the value as it comes in from the server, therefore only changing your money on your computer.

Link to game? I could post some example code.

[Kradrats]

http://www.gangstawar.com/

if you could make amoney hack for that game that'd be awesome! :D

[dcdc]

You have to pay for the game so you probably won't want to bother.

I guess I've been sniffing around received packets when I need to be looking at sent packets, problem is transactions occur very rarely and not usually controlled by the user as it's a fantasy football type game.

[Kosire]

Doesn't matter if I have to pay, if its Flash Based i'll just bypass that. Link to site and i'll decompile the Flash and tell ya if its possible.

[dcdc]

Ta Shadows:

http://www.cm-online.com/main/authentication/viewLogin

Edited to say: I can give you my login if you want. Also you can't really download any flash file, it's ASP /w Flash incorporated so it's more of an web online game.

[Kosire]

Hmm I see, so its not actually Flash thats submitting any scores? Also say u were able to send any packet Flash sends over and over, would there be anywhere in the game that would help?

Or is this game kinda based on luck?

[dcdc]

Well at first I thought flash was sending but then I realised it was the ASP that was doing the client/server communication. It should be easier therefore to hack.

It's not based on luck, but your balance for example only changes if you receive funds for selling a player or lose funds for buying a player, but that only occurs when the server does it's "update" which is every night at midnight so I'm not sure how I can get the packet I need to change the value on the server.

This is quite tricky so I'm determined to get it working :) First with WPE ofcourse.

[Kosire]

Sounds fairly unhackable to me, specially if the Client/Server packets are encrypted which they should be.

The server would check if you own that player before selling him and giving you money so sending a ton of sell this player packets wouldn't do much?

[dcdc]

Yeh I think I'll have to give up on this. I made a bid for a player and got the packet which contained the amount the bid was for, so I thought I could change the bid value to minus [enter large number here] so when accepted my funds would increase by so many but had no luck with that. A lot of the packets seem to be encrypted though, All I get is hex values which don't amount to anything legible.

Oh well, thanks for the help.

[No1uKnow]

You'd have to actually hack their site to cheat on it, really not worth it lol =X that game is kinda lame anyways, I played it for like 20 minutes when it was free.

[dcdc]

You'd have to actually hack their site to cheat on it, really not worth it lol =X that game is kinda lame anyways, I played it for like 20 minutes when it was free.

Yep it's lame. But I usually play the actual Championship Manager game and I managed to hack that by simple packet editing.