Packet Editing Flash Online Games

dcdc · 11th March 2005, 02:25

Fancied hacking a flash game, haven't done much packet editing before. I want to change a string that holds a monetary value for example, I did a packet monitor, searched the hex value and found it, set up a filter to change it and it changes the value on my screen but I think that's just changing what my browser is displaying.

What is the best way to go about doing it so you can make your changes be reflected server side as well.

Kosire · 11th March 2005, 02:57

To change the value serverside you would need to run the game code that submits code such as "Player X killed Player Y Gaining him 1000 Gold" over and over.

ATM it seems all your doing is editing the value as it comes in from the server, therefore only changing your money on your computer.

Link to game? I could post some example code.

Kradrats · 11th March 2005, 03:10

http://www.gangstawar.com/

if you could make amoney hack for that game that'd be awesome!

dcdc · 11th March 2005, 03:15

You have to pay for the game so you probably won't want to bother.

I guess I've been sniffing around received packets when I need to be looking at sent packets, problem is transactions occur very rarely and not usually controlled by the user as it's a fantasy football type game.

Kosire · 11th March 2005, 03:23

Doesn't matter if I have to pay, if its Flash Based i'll just bypass that. Link to site and i'll decompile the Flash and tell ya if its possible.

dcdc · 11th March 2005, 03:28

Ta Shadows:

http://www.cm-online.com/main/authentication/viewLogin

Edited to say: I can give you my login if you want. Also you can't really download any flash file, it's ASP /w Flash incorporated so it's more of an web online game.

Kosire · 11th March 2005, 03:39

Hmm I see, so its not actually Flash thats submitting any scores? Also say u were able to send any packet Flash sends over and over, would there be anywhere in the game that would help?

Or is this game kinda based on luck?

dcdc · 11th March 2005, 03:51

Well at first I thought flash was sending but then I realised it was the ASP that was doing the client/server communication. It should be easier therefore to hack.

It's not based on luck, but your balance for example only changes if you receive funds for selling a player or lose funds for buying a player, but that only occurs when the server does it's "update" which is every night at midnight so I'm not sure how I can get the packet I need to change the value on the server.

This is quite tricky so I'm determined to get it working

First with WPE ofcourse.

Kosire · 11th March 2005, 03:58

Sounds fairly unhackable to me, specially if the Client/Server packets are encrypted which they should be.

The server would check if you own that player before selling him and giving you money so sending a ton of sell this player packets wouldn't do much?

dcdc · 11th March 2005, 04:29

Yeh I think I'll have to give up on this. I made a bid for a player and got the packet which contained the amount the bid was for, so I thought I could change the bid value to minus [enter large number here] so when accepted my funds would increase by so many but had no luck with that. A lot of the packets seem to be encrypted though, All I get is hex values which don't amount to anything legible.

Oh well, thanks for the help.

No1uKnow · 11th March 2005, 14:53

You'd have to actually hack their site to cheat on it, really not worth it lol =X that game is kinda lame anyways, I played it for like 20 minutes when it was free.

dcdc · 12th March 2005, 01:50

Quote:

Originally Posted by no1uknow

You'd have to actually hack their site to cheat on it, really not worth it lol =X that game is kinda lame anyways, I played it for like 20 minutes when it was free.

Yep it's lame. But I usually play the actual Championship Manager game and I managed to hack that by simple packet editing.

11th March 2005, 02:25	#1
dcdc 696F776E75 Necromancer of the Light Join Date: 31st Jul 2002 Posts: 676	Packet Editing Flash Online Games Fancied hacking a flash game, haven't done much packet editing before. I want to change a string that holds a monetary value for example, I did a packet monitor, searched the hex value and found it, set up a filter to change it and it changes the value on my screen but I think that's just changing what my browser is displaying. What is the best way to go about doing it so you can make your changes be reflected server side as well. __________________ When you've got insomnia, you're never really asleep, and you're never really awake..

11th March 2005, 03:10	#3
Kradrats Assassin Join Date: 21st Aug 2004 Posts: 177	http://www.gangstawar.com/ if you could make amoney hack for that game that'd be awesome! Last edited by Kradrats; 11th March 2005 at 03:14..

11th March 2005, 03:15	#4
dcdc 696F776E75 Necromancer of the Light Join Date: 31st Jul 2002 Posts: 676	You have to pay for the game so you probably won't want to bother. I guess I've been sniffing around received packets when I need to be looking at sent packets, problem is transactions occur very rarely and not usually controlled by the user as it's a fantasy football type game. __________________ When you've got insomnia, you're never really asleep, and you're never really awake..

11th March 2005, 03:28	#6
dcdc 696F776E75 Necromancer of the Light Join Date: 31st Jul 2002 Posts: 676	Ta Shadows: http://www.cm-online.com/main/authentication/viewLogin Edited to say: I can give you my login if you want. Also you can't really download any flash file, it's ASP /w Flash incorporated so it's more of an web online game. __________________ When you've got insomnia, you're never really asleep, and you're never really awake.. Last edited by dcdc; 11th March 2005 at 03:31..

11th March 2005, 03:51	#8
dcdc 696F776E75 Necromancer of the Light Join Date: 31st Jul 2002 Posts: 676	Well at first I thought flash was sending but then I realised it was the ASP that was doing the client/server communication. It should be easier therefore to hack. It's not based on luck, but your balance for example only changes if you receive funds for selling a player or lose funds for buying a player, but that only occurs when the server does it's "update" which is every night at midnight so I'm not sure how I can get the packet I need to change the value on the server. This is quite tricky so I'm determined to get it working First with WPE ofcourse. __________________ When you've got insomnia, you're never really asleep, and you're never really awake..

11th March 2005, 04:29	#10
dcdc 696F776E75 Necromancer of the Light Join Date: 31st Jul 2002 Posts: 676	Yeh I think I'll have to give up on this. I made a bid for a player and got the packet which contained the amount the bid was for, so I thought I could change the bid value to minus [enter large number here] so when accepted my funds would increase by so many but had no luck with that. A lot of the packets seem to be encrypted though, All I get is hex values which don't amount to anything legible. Oh well, thanks for the help. __________________ When you've got insomnia, you're never really asleep, and you're never really awake..