Pages

Friday, 10 January 2014

Flash games security, or so called 'cheating', Part I











If you have ever been wondering how all these amazing score results in flash games are achieved, here you will find it out. I'm going to write set of articles about flash games security, this is part I and we will talk about cheating possibility during communication: client side - server.

Most of simple flash games are runned only on 'client side' and they have no communication with server until it wants to send your score to best results list. This makes it simply to cheat by changing values during that communication.

I'm going to show it step by step, we will use Tamper Data add-on for firefox which simply allows us to modify POST parameters in "real time". Of course we can use tools like Burp Suite, but for non advanced users, for this task, it's simpler to use add-on like Tamper Data.
Download:

I also set up testing environment with MyBB forum and flash games plugin 'GamesSection', I'm going to show it on pacman game, which is included by default with plugin, but it works with all the games that don't have server side control, during game.




















Before start the game we have to open Tamper Data (Tools -> Tamper Data) and we got window pop up:



















Now we can click 'Start Tamper' and start playing, its advised to close other websites, otherwise we will get many pop ups, with every tab page requests.
So we simply play game, until our lives finish:




















When we lose, website will try to save our points for the ranking, so Tamper Data will pop up:








Of course we click Tamper, and we can uncheck continue box. Request details will come:











Now in Post_Data, we have to find where scores are included, we can can do it by looking manually, or search with ctr+f for value of points we had at the end (70 in my example). It appears here in 3 places, but only last value 'gscore' is sent to ranking:






we can modify it however we want:






after all, click 'ok', it will ask us to change 'Content-Length', of course click 'ok'









if score was not additionaly checked by server, it will appear in ranking:















This method works with most of simple games with ranking and all the games in forums plugins. In next part I will show how to change values during game, by editing memory with CheatEngine, which works also with some facebook games and for example 'Unicorn Robot Attack' game.

67 comments:

  1. I'm going to write set of articles about flash games security....

    ReplyDelete
    Replies
    1. Yeah, next part will be posted soon ;)

      Delete
  2. Most of simple flash games are runned only on 'client side' and they have no communication with server until it wants to send your score to best results list. This makes it simply to cheat by changing values during that communication. juegosmon

    ReplyDelete
  3. Aw, this was a very nice post. Finding the time and actual effort to create a top notch article… but what can I say… I procrastinate a lot and don't manage to get anything done, navigate to this website!

    ReplyDelete
  4. If you have a Playstation 1, you can get driving games and adventure games that kids will love and be able to play all day for not much money.
    free robux

    ReplyDelete
  5. Interesting topic for a blog. I have been searching the Internet for fun and came upon your website. Fabulous post. Thanks a ton for sharing your knowledge! It is great to see that some people still put in an effort into managing their websites. I'll be sure to check back again real soon.
    visual studio c#

    ReplyDelete
  6. You can also get a lot of games for not a lot of money. That includes some of the all-time bests, including Super Nintendo games and Playstation 1 games that are really cheap but worth it when you plug them in and play.
    www.toomkygames.com

    ReplyDelete
  7. I really enjoyed reading this post, big fan. Keep up the good work andplease tell me when can you publish more articles or where can I read more on the subject?
    c# language

    ReplyDelete
  8. I found lots of interesting information here.Great work.. virtual

    ReplyDelete
  9. Flash games have steadily increased in both availability and popularity recently, although it would seem that supply has not kept up with demand. Motu Patlu Games

    ReplyDelete
  10. Fantastic blog! Do you have any tips and hints for writers? I’m planning to start my own website soon but I’m a little lost on everything. Would you propose starting with a free platform like WordPress or go for a paid option? There are so many options out there that I’m completely overwhelmed .. Any suggestions? Many thanks! motu patlu games

    ReplyDelete
  11. In the event that you need your children to be tranquil, it's not generally simple. You generally have them play in the yard or sit in front of the TV. In the event that you need them to accomplish something else, you ought to investigate purchasing a Nintendo 64 framework or a Sega Genesis amusement that will engage them amid their breaks. http://madden18gameplay.com

    ReplyDelete
  12. Your children are heavily influenced by education. It not only helps shape their view of the world and their ability to deal with life, it also plays a role in their strength of character.http://www.thesisexample.info/

    ReplyDelete
  13. I have recently started a blog, the info you provide on this site has helped me greatly. Thanks for all of your time & work. العاب فلاش

    ReplyDelete
  14. The internet has taken a new dimension where by the kids can log into and access their ideal car games and kids games altogether. However a child must know the exact address of a certain website so as to access such a privilege. Golf Clash Hack

    ReplyDelete
  15. Although this practice ensures that appropriate care is being delivered, one can never be too careful. A home security camera can enable family members to keep an eye on what is happening.Learn about surveillance camera

    ReplyDelete
  16. The blog is like an ocean, I wish to drown in.
    clahs royale gemmes

    ReplyDelete
  17. Your articles are always interesting and understandable. Thank you! life hack apk

    ReplyDelete
  18. However in the event that you've hit the fairway for any time allotment you know this essentially isn't valid: rehearse doesn't make culminate. Practice makes changeless. So hone what is truly important to play at your pinnacle. Your inward session of golf requires a similar consideration . www.hack4clashroyale.com

    ReplyDelete
  19. At least, as far as Sony and Microsoft are concerned, you can wave goodbye to playing used games on their systems. dokkan battle cheats

    ReplyDelete
  20. This comment has been removed by the author.

    ReplyDelete
  21. You do have short chubby minorities who are smart as all get out! You have all kinds of combinations of people who ARE smart!Jay

    ReplyDelete
  22. It could be where it was the wrong type of game for the wrong person. This is where the categories come in. Maybe a game has a bit of violence.uptobox premium compte code

    ReplyDelete
  23. I mean it is just like every other game where a princess gets captured and you need to save her.clash of kings hack online

    ReplyDelete
  24. I have recently started a blog, the info you provide on this site has helped me greatly. Thanks for all of your time & work. bingo site

    ReplyDelete
  25. I had an old Acorn Electron, and this amusement was practically impeccable on this little machine. I miss my old Acorn Electron! InsaneSparrow

    ReplyDelete
  26. The blog was absolutely fantastic! Lot of great information which can be helpful in some or the other way. Keep updating the blog,looking forward for more contents...Great job, keep it up. Agen Domino

    ReplyDelete
  27. Subsequent to doing as such, their online gathering can instantly section the amusements free by going by their website. Unquestionably, it is another and current answer for play. IGGGAMES

    ReplyDelete
  28. as you gossip with human Cla Safflower Oil beings on the fitness center. The best and fastest way to lose weight and put off tummy fat all the time manner you want to attention and increase the depth of your exercises all people.
    http://www.drozhealthblog.com/cla-safflower-oil/

    ReplyDelete
  29. Nowadays it is really difficult to maintain privacy.Sports Android game

    ReplyDelete
  30. Thanks for posting this info. I just want to let you know that I just check out your site and I find it very interesting and informative.http://boomgunshack.com/

    ReplyDelete
  31. Some groups focus on the educational aspects while others are faith based and review the games from this angle. Find a group that meets your personal criteria and peruse the reviews on various games you are considering for your kids.cashpoker38.com/

    ReplyDelete
  32. with the goal that you can appreciate Biogenic Xr extraordinary climaxes On the off chance that you need to Make Your Bigger Naturally.
    http://www.healthprograme.com/biogenic-xr-reviews/

    ReplyDelete
  33. As one person acts out a word or a phrase and the other participant needs to guess the correct answer by understanding the sign language done by his teammate.judi online

    ReplyDelete
  34. let's have a look at... antidepressants Biogenic XR are intended to maintain you comfy. in preference to taking those capsules, learn how to correctly breathe throughout .
    http://xtrfact.com/biogenic-xr-uk/

    ReplyDelete
  35. It changed into approved by the fda in Cla Safflower Oil as an anti-weight problems drug. Lipase is responsible for supporting the frame take in fats.
    http://www.drozhealthblog.com/cla-safflower-oil/

    ReplyDelete
  36. Not a solitary second abandoned abandoning me in absolute shock.
    Mushroom

    ReplyDelete
  37. Thanks for your excellent posting! I quite enjoyed reading it, you happen to be a great author. I will remember to bookmark your blog and will eventually come back very soon. CASINO ONLINE

    ReplyDelete
  38. Thanks for your excellent posting! I quite enjoyed reading it, you happen to be a great author. I will remember to bookmark your blog and will eventually come back very soon. situs casino terpercaya

    ReplyDelete
  39. thank you for being given the opportunity to read this very perfect article. please visit the best sports betting around the world.Sbobet

    ReplyDelete
  40. It was nice unblock game . Very informative and expressive .things are easily play online at
    Y8

    ReplyDelete
  41. amazing article,thank you very much for the article and the information.. maybe if you can please visit our website judi online

    ReplyDelete
  42. Woow, that's awesome!

    Dont forget to visit our site agen poker if u want to know more about situs poker online

    Thanks Dude!

    ReplyDelete
  43. The quantity of male enhancement Testro T3 frauds over the years is clearly big They paintings inside the same genuine manner, the vendor controls.
    http://www.drozhealthblog.com/testro-t3-uk/

    ReplyDelete
  44. Articles on good and interesting Visit my website if you want to know more about
    Situs Judi Online

    ReplyDelete
  45. This comment has been removed by the author.

    ReplyDelete
  46. With more hardness in your erection Testx Core you are more ready to take care of business in an extremely fulfilling way.
    http://www.usadrugguide.com/testx-core-review/

    ReplyDelete

  47. It was nice unblock game . Very informative and expressive .things are easily play online at
    unblocked games 66

    ReplyDelete
  48. Understand that sometime Perlelux the producer will write few natural ingredients within the beginning and all the chemical and dangerous elements closer to the stop.
    http://www.usadrugguide.com/perlelux-ca/

    ReplyDelete
  49. playing poker it is a pleasure to waste time and relieve stress on the head go visit my website
    TaktikQQ

    ReplyDelete
  50. This can be expert either by CLA Safflower Oil strenuous exercises that assistance you to exhaust 500 calories regular or by having a thorough you 500 less calories.
    http://xtrfact.com/cla-safflower-oil/

    ReplyDelete
  51. Thanks for your information so useful for me.
    Thanks for sharing Domino QQ

    ReplyDelete
  52. You should give this program a go CLA Safflower Oil in the event that you are not kidding about weight reduction A debt of gratitude is in order for perusing.
    http://xtrfact.com/cla-safflower-oil/

    ReplyDelete
  53. playing poker it is a pleasure to waste time and relieve stress on the head go visit my website
    TaktikQQ

    ReplyDelete
  54. Thanks for your excellent posting! I quite enjoyed reading it, you happen to be a great author. I will remember to bookmark your blog and will eventually come back very soon. slot games

    ReplyDelete
  55. Good Article very interesting Dont forget to visit my site Bandar Poker if you want to know more about

    ReplyDelete
  56. Analyze costs and fixing Dermagen IQ records, and take in your fixings and Dermagen IQ for UK their capacities. You can without much of a stretch be prompt a great.
    http://www.usadrugguide.com/dermagen-iq/

    ReplyDelete
  57. TAKTIKQQ.COM AGEN POKER DAN DOMINOQQ TERBESAR DI ASIA

    [URL="http://taktikqq.com/app/Default0.aspx?lang=id"]AGEN POKER[/URL],
    [URL="http://taktikqq.com/app/Default0.aspx?lang=id"]POKER ONLINE[/URL],
    [URL="http://taktikqq.com/app/Default0.aspx?lang=id"]DOMINOQQ[/URL],
    [URL="http://taktikqq.com/app/Default0.aspx?lang=id"]DOMINO99[/URL],
    [URL="http://taktikqq.com/app/Default0.aspx?lang=id"]AGENQQ[/URL],
    [URL="http://taktikqq.com/app/Default0.aspx?lang=id"]DOMINO QIU QIU[/URL]

    [URL=http://taktikqq.com/app/Default0.aspx?lang=id][IMG]https://i.imgur.com/vToaC2f.gif[/IMG][/URL]

    Ingin Bermain Poker Online Dengan Uang Asli?
    Tapi Tidak Tahu Situs Poker Online Yang Bisa Di Percayai ?

    Yuk Segera Gabung Di Taktikqq.com Situs Poker Online Terpercaya dan Terbesar di Asia !!!
    Transaksi Cepat, Aman & Terpercaya.

    Tersedia 7 Games in 1 web :
    Poker, Domino QQ, AduQ, BandarQ, Sakong,Bandar Poker, Capsa Susun Online

    [B]Minimal Deposit Rp.25.000,-
    Minimal Withdraw Rp.25.000,-[/B]

    [COLOR="#800000"][B]Promo Bonus turn over setiap seminggu sekali :[/B][/COLOR]
    - Bonus Turn Over Mingguan 0.5%
    - Bonus Refferal 20%

    Daftar/Info silahkan hub CS kami di Livechat taktikqq.com atau:
    Pin BB : D8D32BCA
    Skype : taktikqq
    Whatsapp : +85569684057

    ReplyDelete
    Replies
    1. playing poker it is a pleasure to waste time and relieve stress on the head go visit my website
      TaktikQQ

      Delete
  58. This article makes very nice and interesting thanks for your experience Visit my website if you want to know more about
    sabung ayam

    ReplyDelete
  59. Thanks for your excellent posting! I quite enjoyed reading it, you happen to be a great author. I will remember to bookmark your blog and will eventually come back very soon. LIVE CASINO

    ReplyDelete
  60. Maybe the programmer is having a good laugh at you will he views you through your web cam or listens through your microphone not to mention looking through your photos.
    warframe platinum hack

    ReplyDelete
  61. playing poker it is a pleasure to waste time and relieve stress on the head go visit my website
    TaktikQQ

    ReplyDelete
  62. Institutions are also employing innovative ways to leverage the digital advantage for enhancing the learning experience at schools.foodball game

    ReplyDelete