Friday, 10 January 2014

Flash games security, or so called 'cheating', Part I

If you have ever been wondering how all these amazing score results in flash games are achieved, here you will find it out. I'm going to write set of articles about flash games security, this is part I and we will talk about cheating possibility during communication: client side - server.

Most of simple flash games are runned only on 'client side' and they have no communication with server until it wants to send your score to best results list. This makes it simply to cheat by changing values during that communication.

I'm going to show it step by step, we will use Tamper Data add-on for firefox which simply allows us to modify POST parameters in "real time". Of course we can use tools like Burp Suite, but for non advanced users, for this task, it's simpler to use add-on like Tamper Data.

I also set up testing environment with MyBB forum and flash games plugin 'GamesSection', I'm going to show it on pacman game, which is included by default with plugin, but it works with all the games that don't have server side control, during game.

Before start the game we have to open Tamper Data (Tools -> Tamper Data) and we got window pop up:

Now we can click 'Start Tamper' and start playing, its advised to close other websites, otherwise we will get many pop ups, with every tab page requests.
So we simply play game, until our lives finish:

When we lose, website will try to save our points for the ranking, so Tamper Data will pop up:

Of course we click Tamper, and we can uncheck continue box. Request details will come:

Now in Post_Data, we have to find where scores are included, we can can do it by looking manually, or search with ctr+f for value of points we had at the end (70 in my example). It appears here in 3 places, but only last value 'gscore' is sent to ranking:

we can modify it however we want:

after all, click 'ok', it will ask us to change 'Content-Length', of course click 'ok'

if score was not additionaly checked by server, it will appear in ranking:

This method works with most of simple games with ranking and all the games in forums plugins. In next part I will show how to change values during game, by editing memory with CheatEngine, which works also with some facebook games and for example 'Unicorn Robot Attack' game.


  1. I'm going to write set of articles about flash games security....

    1. Yeah, next part will be posted soon ;)

  2. Most of simple flash games are runned only on 'client side' and they have no communication with server until it wants to send your score to best results list. This makes it simply to cheat by changing values during that communication. juegosmon

  3. Aw, this was a very nice post. Finding the time and actual effort to create a top notch article… but what can I say… I procrastinate a lot and don't manage to get anything done, navigate to this website!

  4. If you have a Playstation 1, you can get driving games and adventure games that kids will love and be able to play all day for not much money.
    free robux

  5. Interesting topic for a blog. I have been searching the Internet for fun and came upon your website. Fabulous post. Thanks a ton for sharing your knowledge! It is great to see that some people still put in an effort into managing their websites. I'll be sure to check back again real soon.
    visual studio c#

  6. You can also get a lot of games for not a lot of money. That includes some of the all-time bests, including Super Nintendo games and Playstation 1 games that are really cheap but worth it when you plug them in and play.

  7. I really enjoyed reading this post, big fan. Keep up the good work andplease tell me when can you publish more articles or where can I read more on the subject?
    c# language

  8. I found lots of interesting information here.Great work.. virtual

  9. Flash games have steadily increased in both availability and popularity recently, although it would seem that supply has not kept up with demand. Motu Patlu Games

  10. Fantastic blog! Do you have any tips and hints for writers? I’m planning to start my own website soon but I’m a little lost on everything. Would you propose starting with a free platform like WordPress or go for a paid option? There are so many options out there that I’m completely overwhelmed .. Any suggestions? Many thanks! motu patlu games

  11. In the event that you need your children to be tranquil, it's not generally simple. You generally have them play in the yard or sit in front of the TV. In the event that you need them to accomplish something else, you ought to investigate purchasing a Nintendo 64 framework or a Sega Genesis amusement that will engage them amid their breaks.

  12. Your children are heavily influenced by education. It not only helps shape their view of the world and their ability to deal with life, it also plays a role in their strength of character.

  13. I have recently started a blog, the info you provide on this site has helped me greatly. Thanks for all of your time & work. العاب فلاش

  14. The internet has taken a new dimension where by the kids can log into and access their ideal car games and kids games altogether. However a child must know the exact address of a certain website so as to access such a privilege. Golf Clash Hack

  15. Although this practice ensures that appropriate care is being delivered, one can never be too careful. A home security camera can enable family members to keep an eye on what is happening.Learn about surveillance camera

  16. The blog is like an ocean, I wish to drown in.
    clahs royale gemmes

  17. Your articles are always interesting and understandable. Thank you! life hack apk

  18. However in the event that you've hit the fairway for any time allotment you know this essentially isn't valid: rehearse doesn't make culminate. Practice makes changeless. So hone what is truly important to play at your pinnacle. Your inward session of golf requires a similar consideration .