JavaScript and JSON Server check.

[Morgisto]

Hi All its still me grinding away at this.

As stated in a previous thread my partner that is well above average on the LUA and Actionscript field is trying to figure out the JSON addition that has been made to this game we play.
Previously when i would commence building a ship this feature could be reduced from 20days per ship to immediatly.But then the company made a few substantial changes to the code.We were then informed via a reliable source that the changes have been made in the JSON in form of a callback which the game server sends back and forth to confirm whether the correct amount of coin actually is available to complete the transaction.I as the writer am not fluent in javascript or JSON. My partner is coming along fine with JSON but seems to be stumped on this one.

I have posted an extract that my partner posted to somebody on facebook which i think suposedly explain s mostly what our issue is.He will compile a more detailed extract and froward it to me soon.

ive tried many many things...
one thing im trying i cant seem to get woking in bytecode...
loadRequest(url,"Y9U653YU641VUU3U1U6Z497075076655",args,id,onSuccessInternal,onFailure,true,"POST",true,true);<normally it got only 6 vars...but the function can receive up to 13...the rest got default values if not sent, but one of the values is checking the hash...
then i looked also at badnum in SecNum class...
i tried rewrites...
i made changes to these functions...
public static function verifyHash
protected function handleSecurityError
function handleIOError
function get data() : Object
function get isError() : Boolean
function doCall
function handleLoadComplete
function speedupRocketBuild
class_179.speedup(param1,param2,param3,serverCallSuccess(param4),serverCallSuccess(param4));
var_456 <object>
private static function commonRequest
function serverCallSuccess
function serverCallFailure
i tried rewriting the code back inrockets to its original form before they updated rockets that time<as rockets are one of the frst instances they used json>....yes i been at this json story or 4 months now...but cant figure out how to get past...
from what ive heard u got past the json succesfully...
from what i understand around the json...it sends the data from your pc, inwhich case u receive the json back
, which gets verified with salted hash, and it verifies acording to the data u got on your side...
my main issue is:

my thoughts...right its a json server CHECK...thers 2 functions...server call success...server call failure...also diff formats for the json reply...and a hash to verify it...right...so atm...i can get past the server call success//failure to do the popup or not for data correct...I CANT however change the vector//object from the Json...I might hv a way around the hash...so my main problem is...if i hack the data...i can get around the popup...in whicj case because of fake data, the json got the wrong object//vector reply<need to modify that>...then they re-verify the data wit the salted hash...might hv a way around...tho frst neet to get past obstacle 2...
obtsacle 2 is setting up the vector//object in the same format as the json reply

I know this may be a lot sketchy but i realise that we have gotto start somewhere.

I do realise that this is prolly gonna take a whole lot of hours by somebody that thinks he may be able to beat this. Please take a look guys and any ...... help or guidance will be gladly accepted

regards

Morgs

 

[Morgisto]

I added the updated info to this rar file as it contains 18000 pieces and only 10000 are allowed Interested people please take a look thx .

https://www.dropbox.com/s/0occvpvu436vjtp/JSON INFO.rar?dl=0

regards

Morgs

 

[[)roi(]]

The information you provided in the rar is only the disassembled code, problem its incomplete.
Also where's the JSON file(s) you mention?

 

[Morgisto]

Hey Bud


Here are the link posted for the JSON files. I think you need to install a version of Charles to see the files .

https://www.charlesproxy.com/

https://www.dropbox.com/s/94v5b56eue49cg4/charles.rar?dl=0

Most of the JSON concernerd can be found in url https://bp-fb-vip.dc.kixeye.com the rockets section


regards

Morgs

 

[halfmoonforever]

So you're trying to hack a game online and can't code..... interesting story bro

 

[Morgisto]

:wtf::wtf::wtf::wtf:

So you're trying to hack a game online and can't code..... interesting story bro

You ever thought there may be 2 or 3 of us.I have just taken it upon myself to initiate this.I do have a partner that is actually very good.We just not into JSON.ActionScript is our line M8.

 

[[)roi(]]

Hey Bud


Here are the link posted for the JSON files. I think you need to install a version of Charles to see the files .

https://www.charlesproxy.com/

https://www.dropbox.com/s/94v5b56eue49cg4/charles.rar?dl=0

Most of the JSON concernerd can be found in url https://bp-fb-vip.dc.kixeye.com the rockets section


regards

Morgs

That last link send me off to Facebook; something I got rid of ~6 years ago, sorry but there's just no way I'm opening a new FB account. So I suggest:

1. You explain the In/out flows of data as you see it in charlesproxy; share/copy in the relevant JSON, etc..
2. Share a more complete version of the ActionScript; in what you have shared there are far too many undefined functions, classes, global properties, ... to make any sense.

To make it easier for anyone else you could create a temporary github repository, to temporarily store all the relevant files.

 

[_kabal_]

:wtf::wtf::wtf::wtf:

You ever thought there may be 2 or 3 of us.I have just taken it upon myself to initiate this.I do have a partner that is actually very good.We just not into JSON.ActionScript is our line M8.

But actionscript is a superset of ecmascript. And json is about as simple a data representation as you can get. Declaring json objects and arrays is basically identical to how it's done in actionscript.....


But as droid said, put this on github so that it is accessible to us that do not want to download and extract rar files and join Facebook.

 

[Morgisto]

Ok am not fluent with github but will try

 

[Morgisto]

Well we created a repository and my colleage added what he thinks you guys may need. I have never before used GITHUB but i guess you'd find this one here

https://github.com/Morgisto/Javascript-JSON

regards

Morgs

 

[[)roi(]]

Morgisto, FYI I'm away for the weekend... will catch up with you on Monday.

 

[Morgisto]

good thanks M8. My partner has actually got hold of an Indian gentleman and why i am not in favour of Github or any type of passive assistance is they spend up to 2 hours a day for the past 3 days trying to get to the bottom of this whole ndaba.I must say the proof will be in the pudding and its prolly gonna cost a couple of grand too. But we seem to be going in the right direction.
As you comment earlier Droid the answer is prolly gonna be rather interesting.

 

[[)roi(]]

good thanks M8. My partner has actually got hold of an Indian gentleman and why i am not in favour of Github or any type of passive assistance is they spend up to 2 hours a day for the past 3 days trying to get to the bottom of this whole ndaba.I must say the proof will be in the pudding and its prolly gonna cost a couple of grand too. But we seem to be going in the right direction.
As you comment earlier Droid the answer is prolly gonna be rather interesting.

No worries; let mw know if you don't come right. Good luck.

 

[Morgisto]

Umm if we have to pay a few grand as i said we are willing to pay. But strangely most people we come across dont know about or use the tools needed to get into and under Actionscript part of the work so my partnerhas to basically coach this chappy all the way up to the point where he can actually start grafting on the JSON_P part of things. But thanks Droid as you may see the Gitgub Rep is setup but i am sure most wouldnt have a clue how to get around whats in there.

 

[[)roi(]]

Umm if we have to pay a few grand as i said we are willing to pay. But strangely most people we come across dont know about or use the tools needed to get into and under Actionscript part of the work so my partnerhas to basically coach this chappy all the way up to the point where he can actually start grafting on the JSON_P part of things. But thanks Droid as you may see the Gitgub Rep is setup but i am sure most wouldnt have a clue how to get around whats in there.

I'll probably have some spare time on either Sunday or Monday; if you guys haven't come right by then I certainly jump in an start trying to make sense of this; the little bit I did have a look at was unfortunately still missing some declarations, e.g. many of the Global declarations were missing; these appear important and they are part of the rocket build time formulation.

As to your partner having to coach someone through Actionscript and JSON; if I was you I'd make sure no money is exchanged with that 3rd party until they have been able to convince you that they are adequately skilled to do this research for you. A skilled developer shouldn't need much more than a description of the game process and a your need to reduce / void the build times for the rocket; the rest of it they should be able to figure out in the code. Aside from that I'd probably also have asked you guys to try to capture the JSON before, during and immediately after a rocket build i.e. to track the state transition in the files.

 

[Morgisto]

Umm Droid the perfect situation is if my Partner and the other party meets on skype as we are now doing with this Indian chap. So that we can give answers to questions in realtime and leave the coder with something concrete to work from. But funny enough i must say without blowing your own trumpet you do seem to possibly be our answer maybe just a money/time issue LOL ?

I have actually been able to convince a friend of mine in UK to talk to the gentleman that has a working file. We are actually buying it for 50Pounds. And then it will be interesting to see whether a file we could concoct would have the same config as the one we are trying to get from "Romania". We do know he has a file but is a real hardass. Luckily my connection did him a favour 2 years ago and i think he is about to repay the favour

 

[BlindMelonChitlin]

So you're trying to hack a game online and can't code..... interesting story bro

It's a fun way to learn, you have to admit

 

[[)roi(]]

Hi Morgisto,
If you're available let's spend some time tomorrow afternoon; we can maybe start off with Skype?
Unless of course your 50 pounds paid off, and you're far too busy building rockets for Skype ;-)

 

[MagicDude4Eva]

Good luck trying to hack battle-pirates. The request and response will signed and I doubt that you will be able to sign it without having the keys (unless the app is coded poorly and they key is hardcoded).

 

[Morgisto]

Good luck trying to hack battle-pirates. The request and response will signed and I doubt that you will be able to sign it without having the keys (unless the app is coded poorly and they key is hardcoded).

Funny thing is one of the oldest BP hackers is doing 10K US per month using the same file we after but wont give it out to anybody. I have it on reliable info he is using it together with FiddlerCore and injects his file personsonally so also making it very difficult for KIXEYE to see what he is doing.