Vote Point abuse with WebScarab

Researching, Proof of Concepts, Hacking, Console Modding and Hacking and more. No game hacking / modding here.
Post Reply
User avatar
celebor
Newbie..
Newbie..
Posts: 2
Joined: Thu Oct 20, 2011 8:29 am

Vote Point abuse with WebScarab

Post by celebor »

Good day to everyone, especially Sethioz.

Code: Select all

I will start with a little off-topic introduction since it's my first post here and I don't want to be rude. I've been in the hacking scene probably since I started playing games that involved other human interaction. I've been somewhat successful and dedicated quite a lot of time to research and experimentation. Had some major success on some private server for games like W*W, Ai*n, Li*age an so on and so forth. My favourite hack concept is packet editing, it just feels so powerful! :D I consider my hacking skills as intermediate, getting closer and closer to pro.
On-topic.

My friend just game a very interesting suggestion/"someone tried this and it worked". This is how he described it - "He clicked on the vote button, stopped the page, captured the packet and sent it multiple times resulting in gain of 'Donation credits'".

I am not sure what tools he/she used but I realized that WPE Pro is not a good tool to start experimenting with because of my earlier experience with it and browsers. With a little research I came across this interesting forum and found about WebScarab. I did the small guide/tutorial practice Sethioz posted on his Wiki and it seemed to worked just fine.

Now I have a question. I managed to get the packet for "Send vote".
Image

So there, WebScarab has the request and I can now manually send it.
I go to the "Manual Request" tab now. Copy paste the Raw Packet.

My ultimate question. How can I send this same request multiple times in a very small time frame? For example, 50 requests in 1ms.


Thank you for reading this post!

Cheers!
User avatar
Sethioz
Admin
Admin
Posts: 4762
Joined: Fri Jul 27, 2007 5:11 pm
Custom: Gaming YT > https://youtube.com/SethiozEntertainment
Game Hacking YT > https://youtube.com/sethioz
Game Hacks Store > https://sethioz.com/shopz
Location: unknown
Contact:

Re: Vote Point abuse with WebScarab

Post by Sethioz »

1st of, that hi and welcome is useless and senseless, post it under offtopic if you want to blabber. i see it as spam and nothing else, i don't care about stories or who is who. it just annoys me to read stuff that aint in topic.

2nd, why was this in game hacks ? is vote button a game ?

3rd. read my wiki, its all explained there how to use WebScarab and other tools to do this kind of tricks.
in short, webscarab is not meant for spamming/flooding, its meant for researching, therefore you can't send packets fast using webscarab.
try WPE Pro or CommView.
NetTools is also good suite of small tools, where you might find something useful, it has several tools that can send RAW data and flood with it.
User avatar
celebor
Newbie..
Newbie..
Posts: 2
Joined: Thu Oct 20, 2011 8:29 am

Re: Vote Point abuse with WebScarab

Post by celebor »

1) That's good to know!

2) Well, feel free to move this into appropriate section. I didn't see a section specifically for just website hacking. Therefore I assumed that abusing an MMO's voting system which will give you advantage in-game is game section appropriate.

3) I tried WPE Pro to just simply log-in into the control panel. It always gives me a packet error. It looks like the open socket ID is changing for every new request, so I'm not quite sure how to deal with that.
Then I tried CommView, nothing happens when sending packets.

How do I proceed now?
User avatar
Sethioz
Admin
Admin
Posts: 4762
Joined: Fri Jul 27, 2007 5:11 pm
Custom: Gaming YT > https://youtube.com/SethiozEntertainment
Game Hacking YT > https://youtube.com/sethioz
Game Hacks Store > https://sethioz.com/shopz
Location: unknown
Contact:

Re: Vote Point abuse with WebScarab

Post by Sethioz »

you should have said its MMO's voting system, more details.

anyway its basically website hacking, so its good where it is. start using the new link, i will remove the shadow topic within week.
there are other tools besides webscarab, like burp suite, paros proxy ..etc. check my knowledge database as i said before. there are good examples and lists of good tools, including detailed tutorials on how to hack some stuff.

have you tried NetTools ?

as last option, you can use webscarab and some macro maker, make a macro and let it run. you can't use anything else while its running, but its solution .. you can let it run all night.
most likely that site uses https (secure connection) or something like that, thats why simple packet sending won't work. webscarab however should show https just fine.
Post Reply