How to hack Flash games - hacks for flash games

[Sethioz]

Background and Info

it isnt as easy as it sounds lol. I tried to hack some flash games (like the ones on onemorelevel.com) with RaT and we found out that its way more harder than to hack some game like avp2, cobra 11, resident evil 4..etc.

somehow flash games use values that are multiplied with 8. so if your money is 300 then you need to search for 2400. (using Tsearch or cheat engine or something like that)
it is 2 bytes value, but in most games you can get more money than 2 bytes (65535) so its smarter to search on 4bytes (gives less results). ive tested that method in 4 games and it works in 3 of them:
you cant do more than one search. well you can do more searches, but as soon as you touch anything in game the value will pop onto other address and you have to start all over again. usually i got like 30-50 addresses. then i simple added all of them into list
then i changed 10 of them to higher value and checked the money.
if it changed, then i narrowed down the search (by changing 5 of them)

now there is another problem.
if you change wrong values at start then flash game will put money onto new address AGAIN. so you have to start all over again.

this is what makes it so hard. every small change in flash game will make game take new address on use. once you find it and you are SURE which is the right address, write it down, because flash games use similiar addresses, even if its not same game address will still be in same range. for example all of those 3 games i tested used the addresses in range of 4100000 to 4900000 in one game the money address always ended with C, so it was very easy to spot right value.

ok this is confusing, i know ! if you are intrested on how to hack flash games then reply here and give us a specific game. so we can make a tutorial. its possible to hack flash games, thts for sure.


Latest Hacks:

Vector TD - Video Demonstration
1. Score = score is x8. so 1000=8000
-only one search is possible, because value never changes on address
-get like over 40000 score, then x8 and search, you should end up with 1-2 addresses.

2. Money
-exactly same as score (x8 and only 1 search possible)
-get over 1000 money and you should find it easily

3. Damage of towers
-same as score and money
-you will probably find few addresses, depending on how many towers with same dmg you have, but you can really change it !
-my lvl 3 laser takes out ANY target with just one hit

TIPS:
to find money EASILY, first find score and look at the address range.
for example my score's address was 64746DC ad money 655C6EC < see the range ? they are very close in memory.

[RaT]

Bloons Tower Defence 2
Very easy to hack
On Hard mode 650*8= (5200>value u search 4bytes)
You will find around 20 Addy go back in game and buy 1 Dart monkey,
now look at Addresses and there shold be only 1 left with value 2920
In Bloons u can change ur money multiple times.
Address in Bloon TD 2 Ends with A8.

It may be difrent with other Browser
(tested with Avant)
------------------------------------------------------
Canyon Defence
Bit harder to hack
Your Money 350*8=2800 now search 2800 4 byte you will find 20-36 addys
U can just add all and change all's values to 79992 = 9999*8
U cant change money more than once address dosen't remain same.

[Sethioz]

i did some more research and yes most games have individual address for each value.
or it simple switches between like 1000 addresses.
4 bytes is useful in most games, because in most games money will go over 2 and 3 bytes, so game have already saved space for money address.
*FF FF FF FF so its 4 bytes, or even more, i havent checked how much free space it has, maybe its 16 bytes or even more, then it would be super easy to search if game reserves like 16 bytes for each money address. (artmoney should be able to search in 16 byte range), but i doubt that game has that much free space after money address.[/color]

Update:
ok i checked it with HEX. In flash game called ''FlashElement TD'' game has only 4 bytes for money. so maximum amount of gold you can have is FF FF FF FF - 4294967295
it also seem to be crashing when you insert some kind of ''invalid'' value. like 900 and it crashes.
I think this is because 900 does not divide with 8. so make sure that your value will divide with 8.
900 / 8 = 112.5
but BYTES can NOT hold values with commas. so this is why its crashing the game when you change it to some 'invalid' value. since game is using bytes there, not float (float handles negative and comma values) you can't insert any value as gold.

[eraldo]

Cheat engine is apparently the best tool to hack flash games, but it takes alot getting used to.

[Sethioz]

nah. lot of ppl use cheat engine, but actually its not good at all. Tsearch and ArtMoney are way better. im using Tsearch in most cases.

[eraldo]

[hideo]

how about hacking facebook's game called texas hold em poker?? i want to cheat the chips amount

[Sethioz]

never heard it. can you play with other ppl or is it single player ?
if its multiplayer, then its impossible just like all other games, because money is server controlled in multiplay games. only way is to make game give you more money somehow or hack into the server itself.
if its single player then you can simply search for the money value and change it. as mentioned, in most flash games its x8 (most values).

[PinPoint]

the best way to hack a flash game is to download the .swf file, decompile it with flasm into a txt file,
edit whatever you want(starting gold, items etc) then save and recompile it to play.

although you can now only the your hacked version through a player, like Irfan View and not online





or


if the game allows saves, get sol edit and edit the save file. in sonny1 and 2 for example
in the sol editor you can choose how much ability points,stats, money etc your save will load with


.................ill post tuts later (maybee 1 day-2 weeks)

[Sethioz]

this works only for your own purpose tho, if you want to get into to the high score tables, then you need to hack it directly in browser and even then some games won't save your records.
tutorial/s are welcome ofcourse.

[TeamRetox]

I had a flashvar editor in my old self made browser.
Made using C#, you can invoke flash commands with C# to set flash values :) live on webpages :D

[atomisierer]

Hey there,

well I do a post in this thread because it's related to flash game hacking.

I want to get information about the packets which are sent between an online flash game and my browser. The swf file isn't available. So I have to analyse the traffic. The game is about a grid which different kind of fruits and you are allowed to drop certain fruits from the grid to get some new fruits which are created randomly.

I need to analyse the traffic in order to find out which fruits were created after I dropped some out of grid. I want to write a program which shows me which fruit should I drop from the grid in order to get the most points. So first step is for me to find out which fruits were created.

It must be possible to do it this way because I already found a program which does the same. But for learning purposes I want to start rom scratch. Is there a tutorial available how to start?

Cheers, Tim

[Sethioz]

how about a link to game ?

what you are talking about, is extremely difficult, its not just intercepting packets, you have to write a calculator based on the game, which is job for a programmer.

if you are asking for how to capture packets and intercept them, you should learn to search on my wiki first, read this article:
Packet editors / sniffers / interceptors

[warrock16]

[MagicalSilence]

Most of facebook games are protected to avoid value manipulation
If the Basic of flash game hacking was unsuccessful then its protected or server controlled.

[warrock16]

so how to hack a game that is controlled by the server?

[Sethioz]

you hack into server :)

[warrock16]

then how =)? can you make a thread on how to hack a server? XD is there another way to hack a sever sided game?

[Sethioz]

how about tutorial on how to hack into FBI ? stop asking retarded things.
doesn't seem like you even have bit of interest on how things work, all you want is to fuck something up and laugh over it, with this thinking you never get anywhere.

in fact i don't even think you even understand what you just asked. im talking about the whole system where company / developers operate, that includes their cluster and person PCs they use to work on things.

ofcourse you can always try and infect one of the developers with trojan or keylogger, but good luck with finding one online. not impossible, but im not going to waste my life on doing this. such attacks have to be carefully coordinated and you need good plan to make someone specific fall for this.

or just learn how to exploit websites and servers, which would take you years.

[warrock16]

what if i use WPE PRo(packet sniffing/editing) to a server sided game, is it risky???