XML files and codes
xml files for Marvel Avengers Alliance
RE: XML files and codes Posted on: 02/01/2016 9:20am
Quote Post
sweet_nath Posted on: 01/31/2016 10:20am

I am curious because I heard the guy is doing it with Charles. Many people are buying it and he really add the gold. And it's pretty cheap, 600 golds = $25 (in brazillian money, R$ 100). I wonder what he is doing. He asks to save the frame code and that's all. He doesn't even enter in the person's facebook account.


what charles do is basically rewrite the server string into believing your tweaked string.. meaning here.. but its just change what you tweak and it will not sending the info back to the server to save..

that why you need to do all method in charles everytime you want to hack since after you reset the game turn back to normal.. since youre not saving data you tweaked into the server..

sooo by your reply its clear that hes not using charles based on..
1. hes injecting the server to do stuff, but charles did not injecting the server, charles just rewrote the path..
2. hes infecting other by player id, but charles only work for those who initiate it and not other.
3. player data  information are on swf format and "We" use charles to rewrite xml format file, and cant do anything to swf files not that i known off...
 

RE: XML files and codes Posted on: 02/01/2016 9:59am
Quote Post

Maybe he uses Charles to alter an actual purchase.

Like he makes a real $5 purchase for 20 gold and then tricks the server into believing he made a $100 purchase for 1000 gold or something.

It's an area of Charles rewrite that probably none of us has spent much time studying or playing around with because in order to monitor the response activity we have to actually spend money making gold purchases. And I'm guessing most of us don't do that.



Or maybe he's just using stolen credit cards.

RE: XML files and codes Posted on: 02/01/2016 10:44am
Quote Post
fathead Posted on: 02/01/2016 4:59am

Maybe he uses Charles to alter an actual purchase.

Like he makes a real $5 purchase for 20 gold and then tricks the server into believing he made a $100 purchase for 1000 gold or something.

It's an area of Charles rewrite that probably none of us has spent much time studying or playing around with because in order to monitor the response activity we have to actually spend money making gold purchases. And I'm guessing most of us don't do that.



Or maybe he's just using stolen credit cards.


again it will work.. you repath into believe 100$ insteed of 20$ but since you just repath it.. doesnt mean what you tweaked will be saved.. since you did not send any data back to server.. so the original data on server remain unchanged... and although visually you manage to did that.. but it will return back after reset..


me and jarly did manage to hack gold.. but since we only rewrite the path.. server did not save the altered infomations.. so the gold gone right after reset...

jarly manage to make deploy rewarded with gold.. and using same concept i manage to change lockbox groupboss reward to gold... but its gone after reset.. 

that why i can confirm they not using charles..

and its not logic if he use stolen cc since you cant topup 3rd party account.

RE: XML files and codes Posted on: 02/01/2016 1:33pm
Quote Post

Anyone tried changing strings in client2.swf yet? as i heard from someone they use change strings in client2.swf to send data to server.

RE: XML files and codes Posted on: 02/01/2016 1:43pm
Quote Post
calanextz2 Posted on: 02/01/2016 5:44am
fathead Posted on: 02/01/2016 4:59am

Maybe he uses Charles to alter an actual purchase.

Like he makes a real $5 purchase for 20 gold and then tricks the server into believing he made a $100 purchase for 1000 gold or something.

It's an area of Charles rewrite that probably none of us has spent much time studying or playing around with because in order to monitor the response activity we have to actually spend money making gold purchases. And I'm guessing most of us don't do that.



Or maybe he's just using stolen credit cards.


again it will work.. you repath into believe 100$ insteed of 20$ but since you just repath it.. doesnt mean what you tweaked will be saved.. since you did not send any data back to server.. so the original data on server remain unchanged... and although visually you manage to did that.. but it will return back after reset..


me and jarly did manage to hack gold.. but since we only rewrite the path.. server did not save the altered infomations.. so the gold gone right after reset...

jarly manage to make deploy rewarded with gold.. and using same concept i manage to change lockbox groupboss reward to gold... but its gone after reset.. 

that why i can confirm they not using charles..

and its not logic if he use stolen cc since you cant topup 3rd party account.


Right but some xml rewrites do get saved on the server. We've seen that with the GB silver hack, for example.

That suggests that there are loopholes where a simple charles rewrite will work, the trick is just finding exactly what works and what doesn't. Maybe there's a loophole somewhere that affects gold. If it works with silver, then theoritically it can work with other hard currencies too.

I agree though, it's more likely that they are using other methods to hack gold, but I'm not convinced that it's impossible to do with xml rewrites also. Unlikely, but plausible.

RE: XML files and codes Posted on: 02/01/2016 2:07pm
Quote Post

Fathead what makes you think they use a different method for hacking?

RE: XML files and codes Posted on: 02/01/2016 5:55pm
Quote Post
fathead Posted on: 02/01/2016 8:43am
calanextz2 Posted on: 02/01/2016 5:44am
fathead Posted on: 02/01/2016 4:59am

Maybe he uses Charles to alter an actual purchase.

Like he makes a real $5 purchase for 20 gold and then tricks the server into believing he made a $100 purchase for 1000 gold or something.

It's an area of Charles rewrite that probably none of us has spent much time studying or playing around with because in order to monitor the response activity we have to actually spend money making gold purchases. And I'm guessing most of us don't do that.



Or maybe he's just using stolen credit cards.


again it will work.. you repath into believe 100$ insteed of 20$ but since you just repath it.. doesnt mean what you tweaked will be saved.. since you did not send any data back to server.. so the original data on server remain unchanged... and although visually you manage to did that.. but it will return back after reset..


me and jarly did manage to hack gold.. but since we only rewrite the path.. server did not save the altered infomations.. so the gold gone right after reset...

jarly manage to make deploy rewarded with gold.. and using same concept i manage to change lockbox groupboss reward to gold... but its gone after reset.. 

that why i can confirm they not using charles..

and its not logic if he use stolen cc since you cant topup 3rd party account.


Right but some xml rewrites do get saved on the server. We've seen that with the GB silver hack, for example.

That suggests that there are loopholes where a simple charles rewrite will work, the trick is just finding exactly what works and what doesn't. Maybe there's a loophole somewhere that affects gold. If it works with silver, then theoritically it can work with other hard currencies too.

I agree though, it's more likely that they are using other methods to hack gold, but I'm not convinced that it's impossible to do with xml rewrites also. Unlikely, but plausible.


silver hack is able since its happen on different string a.k.a battle string and can only be done to groupbosses since groupboss reward you extra silver based on your damage... and yes battle does "send" data to server but only limited to scores, droploot (battle item) that you get after killing/damaging mob and these only limited to weight.. (as we know to make uiso drop)
you cant make they drop thing like gold/lockbox/cp since developers did not implement them to drop in battle since they not item to use in battle a.k.a they not listed as dropable loot.... 

in conclusion server are not programmed to detect what happen in battle, thing like how you beat boss, how much damage you did... etc etc.. this can be proven by your action in battle.. example you get in battle and farm 20 uiso but you accidently reset the game and you lost the loot..

softCurrencyDamageMultiplier is what made silver hack work..

thing is the problem occors on command line... since there's softcurrency (silver) theres hardcurrency (gold) theres softCurrencyDamageMultiplier but there no command for
hardCurrencyDamageMultiplier in battle string...

soooo we need server to have command line that can benefits us
in battle... like making gold as dropable loot..

so how they brazillian does it? idk but they must have send thier request in some way for server to acknoledge it.. my best bet is something like fiddler or something close that can effect swf responce..

RE: XML files and codes Posted on: 02/01/2016 6:51pm
Quote Post

my friend also bought lockboxes from someone called "emma frost"
He brought 250 lockboxes aswell. 
Everything works perfect in his account definitely not fake i checked myself

RE: XML files and codes Posted on: 02/01/2016 7:07pm
Quote Post

emma don't teach hack to anyone otherside of brazil
i asked her if she could tell me
seriously he hate her because of this :angry

RE: XML files and codes Posted on: 02/01/2016 9:34pm
Quote Post
calanextz2 Posted on: 02/01/2016 12:55pm

silver hack is able since its happen on different string a.k.a battle string and can only be done to groupbosses since groupboss reward you extra silver based on your damage... and yes battle does "send" data to server but only limited to scores, droploot (battle item) that you get after killing/damaging mob and these only limited to weight.. (as we know to make uiso drop)
you cant make they drop thing like gold/lockbox/cp since developers did not implement them to drop in battle since they not item to use in battle a.k.a they not listed as dropable loot.... 

in conclusion server are not programmed to detect what happen in battle, thing like how you beat boss, how much damage you did... etc etc.. this can be proven by your action in battle.. example you get in battle and farm 20 uiso but you accidently reset the game and you lost the loot..

softCurrencyDamageMultiplier is what made silver hack work..

thing is the problem occors on command line... since there's softcurrency (silver) theres hardcurrency (gold) theres softCurrencyDamageMultiplier but there no command for
hardCurrencyDamageMultiplier in battle string...

soooo we need server to have command line that can benefits us
in battle... like making gold as dropable loot..

so how they brazillian does it? idk but they must have send thier request in some way for server to acknoledge it.. my best bet is something like fiddler or something close that can effect swf responce..


Ah okay fair enough.
 

sweet_nath Posted on: 02/01/2016 1:32pm

For the lockboxes, he ask you to have at least 1 box of the hero wanted. For the uiso-8, you need to activate the spec ops, but don't finish the first task. For the silver, a spec ops with group boss. 

See now that's interesting.

For silver it seems that he uses the same method we use, by upping GB health.

For lockboxes it sounds almost like a replication type hack. I'll bet if you have 0 gold on your account (or u-iso), he can't add any. You need at least 1 of whatever it is he adds, like his requirement for lockboxes since he somehow alters the value of currencies already registered on your account.

If that is the case (just speculation), then it probably isn't a force drop hack either, but something else entirely.

RE: XML files and codes Posted on: 02/01/2016 10:14pm
Quote Post

I have two Dragon city gold hack from the past, written in PHP (scripts). Both using your FB ID and your game session ID sending server requests outside of the game. I think they found the same way doing it with MAA.




Repeat after me

RE: XML files and codes Posted on: 02/02/2016 12:37am
Quote Post
fathead Posted on: 02/01/2016 4:34pm

For silver it seems that he uses the same method we use, by upping GB health.

For lockboxes it sounds almost like a replication type hack. I'll bet if you have 0 gold on your account (or u-iso), he can't add any. You need at least 1 of whatever it is he adds, like his requirement for lockboxes since he somehow alters the value of currencies already registered on your account.

If that is the case (just speculation), then it probably isn't a force drop hack either, but something else entirely.


He never said anything about the gold, but maybe you are right and he needs at least 1. For the CPs, I know he is just opening lockboxes, since he said they come with random things like weapons and pve items.

RE: XML files and codes Posted on: 02/02/2016 2:39am
Quote Post
A1 to A0 architect.

We can infer from the rewrite rules, the "neighbor" line in Charles, under n7-vip-playdom-=maa-whatever is hackable, and some items stick.

THe rewrite rules only change the Response coming back.

So, one might look at that line in charles, look at the response (it's big) and see what epoch dates can be changed, quantities, itemids, and w/e.

You don't need to clear your cache to do rewrites, but you probably could enable a breakpoint in that n7-vip-playomd-things line, before you load the game, and alter stuff before executing it, and observe behaviour.

edit: also, find the loottable in the xmls, from which winter lockboxes get their loot. See if you can rewrite the itemids for those items. Or see if you can rewrite that loottable to a different one.

Here's the itemid for 1 gold if you wanna m,ess around with changing itemids

1gold
f7b5f040-7c19-11e4-b60d-065676001937
 




atdt *67
RE: XML files and codes Posted on: 02/02/2016 1:47pm
Quote Post
Your (mostly) friendly neighborhood MAA-Mod

these are all speculation. until we know that they pretain to actual XML hacks, put them in some kind of new speculated hack thread.

RE: XML files and codes Posted on: 02/03/2016 8:37pm
Quote Post

New update:  20160202110128