TalkingPatchedInfinite iridescent shards exploit V2 DBD 3.0.2

Posts 115 of 44 · Page 1 of 3
Infinite iridescent shards exploit V2 DBD 3.0.2
Important

Never ever add iridescent shards on account that is important to you. Hacking shards is direct revenue loss for BHVR therefore they will do their best to ban all people who do this. Close this page if you fear getting banned. For additional notes regarding possible bans check comment section of previous post: https://www.mpgh.net/forum/showthread.php?t=1458374.

Introduction

Updated version of iridescent shards exploit. BHVR patched the "consume" exploit we were using before. Now we will manually add items to your inventory and then transform them into shards.

Part 1: Fiddler setup

1. Download and install latest version of Fiddler Web Debugging Proxy. Suggest using Telerik official website.

2. Log out of Steam account.

3. Launch Fiddler, top left corner click Tools - Options



4. Go to HTTPS, Check "Capture HTTPS CONNECTs" and "Decrypt HTTPS traffic" boxes. If it's your first Fiddler usage it will ask you to install a certificate. As Fiddler accurately say, "This is generally safe" but i would recommend to do your own research before continuing. Under "Check for certificate revocation" locate "Protocols", left click blue text and paste this code:
Code:
<client>;ssl3;tls1.2


5. Close Fiddler.

Part 2: Authentication

6. Log in Steam, launch DBD and proceed to main menu.

7. Go to C: \ Users\ **** \ AppData \ Local \ DeadByDaylight \ Saved \ Logs and open "DeadByDaylight.log" in notepad.



8. Press ctrl+F and type "api/v1/auth/provider/steam/login", choose Down Direction and click "Find Next".



9. You will be redirected to this line:



Copy and save the whole URL. We will use it later. In my case it is:
Code:
https://latest.live.dbd.bhvronline.com/api/v1/auth/provider/steam/login?token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
10. Launch Fiddler, go to Composer>>Raw and paste this code:

Code:
POST ????? HTTP/1.1
Host: latest.live.dbd.bhvronline.com
Accept: */*
Accept-Encoding: deflate, gzip
Content-Type: application/json

{"clientData":{"catalogId":"3.0.0.16","consentId":"3.0.0.16"}}


11. Instead of "????" paste your previously saved URL. Final result:
Code:
POST https://latest.live.dbd.bhvronline.com/api/v1/auth/provider/steam/login?token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
Host: latest.live.dbd.bhvronline.com
Accept: */*
Accept-Encoding: deflate, gzip
Content-Type: application/json

{"clientData":{"catalogId":"3.0.0.16","consentId":"3.0.0.16"}}


12. Press "Execute" once. If previous steps done correctly new line will appear. Double click it, "Inspectors" tab will appear, navigate to "Cookies", and copy your "bhvrSession" after "=" up to "; path=';".




Part 3: Item duplication and transformation into shards

13. We are going to transform cosmetics into shards. You are required to have at least one item in your DBD inventory. 99.9% of players have this Trapper mask therefore we will use it.



14. Fiddler, go to Composer>>Raw and paste this code:
Code:
PUT https://latest.live.dbd.bhvronline.com/api/v1/inventories/TR_Mask007 HTTP/1.1
Host: latest.live.dbd.bhvronline.com
Accept: */*
Accept-Encoding: deflate, gzip
Cookie: bhvrSession=??
Content-Type: application/json
Content-Length: 14

{"quantity":-200}
Instead of "????" paste your DBD session cookie. Final result:



15. Hit Execute (top right corner). We just added 200 masks to your inventory.



16. Composer>>Raw>>Paste this code:

Code:
POST https://latest.live.dbd.bhvronline.com/api/v1/inventories/consume/v2 HTTP/1.1
Host: latest.live.dbd.bhvronline.com
Accept: */*
Accept-Encoding: deflate, gzip
Cookie: bhvrSession=??
Content-Type: application/json
Content-Length: 42

{"objectId":"TR_Mask007","quantity":200}
Instead of "??" insert cookie. Final result:



17. Hit "Execute" top right corner to send the request. Sending this request once will give you 120000 iridescent shards. If you want more shards use other number instead of "200" (2000 for example, each mask gives you 600 shards). Open "Store" in-game to see changes. Enjoy the result!



Troubleshoot and Notes

1.



You copied cookie incorrectly.

2.



You copied cookie incorrectly.

3.



Restart DBD and take your token from log file again.

4.



Close Fiddler/Debugger and restart DBD.

5.



During auth it's important to use 3.0.0.16 catalogId and 3.0.0.16 consentId. Mirror content is being used.



6.
Code:
{"code":400,"message":"Invalid input: This item is not in the user's inventory Database","data":{"message":"Invalid input: This item is not in the user's inventory Database"}}
Check if you have this mask in your inventory:



If not - you will have to use any other item that you already own. Go to "C:\Program Files (x86)\Steam\steamapps\common\Dead by Daylight\DeadByDaylight\Content\UI\Icons\Customiza tion" to find it's correct spelling. Example of request with other Trapper mask:

Code:
POST https://latest.live.dbd.bhvronline.com/api/v1/inventories/consume/v2 HTTP/1.1
Host: latest.live.dbd.bhvronline.com
Accept: */*
Accept-Encoding: deflate, gzip
Cookie: bhvrSession=????
Content-Type: application/json
Content-Length: 42

{"objectId":"TR_Mask008","quantity":200}
7. Upper limit is around 700kk shards. Don't exceed this value.

8. You need around 1800000 shards to buy the whole market.
Hello i have problem
in fiddler i have {"code":404,"message":"Unable to find requested data in catalog MT_Torso02_Anni01 not found","data":{"message":"Unable to find requested data in catalog MT_Torso02_Anni01 not found"}}

the problem i didn't buy cosmectis, what can i do ?
Quote Originally Posted by pikamouche View Post
in fiddler i have {"code":404,"message":"Unable to find requested data in catalog MT_Torso02_Anni01 not found","data":{"message":"Unable to find requested data in catalog MT_Torso02_Anni01 not found"}}

the problem i didn't buy cosmectis, what can i do ?
If you don't have a single cosmetics bought (even Trapper Mask which was gifted to all players not long ago) i might recommend to add yourself shards with Player level method first (https://www.mpgh.net/forum/showthread.php?t=1456807), buy the cheapest Claudette Torso and use it as a base item for duplication.
ok i will test thx

- - - Updated - - -

yes its works thx
Can i do this with the frost eyes or Iron chuckles ?
Quote Originally Posted by PK Santana View Post
Can i do this with the frost eyes or Iron chuckles ?
Only items that can be purchased in-game can be used.

Quote Originally Posted by PK Santana View Post
Undetected?
Currently (07/16/2019) it is undetected and won't cause an instant or 24hrs ban. But it's entirely possible that in the future bhvr will go through their old logs, track people who used this method and ban them (aka Shrine exploit). Don't hack shards if you don't want to get banned, this tutorial is made for people who don't care about bans and for advanced users who might find it useful for their own research (and for bhvr to fix their wonderful game xD).
really wanna use it but don't want to get banned. is it like 100% you will be banned next patch? or is there a small chance of not getting banned? I wouldn't use it all the time just once
Quote Originally Posted by KorYouZ View Post
really wanna use it but don't want to get banned. is it like 100% you will be banned next patch? or is there a small chance of not getting banned? I wouldn't use it all the time just once
If you don't want to take the chance of getting banned, then don't use it. And like he said. When it comes to stuff like this, BHVR is usually on it asap, and there's def a big risk of getting banned for it.
Quote Originally Posted by Null View Post
If you don't want to take the chance of getting banned, then don't use it. And like he said. When it comes to stuff like this, BHVR is usually on it asap, and there's def a big risk of getting banned for it.
fair enough. but I will be really mad if people get away with this when they patch it lol
Quote Originally Posted by KorYouZ View Post
fair enough. but I will be really mad if people get away with this when they patch it lol
Did you use this method?
Quote Originally Posted by Mr.Christmas View Post
Did you use this method?
nah I'm afraid I will get banned. I have legacy skins. most of the perks unlocked. got them back when hacking these things was safe. don't want to risk losing that
Quote Originally Posted by Null View Post
If you don't want to take the chance of getting banned, then don't use it. And like he said. When it comes to stuff like this, BHVR is usually on it asap, and there's def a big risk of getting banned for it.
100% banned?

- - - Updated - - -

I'll be safe if I only add 5,000 shards?
Quote Originally Posted by Mr.Christmas View Post
100% banned?

- - - Updated - - -

I'll be safe if I only add 5,000 shards?
No matter how many shards you added. If BHVR detect this, you will banned even if you hack only 1 shard.
Posts 115 of 44 · Page 1 of 3
This thread is closed for replies.

Similar Threads

Tags for this Thread

None

Need help?