Gold Exploit Finding
Gold Exploit Finding
might as well discuss about it since it's gonna be patched any day most likely (rumor has it that the game devs know the method), lets at least try to find it out in the meantime
Done via external program/script or of some sort - CONFIRMED, CATCHME HAS A CUSTOM PROGRAM THAT HE USES TO DO THIS. BUT THE PROGRAM I AM USING AS SEEN IN THE PICTURE IS BASICALLY WHAT HIS DOES
EDIT: NOTE TO KEEP IN MIND: ALL ACCOUNTS HAVE BEGINNER PACKAGE BOUGHT ON THEM, I KNOW THAT THE BEGINNER PACKAGE WAS A VERY BIG PART OF THE LAST GOLD EXPLOIT, NOT SURE ABOUT THIS ONE THOUGH, MIGHT JUST ONLY HAVE BEGINNER PACKAGE ON ALL OF THEM SINCE ON A FRESH ACCOUNT IF YOU HAVE MORE THAN $20 WORTH OF GOLD THE BEGINNER PACKAGE IS AUTOMATICALLY APPLIED
my idea of how it works:
the $5 package is bought and they tamper the request mid-way so you change the value to 16,000 instead of 500 so that your account is given 16,000 gold instead (the external program is how you change the value)
(maybe only 16,000 is the highest u can do since the game possibly might be programmed to only give out sets of 500, 1200, 2600, 7000, 16000 gold since those are the in-game purchase amounts)
and you can only do it a couple times (5 times max, which would be 80k gold, assuming so since thats highest amount i see on the gold accounts being sold) before the account gets auto banned or something like that?
hence why
1) all gold accounts sold on mpgh are always have 16k, 32k, 48k, 64k, 80k
2) highest gold account sold on mpgh always has 80k gold
3) the price is higher for higher gold amount accounts since to make an 80k account using this (correct?) method it would cost $25
but to make a 16k account it would only cost $5, and well they obviously need profit, if it only cost $5 to do 80k on an account, i doubt
they would be so greedy to want so much for it considering that means it costs the same to make a 16k account and sell those for like $10
found the value 500 (edited it to 16000 as seen in pic) while tampering the request here (request is blocked and keeps attempting until "ok" is hit, so it gives you plenty of time to edit needed values or mess around with stuff) but i am virtually broke so didnt have $5 to invest:P
Done via external program/script or of some sort - CONFIRMED, CATCHME HAS A CUSTOM PROGRAM THAT HE USES TO DO THIS. BUT THE PROGRAM I AM USING AS SEEN IN THE PICTURE IS BASICALLY WHAT HIS DOES
EDIT: NOTE TO KEEP IN MIND: ALL ACCOUNTS HAVE BEGINNER PACKAGE BOUGHT ON THEM, I KNOW THAT THE BEGINNER PACKAGE WAS A VERY BIG PART OF THE LAST GOLD EXPLOIT, NOT SURE ABOUT THIS ONE THOUGH, MIGHT JUST ONLY HAVE BEGINNER PACKAGE ON ALL OF THEM SINCE ON A FRESH ACCOUNT IF YOU HAVE MORE THAN $20 WORTH OF GOLD THE BEGINNER PACKAGE IS AUTOMATICALLY APPLIED
my idea of how it works:
the $5 package is bought and they tamper the request mid-way so you change the value to 16,000 instead of 500 so that your account is given 16,000 gold instead (the external program is how you change the value)
(maybe only 16,000 is the highest u can do since the game possibly might be programmed to only give out sets of 500, 1200, 2600, 7000, 16000 gold since those are the in-game purchase amounts)
and you can only do it a couple times (5 times max, which would be 80k gold, assuming so since thats highest amount i see on the gold accounts being sold) before the account gets auto banned or something like that?
hence why
1) all gold accounts sold on mpgh are always have 16k, 32k, 48k, 64k, 80k
2) highest gold account sold on mpgh always has 80k gold
3) the price is higher for higher gold amount accounts since to make an 80k account using this (correct?) method it would cost $25
but to make a 16k account it would only cost $5, and well they obviously need profit, if it only cost $5 to do 80k on an account, i doubt
they would be so greedy to want so much for it considering that means it costs the same to make a 16k account and sell those for like $10
found the value 500 (edited it to 16000 as seen in pic) while tampering the request here (request is blocked and keeps attempting until "ok" is hit, so it gives you plenty of time to edit needed values or mess around with stuff) but i am virtually broke so didnt have $5 to invest:P
Good luck, you're not that far off on a lot of your points.
I'd encourage anyone who actually does use it to exploit it while you can.
Will be patched soon.
I'd encourage anyone who actually does use it to exploit it while you can.
Will be patched soon.
Originally Posted by Riigged
plenty of time to edit needed values or mess around with stuff)
Originally Posted by kevinjing11
How much time exactly? Seconds? Minutes? Or would you need to code a bot because it's milliseconds
so all the time you need
if i start tampering all incoming requests using the program in pic, and load mpgh.net for example, a box will pop up with some link related to mpgh most likely, and i will hit "tamper" and then the box that is shown in the pic will pop up with values and stuff, and it wont load the site until i hit ok (as you can see in the pic, in the background the screen is still loading, it pretty much keeps loading and loading and loading until you hit ok)
rumor has it that it is done via a program that catchme himself wrote (probably does what said in the main post though, changes values during requests and whatnot)
this comes from people who bought the method, but i dont fully believe what they say because i know if i had the method i would be trolling people with it giving them the wrong ideas and etc. :P
also the method that deca thinks catchme used/is selling is stolen credit cards, which i guess could be its own method if anyone bothers to browse deep web for it.
how we found out, a tester sent me a picture that was mentioned on a disc0rd chat that only testers+admins+devs are in im assuming, but he blocked out part of it, and this god 059 managed to smoothly find out what was behind the big black blob of paint
this comes from people who bought the method, but i dont fully believe what they say because i know if i had the method i would be trolling people with it giving them the wrong ideas and etc. :P
also the method that deca thinks catchme used/is selling is stolen credit cards, which i guess could be its own method if anyone bothers to browse deep web for it.
how we found out, a tester sent me a picture that was mentioned on a disc0rd chat that only testers+admins+devs are in im assuming, but he blocked out part of it, and this god 059 managed to smoothly find out what was behind the big black blob of paint
Originally Posted by Riigged
rumor has it that it is done via a program that catchme himself wrote (probably does what said in the main post though, changes values during requests and whatnot)
this comes from people who bought the method, but i dont fully believe what they say because i know if i had the method i would be trolling people with it giving them the wrong ideas and etc. :P
also the method that deca thinks catchme used/is selling is stolen credit cards, which i guess could be its own method if anyone bothers to browse deep web for it.
how we found out, a tester sent me a picture that was mentioned on a disc0rd chat that only testers+admins+devs are in im assuming, but he blocked out part of it, and this god 059 managed to smoothly find out what was behind the big black blob of paint
this comes from people who bought the method, but i dont fully believe what they say because i know if i had the method i would be trolling people with it giving them the wrong ideas and etc. :P
also the method that deca thinks catchme used/is selling is stolen credit cards, which i guess could be its own method if anyone bothers to browse deep web for it.
how we found out, a tester sent me a picture that was mentioned on a disc0rd chat that only testers+admins+devs are in im assuming, but he blocked out part of it, and this god 059 managed to smoothly find out what was behind the big black blob of paint
Shitty encoding?
Originally Posted by ASERHaerheadrherherh
Though...how the fuck do you find stuff behind paint.
Shitty encoding?
Shitty encoding?
Originally Posted by ASERHaerheadrherherh
Though...how the fuck do you find stuff behind paint.
Shitty encoding?
Shitty encoding?
Originally Posted by Alde.
I want to know aswell hahah, also it looks like theres more at the end
Originally Posted by BurgerLoverMx
Definitly something at the end lol, the text spreads out more.
btw: everyone is dick jerking, but has anyone actually tried it? i will when i get home (thx for sharing @Riigged)
if the exploit is possible while buying 5$ gold, i wonder why no service has showed up that can purchase gold for your account.
anyways, interesting findings.
anyways, interesting findings.
Originally Posted by bluuman
if the exploit is possible while buying 5$ gold, i wonder why no service has showed up that can purchase gold for your account.
anyways, interesting findings.
anyways, interesting findings.
Also, dammit Rigged, you had to leak the method to the whole damn world (*COUGH*DECA*COUGH*)
scratch that steam part, done on web
is that already patched? also, what other game uses xsolla.
