Gold Exploit Finding

Posts 1–15 of 123 · Page 1 of 9
Gold Exploit Finding
might as well discuss about it since it's gonna be patched any day most likely (rumor has it that the game devs know the method), lets at least try to find it out in the meantime

Done via external program/script or of some sort - CONFIRMED, CATCHME HAS A CUSTOM PROGRAM THAT HE USES TO DO THIS. BUT THE PROGRAM I AM USING AS SEEN IN THE PICTURE IS BASICALLY WHAT HIS DOES

EDIT: NOTE TO KEEP IN MIND: ALL ACCOUNTS HAVE BEGINNER PACKAGE BOUGHT ON THEM, I KNOW THAT THE BEGINNER PACKAGE WAS A VERY BIG PART OF THE LAST GOLD EXPLOIT, NOT SURE ABOUT THIS ONE THOUGH, MIGHT JUST ONLY HAVE BEGINNER PACKAGE ON ALL OF THEM SINCE ON A FRESH ACCOUNT IF YOU HAVE MORE THAN $20 WORTH OF GOLD THE BEGINNER PACKAGE IS AUTOMATICALLY APPLIED

my idea of how it works:
the $5 package is bought and they tamper the request mid-way so you change the value to 16,000 instead of 500 so that your account is given 16,000 gold instead (the external program is how you change the value)
(maybe only 16,000 is the highest u can do since the game possibly might be programmed to only give out sets of 500, 1200, 2600, 7000, 16000 gold since those are the in-game purchase amounts)
and you can only do it a couple times (5 times max, which would be 80k gold, assuming so since thats highest amount i see on the gold accounts being sold) before the account gets auto banned or something like that?

hence why
1) all gold accounts sold on mpgh are always have 16k, 32k, 48k, 64k, 80k
2) highest gold account sold on mpgh always has 80k gold
3) the price is higher for higher gold amount accounts since to make an 80k account using this (correct?) method it would cost $25
but to make a 16k account it would only cost $5, and well they obviously need profit, if it only cost $5 to do 80k on an account, i doubt
they would be so greedy to want so much for it considering that means it costs the same to make a 16k account and sell those for like $10

found the value 500 (edited it to 16000 as seen in pic) while tampering the request here (request is blocked and keeps attempting until "ok" is hit, so it gives you plenty of time to edit needed values or mess around with stuff) but i am virtually broke so didnt have $5 to invest:P
Good luck, you're not that far off on a lot of your points.
I'd encourage anyone who actually does use it to exploit it while you can.
Will be patched soon.
Quote Originally Posted by Riigged View Post
plenty of time to edit needed values or mess around with stuff)
How much time exactly? Seconds? Minutes? Or would you need to code a bot because it's milliseconds
Quote Originally Posted by kevinjing11 View Post
How much time exactly? Seconds? Minutes? Or would you need to code a bot because it's milliseconds
it blocks the request until you hit ok
so all the time you need
if i start tampering all incoming requests using the program in pic, and load mpgh.net for example, a box will pop up with some link related to mpgh most likely, and i will hit "tamper" and then the box that is shown in the pic will pop up with values and stuff, and it wont load the site until i hit ok (as you can see in the pic, in the background the screen is still loading, it pretty much keeps loading and loading and loading until you hit ok)
rumor has it that it is done via a program that catchme himself wrote (probably does what said in the main post though, changes values during requests and whatnot)
this comes from people who bought the method, but i dont fully believe what they say because i know if i had the method i would be trolling people with it giving them the wrong ideas and etc. :P


also the method that deca thinks catchme used/is selling is stolen credit cards, which i guess could be its own method if anyone bothers to browse deep web for it.
how we found out, a tester sent me a picture that was mentioned on a disc0rd chat that only testers+admins+devs are in im assuming, but he blocked out part of it, and this god 059 managed to smoothly find out what was behind the big black blob of paint

Quote Originally Posted by Riigged View Post
rumor has it that it is done via a program that catchme himself wrote (probably does what said in the main post though, changes values during requests and whatnot)
this comes from people who bought the method, but i dont fully believe what they say because i know if i had the method i would be trolling people with it giving them the wrong ideas and etc. :P


also the method that deca thinks catchme used/is selling is stolen credit cards, which i guess could be its own method if anyone bothers to browse deep web for it.
how we found out, a tester sent me a picture that was mentioned on a disc0rd chat that only testers+admins+devs are in im assuming, but he blocked out part of it, and this god 059 managed to smoothly find out what was behind the big black blob of paint

Though...how the fuck do you find stuff behind paint.
Shitty encoding?
Quote Originally Posted by ASERHaerheadrherherh View Post
Though...how the fuck do you find stuff behind paint.
Shitty encoding?
I want to know aswell hahah, also it looks like theres more at the end
Quote Originally Posted by ASERHaerheadrherherh View Post
Though...how the fuck do you find stuff behind paint.
Shitty encoding?
matched the text+size using same font that disc0rd uses, the tiny bits of character that werent painted up made that possible, thank 059 for it
Quote Originally Posted by Alde. View Post


I want to know aswell hahah, also it looks like theres more at the end
Definitly something at the end lol, the text spreads out more.

Quote Originally Posted by BurgerLoverMx View Post
Definitly something at the end lol, the text spreads out more.

yeah. it could be anything there. also, does anyone know is xsolla is decas proprietary payment gateway? if not, maybe u can abuse other games?

btw: everyone is dick jerking, but has anyone actually tried it? i will when i get home (thx for sharing @Riigged)
if the exploit is possible while buying 5$ gold, i wonder why no service has showed up that can purchase gold for your account.
anyways, interesting findings.
Quote Originally Posted by bluuman View Post
if the exploit is possible while buying 5$ gold, i wonder why no service has showed up that can purchase gold for your account.
anyways, interesting findings.
Probably because if they do it for your account, you can use hidden methods to find out the method.

Also, dammit Rigged, you had to leak the method to the whole damn world (*COUGH*DECA*COUGH*)
scratch that steam part, done on web

is that already patched? also, what other game uses xsolla.
Posts 1–15 of 123 · Page 1 of 9

Post a Reply

Similar Threads

Tags for this Thread

None

Talk with us