Jump to content

Welcome to iOSGods
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. This message will be removed once you have signed in.
 Login to Account  Create an Account

Photo
 Hack

Bullet Force - Vulnerabilities & Exploits - Gold Hack

Hack Mod

  • This topic is locked
144 replies to this topic

#1 Liderluigi

Posted 07 December 2016 - 01:19 AM

Liderluigi
  • Reputation: 193
  • Thanks: 1615
  • UmV2ZXJzZSBFbmdpbm5lZXI=
193
Posts
122
Thanks
1615
Offline

Hi guys!

This game: Bullet Force, recently appeared on App Store and has become somehow a little bit famous, so I decided to take a look at it in any form to get exploits or vulnerabilities. I always prefer hacking in my own way which is no memory search or debugging at all, but inspecting packets going through server-client. And I found some interesting stuff!

First of all, when you register a new account, the app access the database DIRECTLY to store the new user and some data, which is a very BAD idea indeed. Here is some proof:

bGZUd.png

Therefore, ANYONE can access the database with just some newbie SQL-Injection, modify values, and even steal accounts!
Heres an account email, but I won't show the password:

DWN1b.png
I successfully had access to this account! I could even PLAY with it too!

Proof of randomly chosen account password:

oyjFf.png

Then, I stopped messing around with accounts, I wanted some currency! The same thing I did before, i did it now with MY account. I got some gold, some coins and cases too, BUT I could also add me unlocks, kills deaths, etc.

Proof:

5C7pc.png

Proof on device:

PIC 1: http://i.epvpimg.com/drqdd.png
PIC 2: http://i.epvpimg.com/4U0fh.png

However, Gold hacks gets you instantly banned.

I also noticed "accounts" TABLE on SQL had a variable called "unbanned" (Type: BOOL), therefore, anyone that gets banned can get unbanned so easily by just inserting a "TRUE"! Proof:

RywTg.png

All in all... This game is still in beta, thats why its so simple and bad written. So guys, be careful if you rgister using the same password and email than your own. :) Finally found out how to get gold without ban (08/12/16)

GOLD HACK :update:

PIC 3 (Unlocks): http://i.epvpimg.com/a2add.png
PIC 4 (Multiplayer):http://i.epvpimg.com/L4Fkb.jpg

If you want a free account with tons of gold: https://iosgods.com/...0/#entry1359042
If you want Credits and XP: https://iosgods.com/...ts-and-xp-hack/

Peace!


  Edited by Amuyea, 2 days ago.

  • 29
Posted Image

Thanked by 554 Members:

#2 WolfDesigns

Posted 07 December 2016 - 01:21 AM

WolfDesigns
  • Reputation: 1073
  • Thanks: 3506
  • GFX Team
  • GOD
1073
Posts
1,659
Thanks
3506

User's Awards

                 
Offline

Want me to alarm them?


  • 0

tMT5Zr5.gif

nYfV3DN.png

capture.gif capture1.gif


#3 Nitroxic

Posted 07 December 2016 - 01:22 AM

Nitroxic
  • Reputation: 702
  • Thanks: 2537
  • Veni Vidi Vici
702
Posts
1,122
Thanks
2537

User's Awards

              
Offline

lmfao


  • 0

#4 Patricktph

Posted 07 December 2016 - 01:23 AM

Patricktph
  • Reputation: 2863
  • Thanks: 12038
  • Rookie Modders
  • In Teaching Others We Teach Ourselves
2863
Posts
2,203
Thanks
12038

User's Awards

                 
Offline

hmm.. :)


  • 0

Y6WyoVk.png

:: Rookie Modders ::

 Forum Rules  Support • Donate  FAQ 

 

I'm a Pro when it comes to 💻 and 📱 - I'm Ptph Expect me.


#5 Liderluigi

Posted 07 December 2016 - 01:24 AM

Liderluigi
  • Reputation: 193
  • Thanks: 1615
  • UmV2ZXJzZSBFbmdpbm5lZXI=
193
Posts
122
Thanks
1615
Offline

Want me to alarm them?

 

If you can, yeah lol


  • 0
Posted Image

#6 Diversityy

Posted 07 December 2016 - 01:29 AM

Diversityy
  • Reputation: 3079
  • Thanks: 8891
  • Global Moderators
  • Jessica 🌹
3079
Posts
5,617
Thanks
8891

User's Awards

                 
Offline

hmu


  • 0

#7 JOK3R_DZ

Posted 07 December 2016 - 01:54 AM

JOK3R_DZ
  • Reputation: 102
  • Thanks: 330
  • Elite Member
102
Posts
422
Thanks
330
Offline

u got banned! :notbad:


  • 0

cooltext173075692942000.png


#8 jakob197925

Posted 07 December 2016 - 02:31 AM

jakob197925
  • Reputation: 11
  • Thanks: 2
  • Senior Member
11
Posts
221
Thanks
2
Offline
Figures

  Edited by jakob197925, 07 December 2016 - 02:33 AM.

  • 0

#9 QQRK

Posted 07 December 2016 - 03:44 AM

QQRK
  • Senior Members
  • 291 Posts
  • Reputation: 56
  • Thanks: 340
  • Elder Member
56
Posts
291
Thanks
340
Offline
I have no clue how to hack it.....
  • 0

5mneHOq.jpgxX2gFY9.jpg


#10 NICK0127

Posted 07 December 2016 - 10:20 AM

NICK0127
  • Reputation: 0
  • Thanks: 0
  • Newbie
0
Posts
18
Thanks
0
Offline
thx
  • 0





Also tagged with one or more of these keywords: Hack, Mod

2 user(s) are reading this topic

0 members, 2 guests, 0 anonymous users