Jump to content

Bullet Force - Vulnerabilities & Exploits - Gold Hack


145 posts in this topic

Recommended Posts

Updated (edited)

Hi guys!

This game: Bullet Force, recently appeared on App Store and has become somehow a little bit famous, so I decided to take a look at it in any form to get exploits or vulnerabilities. I always prefer hacking in my own way which is no memory search or debugging at all, but inspecting packets going through server-client. And I found some interesting stuff!

First of all, when you register a new account, the app access the database DIRECTLY to store the new user and some data, which is a very BAD idea indeed. Here is some proof:

bGZUd.png

Therefore, ANYONE can access the database with just some newbie SQL-Injection, modify values, and even steal accounts!
Heres an account email, but I won't show the password:

DWN1b.png
I successfully had access to this account! I could even PLAY with it too!

Proof of randomly chosen account password:

oyjFf.png

Then, I stopped messing around with accounts, I wanted some currency! The same thing I did before, i did it now with MY account. I got some gold, some coins and cases too, BUT I could also add me unlocks, kills deaths, etc.

Proof:

5C7pc.png

Proof on device:

PIC 1: http://i.epvpimg.com/drqdd.png
PIC 2: http://i.epvpimg.com/4U0fh.png

However, Gold hacks gets you instantly banned.

I also noticed "accounts" TABLE on SQL had a variable called "unbanned" (Type: BOOL), therefore, anyone that gets banned can get unbanned so easily by just inserting a "TRUE"! Proof:

RywTg.png

All in all... This game is still in beta, thats why its so simple and bad written. So guys, be careful if you rgister using the same password and email than your own. :)Finally found out how to get gold without ban (08/12/16)

GOLD HACK :update:

PIC 3 (Unlocks): http://i.epvpimg.com/a2add.png
PIC 4 (Multiplayer):http://i.epvpimg.com/L4Fkb.jpg

If you want a free account with tons of gold: https://iosgods.com/topic/41847-huge-giveaway-bullet-force-credits-cases-gold-and-lv80/#entry1359042
If you want Credits and XP: https://iosgods.com/topic/41811-tool-bullet-force-ios-android-credits-and-xp-hack/

Peace!

Updated by Amuyea
  • Like 8
  • Winner 1
  • Thanks 1
  • Agree 1
Guest
This topic is now closed to further replies.
  • Our picks

    • Nonogram Crossing Logic Puzzle v1.078.01 [ +3 Cheats ] Currency Max
      Modded/Hacked App: Nonogram Crossing Logic Puzzle By Two Desperados Ltd
      Bundle ID: com.twodesperados.pic.cross.picross.logic
      App Store Link: https://apps.apple.com/us/app/nonogram-crossing-logic-puzzle/id1613958816?uo=4


      🤩 Hack Features

      - Coins
      - Energy
      - Booster
      • 0 replies
    • Nonogram Crossing Logic Puzzle v1.078.01 [ +3 Jailed ] Currency Max
      Modded/Hacked App: Nonogram Crossing Logic Puzzle By Two Desperados Ltd
      Bundle ID: com.twodesperados.pic.cross.picross.logic
      App Store Link: https://apps.apple.com/us/app/nonogram-crossing-logic-puzzle/id1613958816?uo=4


      🤩 Hack Features

      - Coins
      - Energy
      - Booster
      • 0 replies
    • Candy Critters: Idle Merge v1.1.0 +4++ Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Candy Critters: Idle Merge By PlaySide Studios PTY LTD
      Bundle ID: com.playsidestudios.candycritters
      App Store Link: https://apps.apple.com/us/app/candy-critters-idle-merge/id6480020380?uo=4

       


      🤩 Hack Features

      - Unlimited Currencies -> Will increase instead of decrease.
      - All Cards Unlocked
      - No Card Upgrade Cost
      - Free In-App Purchases
      • 3 replies
    • Candy Critters: Idle Merge v1.1.0 +4++ Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Candy Critters: Idle Merge By PlaySide Studios PTY LTD
      Bundle ID: com.playsidestudios.candycritters
      App Store Link: https://apps.apple.com/us/app/candy-critters-idle-merge/id6480020380?uo=4

       


      🤩 Hack Features

      - Unlimited Currencies -> Will increase instead of decrease.
      - All Cards Unlocked
      - No Card Upgrade Cost
      - Free In-App Purchases
      • 0 replies
    • Loadout Warrior v2.2.4 [ +5 Jailed ] ADS NO
      Modded/Hacked App: Loadout Warrior By MobGame Pte. LTD
      Bundle ID: com.mobgame.loadout.warrior
      iTunes Store Link: https://apps.apple.com/us/app/loadout-warrior/id6743389761?uo=4
       

      🤩 Hack Features

      - ADS NO [ Rewards Free ]

      - Battle Coins

      - HP

      - ATK

      - ATK CD
      • 6 replies
    • Loadout Warrior v2.2.4 [ +5 Cheats ] ADS NO
      Modded/Hacked App: Loadout Warrior By MobGame Pte. LTD
      Bundle ID: com.mobgame.loadout.warrior
      iTunes Store Link: https://apps.apple.com/us/app/loadout-warrior/id6743389761?uo=4
       

      🤩 Hack Features

      - ADS NO [ Rewards Free ]

      - Battle Coins

      - HP

      - ATK

      - ATK CD
      • 4 replies
    • Block Clash!! v1.0.6 [+2 Jailed Cheats]
      Modded/Hacked App: Block Clash!! By treeplla Inc.
      Bundle ID: com.tree.hybrid.blockclash
      App Store Link: https://apps.apple.com/us/app/block-clash/id6745582734?uo=4

       


      🤩 Hack Features

      - Never Die
      - One Hit Kill
      • 5 replies
    • Block Clash!! v1.0.6 [+2 Cheats]
      Modded/Hacked App: Block Clash!! By treeplla Inc.
      Bundle ID: com.tree.hybrid.blockclash
      App Store Link: https://apps.apple.com/us/app/block-clash/id6745582734?uo=4


      🤩 Hack Features

      - Never Die
      - One Hit Kill
       
      • 5 replies
    • Soul Huntress: Dungeon Crawler v1.0.3 [+3 Jailed Cheats]
      Modded/Hacked App: Soul Huntress: Dungeon Crawler By Panthera Joint Stock Company
      Bundle ID: com.pantheraplay.soulhuntress
      App Store Link: https://apps.apple.com/ph/app/soul-huntress-dungeon-crawler/id6743422594?uo=4


      🤩 Hack Features

      - Never Die
      - Unlimited Currency (Always Will Increase Spend)
      - Always Can Use Items (Even when has cooldown)
      • 5 replies
    • Soul Huntress: Dungeon Crawler v1.0.3 [+3 Cheats]
      Modded/Hacked App: Soul Huntress: Dungeon Crawler By Panthera Joint Stock Company
      Bundle ID: com.pantheraplay.soulhuntress
      App Store Link: https://apps.apple.com/ph/app/soul-huntress-dungeon-crawler/id6743422594?uo=4



      🤩 Hack Features

      - Never Die
      - Unlimited Currency (Always Will Increase Spend)
      - Always Can Use Items (Even when has cooldown)
      • 4 replies
    • Tales of Brave doomsday battle v2.1.19 [ +9 Jailed ] ADS NO
      Modded/Hacked App: Tales of Brave doomsday battle By Hakan Aksar
      Bundle ID: com.tianyou.tob
      iTunes Store Link: https://apps.apple.com/us/app/tales-of-brave-doomsday-battle/id6587553322?uo=4
       

      🤩 Hack Features

      - ADS NO [ Rewards Free ]

      - Never Die

      - ONE HiT KiLL

      - Enemy Movement Speed

      - ATK Speed

      - Bullet Max 20

      - Bullet Size Big

      - Enemy Freeze

      - Wall No Hit Enemy


      ⬇️ iOS Hack Download IPA Link


      Hidden Content

      Download via the iOSGods App
      • 22 replies
    • Tales of Brave doomsday battle v2.1.19 [ +9 Cheats ] ADS NO
      Modded/Hacked App: Tales of Brave doomsday battle By Hakan Aksar
      Bundle ID: com.tianyou.tob
      iTunes Store Link: https://apps.apple.com/us/app/tales-of-brave-doomsday-battle/id6587553322?uo=4
       

      🤩 Hack Features

      - ADS NO [ Rewards Free ]

      - Never Die

      - ONE HiT KiLL

      - Enemy Movement Speed

      - ATK Speed

      - Bullet Max 20

      - Bullet Size Big

      - Enemy Freeze

      - Wall No Hit Enemy

       

      ⬇️ iOS Hack Download Link


      Hidden Content

      Download Hack
      • 14 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines