XML files and codes

what charles do is basically rewrite the server string into believing your tweaked string.. meaning here.. but its just change what you tweak and it will not sending the info back to the server to save..

that why you need to do all method in charles everytime you want to hack since after you reset the game turn back to normal.. since youre not saving data you tweaked into the server..

sooo by your reply its clear that hes not using charles based on..
1. hes injecting the server to do stuff, but charles did not injecting the server, charles just rewrote the path..
2. hes infecting other by player id, but charles only work for those who initiate it and not other.
3. player data  information are on swf format and "We" use charles to rewrite xml format file, and cant do anything to swf files not that i known off...
 

Maybe he uses Charles to alter an actual purchase.

Like he makes a real $5 purchase for 20 gold and then tricks the server into believing he made a $100 purchase for 1000 gold or something.

It's an area of Charles rewrite that probably none of us has spent much time studying or playing around with because in order to monitor the response activity we have to actually spend money making gold purchases. And I'm guessing most of us don't do that.



Or maybe he's just using stolen credit cards.

again it will work.. you repath into believe 100$ insteed of 20$ but since you just repath it.. doesnt mean what you tweaked will be saved.. since you did not send any data back to server.. so the original data on server remain unchanged... and although visually you manage to did that.. but it will return back after reset..


me and jarly did manage to hack gold.. but since we only rewrite the path.. server did not save the altered infomations.. so the gold gone right after reset...

jarly manage to make deploy rewarded with gold.. and using same concept i manage to change lockbox groupboss reward to gold... but its gone after reset.. 

that why i can confirm they not using charles..

and its not logic if he use stolen cc since you cant topup 3rd party account.

Anyone tried changing strings in client2.swf yet? as i heard from someone they use change strings in client2.swf to send data to server.

Right but some xml rewrites do get saved on the server. We've seen that with the GB silver hack, for example.

That suggests that there are loopholes where a simple charles rewrite will work, the trick is just finding exactly what works and what doesn't. Maybe there's a loophole somewhere that affects gold. If it works with silver, then theoritically it can work with other hard currencies too.

I agree though, it's more likely that they are using other methods to hack gold, but I'm not convinced that it's impossible to do with xml rewrites also. Unlikely, but plausible.

Fathead what makes you think they use a different method for hacking?

silver hack is able since its happen on different string a.k.a battle string and can only be done to groupbosses since groupboss reward you extra silver based on your damage... and yes battle does "send" data to server but only limited to scores, droploot (battle item) that you get after killing/damaging mob and these only limited to weight.. (as we know to make uiso drop)
you cant make they drop thing like gold/lockbox/cp since developers did not implement them to drop in battle since they not item to use in battle a.k.a they not listed as dropable loot.... 

in conclusion server are not programmed to detect what happen in battle, thing like how you beat boss, how much damage you did... etc etc.. this can be proven by your action in battle.. example you get in battle and farm 20 uiso but you accidently reset the game and you lost the loot..

softCurrencyDamageMultiplier is what made silver hack work..

thing is the problem occors on command line... since there's softcurrency (silver) theres hardcurrency (gold) theres softCurrencyDamageMultiplier but there no command for hardCurrencyDamageMultiplier in battle string...

soooo we need server to have command line that can benefits us
in battle... like making gold as dropable loot..

so how they brazillian does it? idk but they must have send thier request in some way for server to acknoledge it.. my best bet is something like fiddler or something close that can effect swf responce..

my friend also bought lockboxes from someone called "emma frost"
He brought 250 lockboxes aswell. 
Everything works perfect in his account definitely not fake i checked myself

emma don't teach hack to anyone otherside of brazil
i asked her if she could tell me
seriously he hate her because of this :

Ah okay fair enough.
 

See now that's interesting.

For silver it seems that he uses the same method we use, by upping GB health.

For lockboxes it sounds almost like a replication type hack. I'll bet if you have 0 gold on your account (or u-iso), he can't add any. You need at least 1 of whatever it is he adds, like his requirement for lockboxes since he somehow alters the value of currencies already registered on your account.

If that is the case (just speculation), then it probably isn't a force drop hack either, but something else entirely.

I have two Dragon city gold hack from the past, written in PHP (scripts). Both using your FB ID and your game session ID sending server requests outside of the game. I think they found the same way doing it with MAA.

He never said anything about the gold, but maybe you are right and he needs at least 1. For the CPs, I know he is just opening lockboxes, since he said they come with random things like weapons and pve items.

We can infer from the rewrite rules, the "neighbor" line in Charles, under n7-vip-playdom-=maa-whatever is hackable, and some items stick.

THe rewrite rules only change the Response coming back.

So, one might look at that line in charles, look at the response (it's big) and see what epoch dates can be changed, quantities, itemids, and w/e.

You don't need to clear your cache to do rewrites, but you probably could enable a breakpoint in that n7-vip-playomd-things line, before you load the game, and alter stuff before executing it, and observe behaviour.

edit: also, find the loottable in the xmls, from which winter lockboxes get their loot. See if you can rewrite the itemids for those items. Or see if you can rewrite that loottable to a different one.

Here's the itemid for 1 gold if you wanna m,ess around with changing itemids

1gold
f7b5f040-7c19-11e4-b60d-065676001937
 

these are all speculation. until we know that they pretain to actual XML hacks, put them in some kind of new speculated hack thread.

New update:  20160202110128