Pages

Friday, September 2, 2011

Automatically add clan-members on Zynga’s Vampires iPhone game

imageThis is a quick hack I’ve done on Zynga’s “Vampires” game on the iPhone. One of the parameters of becoming powerful in the game is to have a large clan (friends) in the game. As there is no downside with being clan-member with people outside your normal social sphere (like the loss of privacy) people have published their player IDs on the net in the hope that people will add them.

The thing is that adding members to your clan is a tedious effort, where you can add a member perhaps every 30 seconds if you are really fast. Still, adding hundreds of members is something that I rather not do manually. Luckily for me I didn’t need to.

First off I sniffed the traffic between the iPhone and Zynga’s servers while playing the game and especially took note how the “add player to clan” message looked like. It looked something like this:

{"purchase_level":0,"accept_codes":["PLAYER_TO_ADD"],"zid":"8:14103891","client_version":"1.72","gids":[46],"data":{},"ipid":"IPHONE_ID","gid":46}



The nice thing is that it is not protected against replay attacks, so I can post the same message over and over again with a list of clan members to add.


So lets get the second piece of the puzzle and grab some player IDs. I grabbed almost 1200 player IDs from http://mycodelive.com/vampires#ids and put them in a text-file called “vampires.txt”. I then wrote a little bash-script around curl that looks like this:


   1:  #!/bin/bash
   2:   
   3:  for VAMP_ID in `cat vampires.txt`
   4:  do
   5:          POST_DATA1='{"purchase_level":0,"accept_codes":["'
   6:          POST_DATA2='"],"zid":"8:14103891","client_version":"1.72","gids":[46],"data":{},"ipid":"IPHONE_ID","gid":46}'
   7:   
   8:          POST_DATA=${POST_DATA1}${VAMP_ID}${POST_DATA2}
   9:   
  10:          curl \
  11:                  --user-agent "Vampires/1.72 CFNetwork/485.13.9 Darwin/11.0.0" \
  12:                  --data-binary ${POST_DATA} \
  13:                  http://net.iphone.zynga.com/net/group/accept.php?zsig=A79D802A730CE31B1AC5853615AD87A0
  14:  done



You need to replace IPHONE_ID with your iPhone ID (you can grab it by sniffing the traffic just like how I did it).


I hope that you will use this successfully and get as large clan as I have now Winking smile.


/Michael Boman


PS:


Just to be clear: The player IDs from http://mycodelive.com/vampires#ids are from people who wants to be added to your clan so in their turn get a larger clan for the game (if I add you to my clan I automatically becomes added to your clan as well). The “hack” in this is that I automated the process of adding people to my clan. I am lazy, but in a good way.







photoMichael Boman is a a security consultant with Omegapoint AB Stockholm (Sweden) office.


When he is not breaking in to customers systems and infrastructure he collects and analyzes malware. That is a peculiar hobby but when he said “some people collects stamps, I collect malware” it did make a weird sort of sense.


Michael has spoken at many international security conferences about his discoveries in the security field on various topics from intrusion detection to a large-scale analysis of the worlds HTTPS servers.

74 comments:

  1. Did you know that there exists a Twitter hashtag focused on just one system cavity? After a symptom connected with illness as well as malnourishment, flashing some sort of "thigh gap" has turned into a trendy factor to own.Kyäni

    ReplyDelete
  2. Zynga game helps are so interesting to play , if any problem then Zynga game support team helps you please go through this link.Zynga Games Support


    Thanks & Regards
    Aalia lyon

    ReplyDelete
  3. Oh nice post for me!! I just searching Iphone game for playing. Finally got it. I am sure that it will be very effective to me as well. Thanks!! Kevin Cooper

    ReplyDelete
  4. Diversion has advanced and it originates from various sources nowadays for the aggregate fulfillment of the general population. The latest improvement is the open door given to the gamers to download wii recreations free ideal on your PC.visit this site

    ReplyDelete
  5. Wonderful post! We will be linking to this particularly great post on our site. Keep up the great writing. check this link right here now

    ReplyDelete
  6. When it comes to the designs of iPhone 5 cases, the creators at Apple have definitely surpassed themselves. iphone 5 manual

    ReplyDelete
  7. What ever you need to do, don't develop it just because all of us else is. Develop it along with your client in brain. Do your prospects presently view your merchandise on-line, are they thinking about your thing, do they take a look at your site to discover subject material that may be not available elsewhere, are you able to enable your consumers with a trouble, do you want to learn what your clients feel?how to hack into someones iphone

    ReplyDelete
  8. This comment has been removed by the author.

    ReplyDelete
  9. The design for any game is done at the outset when users, programmers and developers are discussing the planning for the game and who it will appeal to on the market.

    http://reviews.mysteryblock.com/best-gaming-desktops-under-1000/

    ReplyDelete
  10. Let my experience be your guide, and pay attention to the fine print of your warranty so that you are sure whether mouldy conditions are covered under the warranty especially if you are going to use a mobile phone purchased overseas where there are different climatic conditions. www.imeitrackeronline.com

    ReplyDelete
  11. This is the post help me more about to know automatically add clan member. I always try to get this information but not able to do this. Thanks for share this Good Tips

    ReplyDelete
  12. System and tower barrier games like Plants versus Zombies are winding up progressively more well known in the Apple App Store. In case you're a devotee of the class, you won't have any desire to miss on the dream themed Legendary Wars by Live Games.I find www.metalcasinobonus.se this site for the best gaming , If you need you can visit this site.

    ReplyDelete
  13. Enthralled by the writer’s ability to write in this magnificent way.
    visit us

    ReplyDelete
  14. When playing computer games, you would need to respond rapidly and take split second choices keeping in mind the end goal to prevail in the given undertaking.gameplay

    ReplyDelete
  15. When playing computer games, you would need to respond rapidly and take split second choices with a specific end goal to prevail in the given errand.Gamer Home

    ReplyDelete
  16. The information strategy was a turning dial (like the ones in old phones). The yield was appeared in a 35x16-pixel cathode-beam tube show.GamesCatalyst

    ReplyDelete
  17. Spacewar! unblocked games isn't just considered by numerous as the primary "genuine" computer game (since this diversion has a video show), however it likewise have been turned out to be the genuine ancestor of the first arcade amusement.

    ReplyDelete
  18. Gaming can likewise enhance family connections, as a portion of these games can and ought to be played together. كلمات سر جراند 5 سوني 4

    ReplyDelete
  19. A youngster's creative energy can be empowered through pretending and experience games.minecraft server list

    ReplyDelete
  20. Superbly written article, if only all bloggers offered the same content as you, the internet would be a far better place.. g2a cashback code July 2018

    ReplyDelete
  21. Wow! Such an amazing and helpful post this is. I really really love it. It's so good and so awesome. I am just amazed. I hope that you continue to do your work like this in the future also toon blast cheats

    ReplyDelete
  22. On the off chance that this happens and there are no issues with the amusement itself; at that point the awful side is only that one minimal fly in your room which is no major ordeal.Unblocked Club

    ReplyDelete
  23. aliens are invading the Earth in 'blocks' by moving down the screen gradually. As the intrepid savior of the Earth it's your task to use your solitary laser cannon, by moving horizontally, and zapping those dastardly aliens out of the sky.https://unblockedhw.weebly.com/

    ReplyDelete
  24. Complex digital games involve high level of multitasking thus improving brain's natural learning process. slopeunblock.weebly.com

    ReplyDelete
  25. Other than the codes you would be given stroll through, insights, free master exhortation,free psn code generator instructional exercises and synopses that would give all of you the fundamental data that you require about the amusement. http://www.pcmunkey.net/

    ReplyDelete
  26. According to Build-Gaming-Computers, one of the best gaming keyboards available in the market is the Logitech G15 Gaming Keyboard. This keyboard has been custom-made to meet a gamer's need. It specifically features:
    Buy Pickleball Paddles

    ReplyDelete
  27. Role-playing games are a very specialist type of game that really need a far greater attention to detail than other less immersive genres. https://appmirror.net/

    ReplyDelete
  28. It's been said by numerous that Atari's well known video diversion "Rocket Command" was made after this gaming gadget. http://unblockedgamesdadu.weebly.com/

    ReplyDelete
  29. if a player has bad hand, but he still wager in a way as if he or she has a good one, then it means that he or she is bluffing pokerku19.net

    ReplyDelete
  30. Its straightforward designs don't make the characters less cutesy; it just means the amusement is ensured to run like a fantasy on your PC! helpful site

    ReplyDelete
  31. There are a number of causes of this problem - from faulty graphics driver (unlikely) to having issues within Fortnite itself fortnite v bucks hack

    ReplyDelete
  32. . At the point when a gaming organization is building up an amusement, it is as a rule on a tight timetable. https://www.kedaicasino.net

    ReplyDelete
  33. that is my first era go to right here. From the heaps of clarification a propos your articles,I bet i am not unaccompanied one having all of the entertainment proper here! Latest Clash of Lights S3

    ReplyDelete
  34. There are a few kinds of consoles accessible in the market today. The famous ones are Xbox 360, Wii and PlayStation 3 for instance.fastest overwatch boosting

    ReplyDelete
  35. I really like and appreciate your article post. Will read on... Jake

    ReplyDelete
  36. Aside from it, it gives me the http://brainteasingriddles.com/ alternative of 8 key thumb cushions which are likewise completely modified with respect to my abilities. Thus, it gives me 16.8M shades of light with the

    ReplyDelete
  37. Took me time to read all the comments, but I really enjoyed the article. It proved to be Very helpful to me and I am sure to all the commenters here! It’s always nice when you can not only be informed, but also entertained! play free online games

    ReplyDelete
  38. Therefore, it is best if the consumer questions whether or not the used iPhone in question is FCC complaint and GPS enabled before paying for the device.mobile phone repair in Maldon

    ReplyDelete
  39. It has one best alternative that it is effortlessly flexible nearly every which way with all points. generator

    ReplyDelete
  40. I would like to say that this blog really convinced me to do it! Thanks, very good post. dragon city cheat codes

    ReplyDelete
  41. Cool stuff you have got and you keep update all of us. xbox live gold

    ReplyDelete
  42. One can without much of a stretch stay in contact with the most recent patterns by getting the most recent data in regards to the forthcoming models. ShopSuperhero

    ReplyDelete
  43. I recently came across your article and have been reading along. I want to express my admiration of your writing skill and ability to make readers read from the beginning to the end. I would like to read newer posts and to share my thoughts with you. Eric

    ReplyDelete
  44. Additionally, it is effectively flexible and can move with no pressures. It has likewise a little segment for the mouse development. follow on twitch

    ReplyDelete
  45. I’ve been searching for some decent stuff on the subject and haven't had any luck up until this point, You just got a new biggest fan!.. coin master free spins

    ReplyDelete
  46. Furthermore, even the most broadly useful multiplatform motors are extremely appropriate for building games in a single specific classification, for example, first-individual shooters or hustling games. dragon city cheats 2030

    ReplyDelete
  47. Pretty good post. I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I'll be subscribing to your feed and I hope you post again soon. Big thanks for the useful info. click to read.

    ReplyDelete
  48. It is now possible to obtain an iPhone spy app that will allow for monitoring of all activity that takes place on that iPhone. iPhone spy app

    ReplyDelete
  49. Really I enjoy your site with effective and useful information. It is included very nice post with a lot of our resources.thanks for share. i enjoy this post. fortnite free v bucks generator

    ReplyDelete
  50. The Platform Game or Platformer is comprises of bouncing between suspended stages of shifting statures or deterrents and in some cases both to push ahead in the diversion unrankedsmurfs.com

    ReplyDelete
  51. This wheel enables me to perform in smooth way like I am driving live out and about. It truly eggs on me to lead the amusement in next dimension without hindrances. fifa55

    ReplyDelete
  52. There has dependably been a sure request. In which these cheats can be utilized and diversion makers have grasped the exertion of amusement players to chase for the cheats.
    buy fortnite accounts

    ReplyDelete
  53. The most critical thing to recollect when performing DIY iPhone fix is to buy quality fix parts. Make sure to just purchase a fix unit from a reliable source with ensured parts. iphone repair

    ReplyDelete
  54. Wonderful blog post.Really thanks! Cool.Really appreciate you sharing that post.Really getting excited about study more. Awesome.Im obliged for the article.Really many thanks! Great.
    agen poker online
    domino online
    bonus poker
    domino qiu qiu

    ReplyDelete
  55. KLUB4D .. Thank's Mr / Mrs to make this article, your article help all people who find backlink.. Maybe i can follow your blog, because i'm need something news article about your blog. This is my Product

    Togel Singapore
    Togel Hongkong
    Data SGP
    Data HK
    Togel Online
    Dewa Togel
    Togel Sidney
    Toto Macau
    Japan Pools
    Japan Sweep
    Lottery Online
    Daftar Togel Online
    Alternatif Klub4d

    I will continue to check you news article again, thanks a lot for your help. My Website in : KLUB4D.CO.COM / KLUB4D.XYZ / DAPATEMAS.COM

    ReplyDelete
  56. Words, thoughts, and pictures of mercilessness not ever envisioned to be "amusement" ten years back right now top off quite a bit of our children's recreation time, habituating them to advertised incitement all the while.
    school unblocked games

    ReplyDelete
  57. We have sell some products of different custom boxes.it is very useful and very low price please visits this site thanks and please share this post with your friends. next level gaming

    ReplyDelete
  58. There is a high craze for latest games,unblocked games as they provide the players an enhanced entertainment option.

    ReplyDelete
  59. Kami menawarkan ID PRO untuk bosku dijamin anda pasti dapat Jackpotnya Dengan modal 10rb anda sudah dapat bermain 8 Game dalam 1 id
    Agen Poker Online Terpercaya
    BandarQ Online
    Link alternatif sobatpoker
    sobatpoker

    ReplyDelete
  60. If you wish for to improve your knowledge just keep visiting this website and be
    updated with the most up-to-date gossip posted here. http://toonblast.info/

    ReplyDelete
  61. Never enough about knowledge

    1xbet

    Education is very good and many knowledge

    ReplyDelete
  62. 1xbet adalah situs agen Judi Bola Online terpercaya yang memberikan banyak Pilihan Permainan yang disediakan seperti
    sepak bola, basket, tenis, badminton, Hoki es, tinju, Esport, Slot, Live Casino dan masih banyak lainnya
    , Selain itu 1xbet indonesia memiliki Pasaran Odds Terlengkap Di Dunia yang tidak di miliki situs lain nya,
    Dengan customer service yang profesional dan online 24 jam setiap harinya kami dapat membantu kapan pun dan dimanapun member kami berada.

    ReplyDelete
  63. A tyke's creative energy can be invigorated through pretending and experience games. Regardless of whether a portion of these games can appear to be dull because of its realistic nature and savagery, mordhau cheats

    ReplyDelete
  64. Specifically for BlackBerry devices, this store has around 16,000 apps and claims to have 20m phones in the market. No information on actual downloads but the devices don't make it easy.google play reviews in slack

    ReplyDelete
  65. Hello Thanks. Your article is very good and I really like all of your posts agen bandarq

    ReplyDelete
  66. INGAT, jangan ketipu sama promo discount yang besar tapi ketika JP tidak dibayar !

    Main togel yang penting cari BO yang berpengalaman, yang sudah pasti aman dan terpercaya.

    Minimal DEPO 50 ribu
    Minimal WD 50 ribu

    Gak akan rugi daftar disini, banyak bonusnya !

    4D 66% [pasang 1000 cuma bayar 340 perak] x 3000
    3D 69% [ pasang 1000 cuma bayar 410 perak] x 400
    2D 29% [ pasang 1000 cuma bayar 710 perak] x 70

    Dengan 6 Pasaran Togel Terbaik

    – BRITANIA tutup pasaran Pk. 12.30wib Result Pk.13.00wib

    – Sydney tutup pasaran pukul 13:00 WIB, Result pukul 14:00 WIB (Setiap Hari)

    – TIMOR LESTE tutup pasaran Pk.15.30wib Result Pk.16.00wib

    – Singapore tutup pasaran pukul 17:30 WIB, Result pukul 17:45 WIB (Selasa, Jumat Libur)

    – WYNN tutup pasaran Pk.20.30wib Result Pk.21.00wib

    – Hongkong tutup pasaran pukul 22:20 WIB, Result pukul 23:00 WIB (Setiap Hari)

    Promo
    - Bonus New Member sebesar 10% [maks bonusnya 50 ribu]
    - Bonus Depo sebesar 5% [ maks bonusnya 5 ribu]
    - Bonus Refferal 1% [Seumur Hidup]
    - Bonus Prize Untuk Prize

    Support BANK

    BCA, BNI, BRI dan Mandiri

    Berminat untuk daftar ?
    silahkan klik link yang ada dibawah ini

    www.kantongajaib*club/?ref=MedanKia
    (Tanda Bintang diganti TITIK)

    ReplyDelete