March 17th, 2002, 03:26 AM
Alright, let me just first start off by telling you guys what this is about. There's a game called Snood (www.snood.com ) and I'm trying to get a false high score. I know it's lame and immature and I don't deserve any help at all. Fine, I know. If you don't want to help, fine, but don't just flame.
I could change the scores on my computer easily enough with a hex edittor, but that's not what I'm trying to do. I'm trying to get my high score on a Web site, and that's a little bit trickier. You don't need to know how to hex edit, but it might save you some time if you do.
If you don't know how to hex edit, go to http://bpsoft.com/ and download Hex Workshop. All the scores from Snood are saved in a file called SnoodPrf.21W. Drag the file to another directory, then create a new score file, and open them both in Hex Workshop and click Tools then Compare to find differences in the files, then change them accordingly to suite your needs.
Alright, now, when you get a high score in Snood, you have the option of getting your Score Verification Number to submit to the high scores Web site. This is an example of the site you'll be taken to. As any hacker would notice, the verification number, level number, and score are right in the URL, and can be changed to whatever you want. There is a problem though, if the score you make up does not fit the verification code, your score will not be posted. So I'm trying to figure out the algorithm used to make the verification codes. I started recording data and figured a few things out. There are multiple verification codes for each score. Also, the score and percentage won in that difficulty are factors for the verification code. I found this out by hexxing the percentage won of all games number, and noticing that the verification code is not changed. I found out that the percentage one in that difficultly number affects the verification code because if you view the high scores list, it has the percentage won number next to the high scores, even though there isn't a field for you to input that number. That means that the server gets your percentage won number from the verification code.
Now here comes the hard part... Figuring out the algorithm. I am not experienced with cryptography. I don't know anything about it, not even the basics or any methods or principles. I don't even know that much math. (I'm in Algebra 1 and a Freshy in high school.) That's why I need your guys' help. I saved several scores with the hope that they can be compared to each other to find a pattern. I haven't had much luck with finding a pattern until I got to the last set. Take a look at what I have and see if you can figure anything out. All the verification codes that I got for the specific score and percentage factors are listed below what my score and pertcetage were.
Score 10 With 0%:
Score 10 With 50%:
Score 20 With 0%:
I looked at this and really couldn't make anything out of it. Then I had an idea. 20% of 10 and 10% of 20 are equal, right? They're both 2. I wanted to see if I'll get the same verification code if I did something like that. Here were my results:
20 Points With 10%:
10 Points With 20%:
You see the similarities? It appears that the fourth digit is always 1 number higher in 10 Points With 20% than 20 Points with 10%. Also, the fourth from the last digit is one lower. Also, if the number is 0, one less of it is 9. And one more than 9 is 0. It only affects the one digit, rather than two digits like in normal addition. This still doesn't leave me with much though. Do any of you notice something that I didn't, or have any suggestions? Any help will be appreciated.
March 21st, 2002, 02:21 AM
Ummm... Try posting this in the [http://www.antionline.com/forumdispl...?s=&forumid=73]Cryptography[/URL] forum