Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: Math question.

  1. #1
    Banned
    Join Date
    Aug 2001
    Posts
    30

    Math question.

    Alright, let me just first start off by telling you guys what this is about. There's a game called Snood (www.snood.com ) and I'm trying to get a false high score. I know it's lame and immature and I don't deserve any help at all. Fine, I know. If you don't want to help, fine, but don't just flame.

    I could change the scores on my computer easily enough with a hex edittor, but that's not what I'm trying to do. I'm trying to get my high score on a Web site, and that's a little bit trickier. You don't need to know how to hex edit, but it might save you some time if you do.

    If you don't know how to hex edit, go to http://bpsoft.com/ and download Hex Workshop. All the scores from Snood are saved in a file called SnoodPrf.21W. Drag the file to another directory, then create a new score file, and open them both in Hex Workshop and click Tools then Compare to find differences in the files, then change them accordingly to suite your needs.

    Alright, now, when you get a high score in Snood, you have the option of getting your Score Verification Number to submit to the high scores Web site. This is an example of the site you'll be taken to. As any hacker would notice, the verification number, level number, and score are right in the URL, and can be changed to whatever you want. There is a problem though, if the score you make up does not fit the verification code, your score will not be posted. So I'm trying to figure out the algorithm used to make the verification codes. I started recording data and figured a few things out. There are multiple verification codes for each score. Also, the score and percentage won in that difficulty are factors for the verification code. I found this out by hexxing the percentage won of all games number, and noticing that the verification code is not changed. I found out that the percentage one in that difficultly number affects the verification code because if you view the high scores list, it has the percentage won number next to the high scores, even though there isn't a field for you to input that number. That means that the server gets your percentage won number from the verification code.

    Now here comes the hard part... Figuring out the algorithm. I am not experienced with cryptography. I don't know anything about it, not even the basics or any methods or principles. I don't even know that much math. (I'm in Algebra 1 and a Freshy in high school.) That's why I need your guys' help. I saved several scores with the hope that they can be compared to each other to find a pattern. I haven't had much luck with finding a pattern until I got to the last set. Take a look at what I have and see if you can figure anything out. All the verification codes that I got for the specific score and percentage factors are listed below what my score and pertcetage were.

    Score 10 With 0%:
    06090166-6061988-06065524
    24878988-4487320-20641380
    42656700-2803762-44227146
    74323433-9937875-75196330
    92101255-7353217-99772196

    Score 10 With 50%:
    00055900-0005340-20021900
    14944811-9713011-37314338
    32722633-7139453-51990194
    46611544-6847124-68283522
    78388277-3971237-99152716
    64499366-4263566-82869388
    96166099-1397679-13738572

    Score 20 With 0%:
    40676388-0881586-82240908
    68454100-8207928-06826764
    86232922-6623360-20402520
    54565299-9599257-99533336
    18909655-3757473-51371714

    I looked at this and really couldn't make anything out of it. Then I had an idea. 20% of 10 and 10% of 20 are equal, right? They're both 2. I wanted to see if I'll get the same verification code if I did something like that. Here were my results:

    20 Points With 10%:
    08021588-8088114-18044262
    12910499-7796885-25337690
    26809300-6404556-32620028
    30798211-5112227-49913456
    58576033-3538669-63599212
    62465944-2246330-70882640
    76354855-1954001-87175078
    80243766-0662772-94468406
    94132677-9370443-01751834

    10 Points With 20%:
    08022588-8088114-18043262
    12911499-7796885-25336690
    26800300-6404556-32629028
    30799211-5112227-49912456
    62466944-2246330-70881640
    76355855-1954001-87174078
    80244766-0662772-94467406

    You see the similarities? It appears that the fourth digit is always 1 number higher in 10 Points With 20% than 20 Points with 10%. Also, the fourth from the last digit is one lower. Also, if the number is 0, one less of it is 9. And one more than 9 is 0. It only affects the one digit, rather than two digits like in normal addition. This still doesn't leave me with much though. Do any of you notice something that I didn't, or have any suggestions? Any help will be appreciated.

    Thanks.

    Ramzi

  2. #2
    Junior Member
    Join Date
    Feb 2002
    Posts
    17
    you need to try www. bodacion.com

  3. #3
    Banned
    Join Date
    Sep 2001
    Posts
    852
    snood that game is so damn addictive hehe we have it at shool gawd its fun ehehe

  4. #4
    Banned
    Join Date
    Aug 2001
    Posts
    30

    ?

    Originally posted here by guss
    you need to try www. bodacion.com
    What am I looking for at this site?

  5. #5
    PHP/PostgreSQL guy
    Join Date
    Dec 2001
    Posts
    1,164
    I gotta give credit...the guy may be trying to cheat a score but damn, he's worked his ass off for it!
    We the willing, led by the unknowing, have been doing the impossible for the ungrateful. We have done so much with so little for so long that we are now qualified to do just about anything with almost nothing.

  6. #6
    Senior since the 3 dot era
    Join Date
    Nov 2001
    Posts
    1,542
    LOL, that's true, perhaps cheating the score takes more time then getting the score yourself the legitimate way

  7. #7
    Is it 10?

  8. #8
    Senior Member
    Join Date
    Nov 2001
    Posts
    376
    I hate how addictive snood is....go anyone whose messing with it...

    btw, impressive work
    - Jimmy Mac

    Replicants are like any technology, if there not a hazard, its not my problem....

  9. #9
    Member
    Join Date
    Aug 2001
    Posts
    69
    I don't know anything about the game but the encryption scheme may be related with time, username etc.
    Try the game on different machines with same and different usernames.
    The basics of decrypting lies within the variables...
    Try, Fail but Do iT at last!
    ASA The ZeroTimeR
    The Turkish IT Documentation Project

  10. #10
    Banned
    Join Date
    Aug 2001
    Posts
    30
    Originally posted by VictorKaum
    LOL, that's true, perhaps cheating the score takes more time then getting the score yourself the legitimate way
    I know, I actually thought about that before. It's not so much that I want the high score, though, I just want to hack it. It was a challenge, see if it could be done.

    [QUOTE]Originally posted by ASA
    I don't know anything about the game but the encryption scheme may be related with time, username etc.
    Try the game on different machines with same and different usernames.
    The basics of decrypting lies within the variables...


    I know what the variables are already though. I included that information in my first post. The variables are your score, and your percent won in that difficulty. The server checks and makes sure that the verification code is legitimate, so it wouldn't matter what machine I tried it on using what user name. Even though I might (probably won't) get a different verification code on different machines, there still is an algorithm to create that code. That's what I want, the algorithm. As I also stated in my first post, each set of variables gives multiple verification codes. All legitimate. That means that there are multiple algorithms. All I need is one.

    What would be the first step to go about decrypting this?

    Ramzi

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •