-
March 23rd, 2002, 04:34 AM
#1
Math question.
Alright, let me just first start off by telling you guys what this is about. There's a game called Snood (www.snood.com ) and I'm trying to get a false high score. I know it's lame and immature and I don't deserve any help at all. Fine, I know. If you don't want to help, fine, but don't just flame.
I could change the scores on my computer easily enough with a hex edittor, but that's not what I'm trying to do. I'm trying to get my high score on a Web site, and that's a little bit trickier. You don't need to know how to hex edit, but it might save you some time if you do.
If you don't know how to hex edit, go to http://bpsoft.com/ and download Hex Workshop. All the scores from Snood are saved in a file called SnoodPrf.21W. Drag the file to another directory, then create a new score file, and open them both in Hex Workshop and click Tools then Compare to find differences in the files, then change them accordingly to suite your needs.
Alright, now, when you get a high score in Snood, you have the option of getting your Score Verification Number to submit to the high scores Web site. This is an example of the site you'll be taken to. As any hacker would notice, the verification number, level number, and score are right in the URL, and can be changed to whatever you want. There is a problem though, if the score you make up does not fit the verification code, your score will not be posted. So I'm trying to figure out the algorithm used to make the verification codes. I started recording data and figured a few things out. There are multiple verification codes for each score. Also, the score and percentage won in that difficulty are factors for the verification code. I found this out by hexxing the percentage won of all games number, and noticing that the verification code is not changed. I found out that the percentage one in that difficultly number affects the verification code because if you view the high scores list, it has the percentage won number next to the high scores, even though there isn't a field for you to input that number. That means that the server gets your percentage won number from the verification code.
Now here comes the hard part... Figuring out the algorithm. I am not experienced with cryptography. I don't know anything about it, not even the basics or any methods or principles. I don't even know that much math. (I'm in Algebra 1 and a Freshy in high school.) That's why I need your guys' help. I saved several scores with the hope that they can be compared to each other to find a pattern. I haven't had much luck with finding a pattern until I got to the last set. Take a look at what I have and see if you can figure anything out. All the verification codes that I got for the specific score and percentage factors are listed below what my score and pertcetage were.
Score 10 With 0%:
06090166-6061988-06065524
24878988-4487320-20641380
42656700-2803762-44227146
74323433-9937875-75196330
92101255-7353217-99772196
Score 10 With 50%:
00055900-0005340-20021900
14944811-9713011-37314338
32722633-7139453-51990194
46611544-6847124-68283522
78388277-3971237-99152716
64499366-4263566-82869388
96166099-1397679-13738572
Score 20 With 0%:
40676388-0881586-82240908
68454100-8207928-06826764
86232922-6623360-20402520
54565299-9599257-99533336
18909655-3757473-51371714
I looked at this and really couldn't make anything out of it. Then I had an idea. 20% of 10 and 10% of 20 are equal, right? They're both 2. I wanted to see if I'll get the same verification code if I did something like that. Here were my results:
20 Points With 10%:
08021588-8088114-18044262
12910499-7796885-25337690
26809300-6404556-32620028
30798211-5112227-49913456
58576033-3538669-63599212
62465944-2246330-70882640
76354855-1954001-87175078
80243766-0662772-94468406
94132677-9370443-01751834
10 Points With 20%:
08022588-8088114-18043262
12911499-7796885-25336690
26800300-6404556-32629028
30799211-5112227-49912456
62466944-2246330-70881640
76355855-1954001-87174078
80244766-0662772-94467406
You see the similarities? It appears that the fourth digit is always 1 number higher in 10 Points With 20% than 20 Points with 10%. Also, the fourth from the last digit is one lower. Also, if the number is 0, one less of it is 9. And one more than 9 is 0. It only affects the one digit, rather than two digits like in normal addition. This still doesn't leave me with much though. Do any of you notice something that I didn't, or have any suggestions? Any help will be appreciated.
Thanks.
Ramzi
-
March 23rd, 2002, 05:12 AM
#2
Junior Member
you need to try www. bodacion.com
-
March 23rd, 2002, 05:38 AM
#3
snood that game is so damn addictive hehe we have it at shool gawd its fun ehehe
-
March 25th, 2002, 07:32 AM
#4
?
Originally posted here by guss
you need to try www. bodacion.com
What am I looking for at this site?
-
March 25th, 2002, 03:09 PM
#5
I gotta give credit...the guy may be trying to cheat a score but damn, he's worked his ass off for it!
We the willing, led by the unknowing, have been doing the impossible for the ungrateful. We have done so much with so little for so long that we are now qualified to do just about anything with almost nothing.
-
March 25th, 2002, 03:12 PM
#6
LOL, that's true, perhaps cheating the score takes more time then getting the score yourself the legitimate way
-
March 25th, 2002, 03:14 PM
#7
Banned
-
March 25th, 2002, 04:51 PM
#8
I hate how addictive snood is....go anyone whose messing with it...
btw, impressive work
- Jimmy Mac
Replicants are like any technology, if there not a hazard, its not my problem....
-
March 27th, 2002, 08:37 AM
#9
Member
I don't know anything about the game but the encryption scheme may be related with time, username etc.
Try the game on different machines with same and different usernames.
The basics of decrypting lies within the variables...
-
March 27th, 2002, 11:44 PM
#10
Originally posted by VictorKaum
LOL, that's true, perhaps cheating the score takes more time then getting the score yourself the legitimate way
I know, I actually thought about that before. It's not so much that I want the high score, though, I just want to hack it. It was a challenge, see if it could be done.
[QUOTE]Originally posted by ASA
I don't know anything about the game but the encryption scheme may be related with time, username etc.
Try the game on different machines with same and different usernames.
The basics of decrypting lies within the variables...
I know what the variables are already though. I included that information in my first post. The variables are your score, and your percent won in that difficulty. The server checks and makes sure that the verification code is legitimate, so it wouldn't matter what machine I tried it on using what user name. Even though I might (probably won't) get a different verification code on different machines, there still is an algorithm to create that code. That's what I want, the algorithm. As I also stated in my first post, each set of variables gives multiple verification codes. All legitimate. That means that there are multiple algorithms. All I need is one.
What would be the first step to go about decrypting this?
Ramzi
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|