How battle pirates anti-hack system works

04/23/2012 22:53 hellion2#1
Their anti-hack system 98% of it is inside the swf 2 % of it is on the server. Seeing that Battle Pirates is a browser based game they have no choice but to rely on Loggers and Hack checks hidden inside the swf in our case. Here is how it works.

1) Hack checks scans for suspicious activity ( AS IN Time Frames, Specials,Cost, and Weight.
a. (Time Frames)< things was upgraded researched repaired time traveled> And checks the possibility if we was able to acquire them legitly in that time frame.

b. (Specials) < What blueprints ,fleets, Raid prizes we have.> And checks the possibility if we was able to acquire them legitly in that time frame.

c. (Cost) how many FB Credits have we spent according to the logs and Time Frame. The logs are compared with the Time Frame.

d. (Weight) <The weight of our fleets> They check the weight of our fleets with the in-game rules for weight.

2) When we take out the hack checks

3) the loggers are in place to log our activity

4) which is use for when we log in the server will check that same checks (server isn't as strong of a check it briefly scans)

5) Which is why its hit and miss if we get banned or not

6) If we can find away to get all loggers disabled from the background we can be totally undetectable and when we log in without check it has nothing to compare to so it should ride over the top of us and never spot that we was even online .

7) ATM this isn't possible (Til we get rid of canvas/default which is their main logger )

I hope this helps I tried to make this as easy to understand as possible
04/23/2012 23:28 alex4flame#2
thx hellion for tip
04/23/2012 23:43 rokon#3
good post!

Thing is you will always get banned though because if you have all checks and loggers disabled you will never log anything. So kixeye could go through their records and you should have logs for everything you have researched, built and upgraded. You are going to have alot of accounts that are lvl 30 but never logged any activity. Im trying to figure out a way to fool the loggers and not block them, that is the only way you won't get banned.
04/24/2012 00:08 enorth#4
Well the other part I think is just that you like if you suddenly have a drac ship that someone else won your not supposed to have that, so youd have to like go back in time and change all teh old logs too, that's not possible I think, sometimes you just get banned if you have stuff your not supost to have I think, thats why I think blueprints gets banned so oft just a theory
04/24/2012 00:32 ICrackIOS#5
GooD InFo
04/24/2012 00:38 rokon#6
its not just blueprints, if you have op5 but yet there are no logs of you ever going 2,3,4,5 you are going to get banned :D

i will say it one more time you will get banned if you use a hack as most hacks have disabled loggers. you may not get autobanned right away but if you are ever reported and someone looks at your account you are going to be gone!
04/24/2012 14:04 hellion2#7
Quote:
Originally Posted by rokon View Post
good post!

Thing is you will always get banned though because if you have all checks and loggers disabled you will never log anything. So kixeye could go through their records and you should have logs for everything you have researched, built and upgraded. You are going to have alot of accounts that are lvl 30 but never logged any activity. Im trying to figure out a way to fool the loggers and not block them, that is the only way you won't get banned.
you and me both bro but thats been my goal from day one a cheat that is undetectable. i thought i almost had it and the afk time and base load lost its mind. would still be on load screen and say my hands was off the wheel lol.
Quote:
Originally Posted by enorth View Post
Well the other part I think is just that you like if you suddenly have a drac ship that someone else won your not supposed to have that, so youd have to like go back in time and change all teh old logs too, that's not possible I think, sometimes you just get banned if you have stuff your not supost to have I think, thats why I think blueprints gets banned so oft just a theory
yes enorth those would be considered specials
04/24/2012 22:44 Swishman#8
Thanks for the info guys! Just wish i could help figure a solution for this dilemma with you guys. Im now trying to learn c and c++......then hopefully on to java. Figured if i could learn the languages i would understand.what they are doing.
04/24/2012 23:49 pbpb#9
Quote:
Originally Posted by hellion2 View Post
Their anti-hack system 98% of it is inside the swf 2 % of it is on the server. Seeing that Battle Pirates is a browser based game they have no choice but to rely on Loggers and Hack checks hidden inside the swf in our case. Here is how it works.

1) Hack checks scans for suspicious activity ( AS IN Time Frames, Specials,Cost, and Weight.
a. (Time Frames)< things was upgraded researched repaired time traveled> And checks the possibility if we was able to acquire them legitly in that time frame.

b. (Specials) < What blueprints ,fleets, Raid prizes we have.> And checks the possibility if we was able to acquire them legitly in that time frame.

c. (Cost) how many FB Credits have we spent according to the logs and Time Frame. The logs are compared with the Time Frame.

d. (Weight) <The weight of our fleets> They check the weight of our fleets with the in-game rules for weight.

2) When we take out the hack checks

3) the loggers are in place to log our activity

4) which is use for when we log in the server will check that same checks (server isn't as strong of a check it briefly scans)

5) Which is why its hit and miss if we get banned or not

6) If we can find away to get all loggers disabled from the background we can be totally undetectable and when we log in without check it has nothing to compare to so it should ride over the top of us and never spot that we was even online .

7) ATM this isn't possible (Til we get rid of canvas/default which is their main logger )

I hope this helps I tried to make this as easy to understand as possible


WRONG !!! THE CANVAS IS THE CSS STYLESHEET NOTHING BUT THE PAGE STYLE CAN BE STORED HERE!!
04/25/2012 03:12 andy121010#10
pbpb if u know what u are doing why dont u create a swf file to share with all
to see if ure file can be undetectable against kixeye yeah help us all out
04/25/2012 03:48 hellion2#11
Quote:
Originally Posted by pbpb View Post

WRONG !!! THE CANVAS IS THE CSS STYLESHEET NOTHING BUT THE PAGE STYLE CAN BE STORED HERE!!
All this is java not css and info taken even after the loggers are removed
Code:
GET [url]https://api.geo.kontagent.net/api/v1/bb343c5442924498ac8be7b4f4f813eb/evt/?n=pageview&st1=pageview&s=100003664019043&t=1335317447[/url] 
mootools-yui-compressed.js:100

Unsafe JavaScript attempt to access frame with URL [url=http://apps.facebook.com/battlepirates/?r=t]Battle Pirates auf Facebook | Facebook[/url] from frame with URL [url]http://bp-fb-vip.sjc2.kixeye.com/canvas/?r=t[/url]. Domains, protocols and ports must match.

Unsafe JavaScript attempt to access frame with URL [url=http://apps.facebook.com/battlepirates/?r=t]Battle Pirates auf Facebook | Facebook[/url] from frame with URL [url]http://bp-fb-vip.sjc2.kixeye.com/canvas/?r=t[/url]. Domains, protocols and ports must match.
cc-framework.v37.js:1804

GET [url]https://api.geo.kontagent.net/api/v1/bb343c5442924498ac8be7b4f4f813eb/cpu/?f=0&g=male&s=100003664019043&t=1335317451[/url] 
cc-framework.v37.js:1804
GET [url]https://api.geo.kontagent.net/api/v1/bb343c5442924498ac8be7b4f4f813eb/evt/?n=points&l=1&st1=revenge&s=100003664019043&t=1335317452[/url] 
cc-framework.v37.js:1804
GET [url]https://api.geo.kontagent.net/api/v1/bb343c5442924498ac8be7b4f4f813eb/evt/?n=false&l=1&st1=player&st2=settings&st3=fullscreen&s=100003664019043&t=1335317454[/url]
obviously you haven't been looking at all the info it pushes out has all our activity in it .


Code:
  <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/mootools/1.3.2/mootools-yui-compressed.js"></script>
	<script type="text/javascript" src="/assets/script/mtmore.v37.js"></script>
					<script type="text/javascript">
		var baseurl  = 'http://apps.facebook.com/battlepirates/';
		var localurl = 'http://bp-fb-vip.sjc2.kixeye.com/';
		var cdnurl   = 'http://bp-fb4.cdn.kixeye.com/bpfb/';
		var logurl   = 'http://debuglog-lb.sjc.kixeye.com/';
		var gamename = 'Battle Pirates';
		var user     = {"id":*****,"ip":"*.*.**.***","uid":*********,"fbid":**********};</code> main urls for game^^^^^
<code>  		'game_width':'100%',
				'game_height':'740',
				'fswf_height':'150',
				'fswfversion':'15',
				'user':user,
				'cdnurl':cdnurl,
				'assetsurl':'http://bp-fb4.cdn.kixeye.com/bpfb/game/assets/',
				'kontagent_url':'https://api.geo.kontagent.net/',
				'kontagent_api_key':'bb343c5442924498ac8be7b4f4f813eb',
				'kontagent_api_version':'1',
				'kx_logger_url':'http://bi-vip.sjc.kixeye.com/kx/www/log.php',
				'kx_logger_key':'qwerty',
				'kx_logger_st':'',
				'giftredir':0,
				'fbdata':fbdata,
				'logurl':logurl,
				'logsessionid':'',
				'log_h':'',
				'log_hn':'',
				'canvas_init_time':canvasInitTime,
				'canvas_load_time':loadDiff,
				'sourcestr':'',
				'installts':'1334096054',
				'fb_access_token':'',
				'adid': '',
				'userid':******',
				'userlevel':'**',
                 'short_invite_flow':'1',
				'ipaddr': '***.*.**.***',
                 'fanpageurl':'http://www.facebook.com/battlepirates',
				'fromstr':'ts'			};
			cc = new CCFramework(ccdata);
		});
Right above this in canvas has all our activity thats partailly encrypted
04/25/2012 12:39 pbpb#12
Quote:
Originally Posted by hellion2 View Post
All this is java not css and info taken even after the loggers are removed
<code>
GET [Only registered and activated users can see links. Click Here To Register...]
mootools-yui-compressed.js:100

Unsafe JavaScript attempt to access frame with URL [Only registered and activated users can see links. Click Here To Register...] from frame with URL [Only registered and activated users can see links. Click Here To Register...]. Domains, protocols and ports must match.

Unsafe JavaScript attempt to access frame with URL [Only registered and activated users can see links. Click Here To Register...] from frame with URL [Only registered and activated users can see links. Click Here To Register...]. Domains, protocols and ports must match.
cc-framework.v37.js:1804

GET [Only registered and activated users can see links. Click Here To Register...]
cc-framework.v37.js:1804
GET [Only registered and activated users can see links. Click Here To Register...]
cc-framework.v37.js:1804
GET [Only registered and activated users can see links. Click Here To Register...] </code>
obviously you haven't been looking at all the info it pushes out has all our activity in it .


<code> <script type="text/javascript" src="https://ajax.googleapis.com/ajax/libs/mootools/1.3.2/mootools-yui-compressed.js"></script>
<script type="text/javascript" src="/assets/script/mtmore.v37.js"></script>
<script type="text/javascript">
var baseurl = 'http://apps.facebook.com/battlepirates/';
var localurl = 'http://bp-fb-vip.sjc2.kixeye.com/';
var cdnurl = 'http://bp-fb4.cdn.kixeye.com/bpfb/';
var logurl = 'http://debuglog-lb.sjc.kixeye.com/';
var gamename = 'Battle Pirates';
var user = {"id":*****,"ip":"*.*.**.***","uid":*********,"fbi d":**********};</code> main urls for game^^^^^
<code> 'game_width':'100%',
'game_height':'740',
'fswf_height':'150',
'fswfversion':'15',
'user':user,
'cdnurl':cdnurl,
'assetsurl':'http://bp-fb4.cdn.kixeye.com/bpfb/game/assets/',
'kontagent_url':'https://api.geo.kontagent.net/',
'kontagent_api_key':'bb343c5442924498ac8be7b4f4f81 3eb',
'kontagent_api_version':'1',
'kx_logger_url':'http://bi-vip.sjc.kixeye.com/kx/www/log.php',
'kx_logger_key':'qwerty',
'kx_logger_st':'',
'giftredir':0,
'fbdata':fbdata,
'logurl':logurl,
'logsessionid':'',
'log_h':'',
'log_hn':'',
'canvas_init_time':canvasInitTime,
'canvas_load_time':loadDiff,
'sourcestr':'',
'installts':'1334096054',
'fb_access_token':'',
'adid': '',
'userid':******',
'userlevel':'**',
'short_invite_flow':'1',
'ipaddr': '***.*.**.***',
'fanpageurl':'http://www.facebook.com/battlepirates',
'fromstr':'ts' };
cc = new CCFramework(ccdata);
});</code>Right above this in canvas has all our activity thats partailly encrypted


Nope it is only getting what it needs from the resources it has been coded to do like the font they only put them there is for like when you get that message "you have visited 5 times since you made your account"