Skip to content
This repository has been archived by the owner on Apr 7, 2022. It is now read-only.

Arena Points #15

Closed
Blade123456753 opened this issue Feb 21, 2020 · 45 comments
Closed

Arena Points #15

Blade123456753 opened this issue Feb 21, 2020 · 45 comments
Labels
Confusing The Subject of Issue is Very Confuzzling Research Research further into this issue.

Comments

@Blade123456753
Copy link

Is there a way to give yourself arena points?

@ArcerionDev
Copy link
Contributor

We are looking for that type of thing, but we haven't gotten too far on that. Sorry. 😒

@ArcerionDev
Copy link
Contributor

Also, this site has a good amount of views, so having that type of power might just break Prodigy itself. If the game server gets that confused I have absolutely no idea what would happen.

@ArcerionDev ArcerionDev added Research Research further into this issue. Confusing The Subject of Issue is Very Confuzzling labels Feb 21, 2020
@PatheticMustan
Copy link
Member

Currently, the only hacks that work server side are hacks where we modify the player's data.
Any damage/health modifiers won't work. It'll display the HP and damage as hacked on the hacker's side, but Prodigy servers treat damage like normal.

If we were able to hack leaderboard scores, this would be in the bug bounty league. I'd guess it'd have to do something with sockets. Since there's no anti-cheat, I suspect it's probably possible, but not with the way we do hacks right now. We should explore using Tampermonkey to do this. 🤔

@PatheticMustan
Copy link
Member

broooo if Prodigy actually had a bug bounty, I'd be so happy.

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Feb 22, 2020 via email

@ArcerionDev
Copy link
Contributor

So the script PIXI.game.prodigy.debugMisc.setMyArenaLeaderboardScore.toString() returns "function(t,i){}". I can't interpret this. What does this mean exactly?

@PatheticMustan
Copy link
Member

That means it's a function, but it's empty.
It doesn't do anything, so it was probably left in there by mistake.

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Feb 23, 2020 via email

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Feb 27, 2020

So I tried using the script PIXI.game.prodigy.pvpNetworkHandler.getUserRank(), returned undefined, but then I see this:
image
Could this be because I am messing with the pvpNetworkHandler?
And no, it wasn't because I was actually inactive for too long.

@ArcerionDev
Copy link
Contributor

I was able to bypass the inactivity thingy, but when I entered the arena after using PIXI.game.prodigy.pvpNetworkhandler.rank.points=100000, I saw this:
image

@TheCodeNosb21
Copy link

TheCodeNosb21 commented Feb 28, 2020 via email

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Feb 28, 2020 via email

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Feb 28, 2020 via email

@Lumin0S-ux
Copy link

There is a new season btw

@MATEMATIK-SOSYE
Copy link

BONJOU EVERYONE! Who knows how to hack prodigy on MOBILE DEVICES?

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 1, 2020 via email

@PatheticMustan
Copy link
Member

As an example, for membership,

javascript:PIXI.game.prodigy.player.data.tt=true

@ghost
Copy link

ghost commented Mar 1, 2020

Actually...
There was once a function in debugMisc that would overwrite arena points, however, they nulled the function out.

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 1, 2020 via email

@Lumin0S-ux
Copy link

Hmmm... good to know.

On Sun, Mar 1, 2020 at 5:38 PM DaChickenKing @.***> wrote: Actually... There was once a function in debugMisc that would overwrite arena points, however, they nulled the function out. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#15?email_source=notifications&email_token=AOQ7MLBBQT6V7XEACKJCD23RFLPW5A5CNFSM4KZLRYKKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOENNNFPI#issuecomment-593154749>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AOQ7MLD5EYZLX2NXML52YTTRFLPW5ANCNFSM4KZLRYKA .

I dont know if you will say, but what was the prodigy custom chat thing? did u mean it popped up on the screen or the chat the goes over your name?

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 1, 2020 via email

@Lumin0S-ux
Copy link

Goes over your name, like normal chat.

On Sun, Mar 1, 2020 at 6:44 PM Lumin0S-ux @.> wrote: Hmmm... good to know. … <#m_-5604824507118793895_> On Sun, Mar 1, 2020 at 5:38 PM DaChickenKing @.> wrote: Actually... There was once a function in debugMisc that would overwrite arena points, however, they nulled the function out. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#15 <#15>?email_source=notifications&email_token=AOQ7MLBBQT6V7XEACKJCD23RFLPW5A5CNFSM4KZLRYKKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOENNNFPI#issuecomment-593154749>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AOQ7MLD5EYZLX2NXML52YTTRFLPW5ANCNFSM4KZLRYKA . I dont know if you will say, but what was the prodigy custom chat thing? did u mean it popped up on the screen or the chat the goes over your name? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#15?email_source=notifications&email_token=AOQ7MLGOHB2YORVW2PTQ5Y3RFLXM7A5CNFSM4KZLRYKKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOENNP5ZI#issuecomment-593166053>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AOQ7MLGT2INRDAOS4MVCME3RFLXM7ANCNFSM4KZLRYKA .

oh thats cool, until people take advantage and ruin it

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 1, 2020 via email

@Lumin0S-ux
Copy link

Yup. :(

i wanted to use it but right when i was going to, you guys said on ur desc u were going to report it :(

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 2, 2020 via email

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 2, 2020 via email

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 2, 2020 via email

@Lumin0S-ux
Copy link

I mean, I trust you wouldn't use it wrong... On Sun, Mar 1, 2020 at 7:07 PM Aleksander Nauman < aleksander.nauman@gorhamschools.org> wrote:

Welp, we can't really do anything about it. We have a Discord server and I could DM you the script if you're interested... On Sun, Mar 1, 2020 at 6:53 PM Lumin0S-ux @.***> wrote: > Yup. :( > … <#m_-7251526042307933476_m_-9076678238398834940_> > > i wanted to use it but right when i was going to, you guys said on ur > desc u were going to report it :( > > — > You are receiving this because you commented. > Reply to this email directly, view it on GitHub > <#15?email_source=notifications&email_token=AOQ7MLDINSPRCOBYFJZETYTRFLYODA5CNFSM4KZLRYKKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOENNQDQQ#issuecomment-593166786>, > or unsubscribe > https://github.com/notifications/unsubscribe-auth/AOQ7MLC34YYWCKR7OGD5Y6DRFLYODANCNFSM4KZLRYKA > . >

I wont, what is your discord?

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 2, 2020 via email

@ghost
Copy link

ghost commented Mar 2, 2020

PIXI.game.prodigy.pvpNetworkhandler.rank.points=100000

:( Uncaught Whatever Error for this code will make me even more mad

@MATEMATIK-SOSYE
Copy link

Put "javascript:" (w/out the quotes), then paste the code in front of it, then post the whole thing into your search bar when you're on Prodigy.

On Sun, Mar 1, 2020 at 1:45 AM MATEMATIK-SOSYE @.***> wrote: BONJOU EVERYONE! Who knows how to hack prodigy on MOBILE DEVICES? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#15?email_source=notifications&email_token=AOQ7MLDPHHSH3HHJDI5IX6TRFH765A5CNFSM4KZLRYKKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOENMWYHQ#issuecomment-593062942>, or unsubscribe https://github.com/notifications/unsubscribe-auth/AOQ7MLHJHKMBKDVKEVQIFUDRFH765ANCNFSM4KZLRYKA .

Nevermind. I did it my own way before you replied to my message. Thanks anyway!👍🏼

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 4, 2020 via email

@Lumin0S-ux
Copy link

So, have you guys found anything on bounty points??

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 12, 2020 via email

@PatheticMustan
Copy link
Member

bounty points are different from arena points. Bounty points is EZPZ, we already hacked that.
Arena points, where you'd show up in the global leaderboard, is the hard hack

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 13, 2020 via email

@GyarGG
Copy link

GyarGG commented Mar 13, 2020 via email

@ghost
Copy link

ghost commented Mar 13, 2020

I got mad only due to desertion

@ghost
Copy link

ghost commented Mar 13, 2020

I was able to bypass the inactivity thingy, but when I entered the arena after using PIXI.game.prodigy.pvpNetworkhandler.rank.points=100000, I saw this:
image

:( GRRRRRRRRRRRRRRRRRRRRRRRR!!!!!!!!!!!!!!!!!! NO UNCAUGHT WHATEVER ERRORS ALLOWED OR ELSE ShawnC362 will treat you like Laura Springheart

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 13, 2020 via email

@PatheticMustan
Copy link
Member

Guys, arena points are handled server side, I really doubt we're going to hack arena points

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 14, 2020 via email

@PatheticMustan
Copy link
Member

Possible, but still very unlikely. And accessing sockets is just as hard as game constants.

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 14, 2020 via email

@ArcerionDev
Copy link
Contributor

ArcerionDev commented Mar 14, 2020 via email

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Confusing The Subject of Issue is Very Confuzzling Research Research further into this issue.
Projects
None yet
Development

No branches or pull requests

7 participants