by pu1l on Wed Dec 22, 2010 11:02 pm
([msg=50964]see Re: How did you become/how are you becoming a hacker?[/msg])
How I started hacking... wow... Weird chain of events, but I was playing gunbound when it first came out, and as a skiddie I was looking for trainers etc...
I stumbled upon a website where they had images of a guy riding on the dragon mech (which was something you could only get if you chose random and would only get it 1/20 times) during mech selection. It was just the pictures with the email, I emailed him/her (i'm still confused which one it was). I had done simply memory editing and whatnot for single player games so I had a basic knowledge of hex and asm, but really basic. A few days after I emailed him/her (it was Jess and/or her boyfriend if any of you remember our crew) they opened up a forum, me and bykai were there to answer generic memory editing/hacking questions and were quickly chosen as mods. They did Tuts there for some of our lesser hacks, like the visual dragon mech (it was only the image, you didn't get the firepower of the real thing), and the mods and the more skilled hackers had our locked threads with our new hacks like the gold hacks etc... We taught packet editing and memory editing. Hacking for me was always trial and error, especially when you're talking games..
One example When you died in gunbound a slot machine came at the bottom that would allow you to drop dynamite or win a couple bucks, I was trying to hack that to always win gold, but I accidently found you could pop it up while you were still alive, and before they started encrypting packets we knew the packet headers etc.. you couldn't move your character via packets because the server wouldn't verify it, but there was a "dynamite drop" that you could get on the slots, so I changed the packet header from a slot machine reward to a location packet, and this allowed for a random teleport, so if you were about to be hit, you clicked drop dynamite, and it'd teleport you whereever the dynamite was predetermined to drop
Another one was the cash shop items before they released the cash shop I was trying to find a gold hack, and the gold hack was found very similar to this, what I did was used CE to find the page numbers (I had already found that changing the item number wasn't working) just simple page up search value increased, page down, value decreased, page up value inc, page up, value inc.. etc.. Well lucly for us they had the cash shop items in the catalog on inaccessable pages, so I just set the value to page 6, there were only 4 pages, and clicked down page, which set the real value to 5 and requested value 5 from the server, if you just set it to 5 and hit page up it would reset to a valid page. Well there were the cash shop items, like they had a monacole sp? a laser eye etc... the issue now was buying them, they had no value so it wouldn't let you click Buy Item, to goto the confirm buy page.. Since I had already messed around with changing the item numbers or rather their checksums, it was a 32 byte item code, I knew where the memory address was, so you'd click buy, and it'd take you to "Are you sure you want to buy ITEM NAME" well I was trying to change the checksum at the confirm buy page to a more expensive item and potentially have a gold hack, but it kept the same price for the original item (so my gold hack failed) but now I try and buy a cheap item like a knife or something, get to the confirm buy page (Are you sure you wanna buy knife?) and replace the item checksum to the laser eye one (since the buy button was locked for these items) and purchase it for free (they had no cost set for these items) and we were the first to sport the cash shop items...
Hacking is alot of trial and error, and alot of creative thinking, we eventually found a gold hack that worked along the same lines as my buying unbuyable items hack, and after sporting my insta-teleport hack for a while they started encrypting packets and eventually added that gay anti-hack program, nguard or whatever.
But as far as hacking goes, we learned by teaching ourselves, we stared at hex for hours on end, we did millions of unknown value searches, we stared at hundreds of packets, but we kept at it, and we owned gunbound. We had the first and only Gold hack, the first and only teleport hack.. etc...
Jess decided to open up an IRC for us, that was hosted on the HTS irc, I started doing challenges there, talking to the guys in the IRC, and when I started getting skilled in new methods, Xec, Archy, and a few others took on some blackhat projects and we all allegedly contributed. I got out of here when Xec got arrested, and I don't really hack anymore unless I get depressed/bored.
I learned how to hack, by learning that hacking wasn't that hard, you just gotta try to figure out where some human coded something that either is editable, accessible, decryptable or just plane insecure code. It helps to know the languages so you know what common coding errors are and how to exploit them. But this is all talking about memory editing/packet editing, so it only relates to a small portion of hackers, but it's a great start. I learned the rest of the techniques from HTS and mainly HTS IRC. I don't know how the IRC now-a-days, but back then there was always someone helpful on, as long as you were willing to learn and didn't just want it handed to you. HTS was always a front and a training ground for underground blackhat projects, and SWIM was involved in alot of those, and that was the best part. Hacking is like playing the piano, it requires finesse, practice, some basic notes, and a few good teachers, most of all you need to stick with it, the times I got the most frustrated and gave up, were usually the times when I picked back up I was seconds away from a great discovery. I'm nowhere near the greatest hacker out there, but I've got enough skill to get me by. I left HTS because when Xec left, there was little order, a few arrogant bastards took control and allowed some idiots to run the show (one of which tried to delete the IRC while it was running, and still remained a dev with access for months after)
I assume this is along the lines of the answer you wanted, but basically I learned how to hack by hacking... seems cyclical, but it helps to find a type of hacking you like (BOF, SQL inj., Malicious coding.. etc..) and find a mentor.. Eventually you'll do something you regret and unless you were smart they'll be kicking down your door and you'll be doing your 2 years in fed prison, so stick to it!