Sacred Gold Tree

[SlowPlay]

As I posted in another thread, it's really disheartening to those of us to play fairly.

So many ill-gotten merged pets, duplicated & synthed Will Crystals... It just reinforces that I'm never going to dump $ into this game again. It's not worth it. Not when the provider isn't even fixing the problem and deleting the offenders.

You know what's fun? I'm one of those that got items removed on treasure inventory bug (without having it unlocked) and i was so dumb that i did recharge again after months of not recharging because it did look like they were gonna do something about (they sure did mess up but did ban cheater and were replyin even on christmas day on tickets) instead they just went silent since new year eve. It's ridiculous.

[R2128661220]

One question tho - how is it possible to "hack" into a browser game using something simple as "Cheat Engine" ? There might be a Glitch in game causing all this trouble but i highly doubt that Cheat Engine got anything to do with this - your whole Character Information etc etc is not on your Computer its on their server - Cheat Engine got no files to "hack into" and even if you try to do something "offline" as soon as you log into the game anything you have done is gone cause there is like no info saved on your pc?! correct me if im wrong....advertising cheat engine to "work" is most probably a trick to get naive player into downloading such software and as mentioned above sometimes they tell you to turn off your AV so it "could work" or "properly install" why you think they say that? ....

[AdaJames]

And how does the server know what to display, what was gained, what your actions were, etc.? A signal from your browser. I wonder what the cheat engine does...

[Alsatia01]

One question tho - how is it possible to "hack" into a browser game using something simple as "Cheat Engine" ? There might be a Glitch in game causing all this trouble but i highly doubt that Cheat Engine got anything to do with this -

Just google or search in youtube 'wartune cheat engine'. Most of the things you can find are either outdated, on a different version of the game, or for an older patch - but people have used it in the past.

your whole Character Information etc etc is not on your Computer its on their server - Cheat Engine got no files to "hack into" and even if you try to do something "offline" as soon as you log into the game anything you have done is gone cause there is like no info saved on your pc?! correct me if im wrong....advertising cheat engine to "work" is most probably a trick to get naive player into downloading such software and as mentioned above sometimes they tell you to turn off your AV so it "could work" or "properly install" why you think they say that? ....

The entirety of wartune information is not on their server. Wartune (like virtually every other online game), has the client side of things perform basic operations that are generally non-critical to the game; such as keeping track of basic timers. This helps keep the servers from bogging down too much. As for what exactly is being handled client-side vs server-side you would have to ask a developer for the specifics, but it's a pretty basic practice.

There's a youtube video right now that shows people modifying the information of their plants to turn them into Level4 Gold Victory seeds from a basic Level 1 gold seed. Not quite the same, or on the same scale, but the principle is there. (And before you ask, it's a very old video from a patch a long time ago, and it was patched - according to the comments on the video)

And how does the server know what to display, what was gained, what your actions were, etc.? A signal from your browser. I wonder what the cheat engine does...

I'm pretty sure there's nothing but facetiousness in there; but for anyone who didn't catch it - cheat engine allows you to modify information on your own computer. (Cheat engine used to support modifying information on server-side applications as well, but I think they got sued and so it's no longer officially condoned.)

But yes you're exactly right. In this case they are probably using cheat engine to modify the 'signal' into making the server think they have more 'wands' than they actually have.

[SlowPlay]

And how does the server know what to display, what was gained, what your actions were, etc.? A signal from your browser. I wonder what the cheat engine does...

That's the problem, browser should not be allowed to change balens/bb value on server, it should be a one way only (server tell browser how many balens/bb u have, browser tell server he want to use n balens/bb, server reduce your balen/bb amount of that number and that's it). Instead they made it possible to make browser say how many balens/bb you have inside a minigame of the game, they were lazy and did skip a check on golden tree and that's why they suck so badly, they're just lazy and incompetent. Cheating on a game that make that amount of money with just cheat engine is insane, it's like cracking gta 5 using a keygen.

[princestewii]

That's the problem, browser should not be allowed to change balens/bb value on server, it should be a one way only (server tell browser how many balens/bb u have, browser tell server he want to use n balens/bb, server reduce your balen/bb amount of that number and that's it). Instead they made it possible to make browser say how many balens/bb you have inside a minigame of the game, they were lazy and did skip a check on golden tree and that's why they suck so badly, they're just lazy and incompetent. Cheating on a game that make that amount of money with just cheat engine is insane, it's like cracking gta 5 using a keygen.

+1

Only shows that the devs lack skills

[Zorich]

That's the problem, browser should not be allowed to change balens/bb value on server, it should be a one way only (server tell browser how many balens/bb u have, browser tell server he want to use n balens/bb, server reduce your balen/bb amount of that number and that's it). Instead they made it possible to make browser say how many balens/bb you have inside a minigame of the game, they were lazy and did skip a check on golden tree and that's why they suck so badly, they're just lazy and incompetent. Cheating on a game that make that amount of money with just cheat engine is insane, it's like cracking gta 5 using a keygen.

Balens, BB and mostly any items used as counters are all verified by the server before transactions take place.

In the case of the recent tree exploit, what was being exploited was poor coding in the Sacred Tree module that, after one attempted to use Balens that weren't there, the module itself would increment the attempted uses before the synch w/ the server blocked the attempts. They didn't skip a check. The check was there - it was just in the wrong place. Or the use increment routine was fired off too early - however ya want to look at it. "Free Attempts" weren't gotten outright, but because it incremented an attempt in the module, people got to collect the "use" rewards, which included copious amounts of wands.

One cannot "give themselves balens" beyond altering local memory registers in the running app - and there's really no way to stop that from happening. As bad as we complain about Wartune, games like World of Warcraft and Everquest are actually much easier to exploit. But because they're not Pay to Play, there isn't as much community policing. Hell, Shadowbane (for those that remember it) had an infinite gold exploit as well as a leveling exploit (24 hrs to max level from new char creation).

The thing I wish Wartune was equipped with was more robust logging. The guessing of who or who doesn't exploit is poor at best. Deleting items (gems, resists) from legitimate players while allowing a multitude of others to get away with duplicating Will Crystals and Divinity Souls is just bushleague game management.

[Zorich]

+1

Only shows that the devs lack skills

I tend not to blame the devs, but blame the Quality Assurance teams - assuming they have any .

Things like this, fairly innocuous logic errors that require memory exploits to expose, aren't really on the devs. It's on the company for not employing a white-hat game-hacker to exploit in QA. Whether it's a game, retail, auction or crowd-funding sites - anything that transacts in currency or currency purchased items should have an ethical hacking team employed as part of QA.

[spj1977]

I just dont get how they shut it down last time when they became aware it was being exploited, only to put it back up a few days later. It's either still broken, or they did nothing to take away items from last time because people are still using free wands on the thing.

[vanessa.s.cortez]

Hi,

Investigate players suspected of defrauding the event of sacred golden tree..