[Day R Survival]

10 hours ago, emoce said:

The encryption method you provided before is correct. All encrypted data will be readable as json. After that, it's not difficult.

 

it's AES-256-CBC with custom String Replace after, i already found it, the thing i wanted is replicate it with Nodejs or perhaps JS, on browser or back end, soo i dont need to runs it on lua, and that's what makes me spent alot of time, it just send different thing while has the same message in it, on lua i can just send Data + Key and done, while i do that on js, Data + Key, it send absolutely different thing,maybe im just too dumb to know it. 

[Day R Survival]

4 hours ago, emoce said:

There are clues how to ban, basically use chat (via websocket). Some of the basic commands are "/ban", "/unban" , "/mute", "unmute", you need special access to be able to use those commands (getAccessLevel). 

pincode is used to gain access. It's also something that is given to each moderator with a different pincode. If you can bypass this and force yourself to gain the access level then chances are you can do it.

i see the AccessLevel you mentions, tho im unsure on how to modify it, i will experiment more, but you can get premium on profile level but items still getting checked locally i think, i'll test more, today i spent good 10 hours making a website page to encrypt and decrypt a SaveData, so im not bound to do it manually

 

80% of the time spent on figuringing the encryptions

[Day R Survival]

unsure, ill see bout it

9 hours ago, enriquecor said:

You can make a request for the server to give you the PREMIUM for free as was done with the Name

yea, i still wondering on how to ban and such, there's no exposed endpoint, and im incline to believe it's websocket connection rather post request, i also dont know where tf the pincode is
the code keeps refering to main.multiplayer.masterServer.pincode, and when i look into it, it gives
main.profile.get('pincode') and when i look both profile and saves, no key is called pincode, i'll assume it's either the name obfuscated or it just doesnt exist without websocket connection

 

[Day R Survival]

imma chill now, i've been trial and error for 6 hours, and yeah, cool innit, free hacks for yall and me dying kek

[Day R Survival]

On 6/29/2023 at 1:26 PM, cth said:

you've just posted your nick in there. Did you just send a request to the server to change your nick and it changed? What if you save and load?

BEHOLD
second test changing to alex


third to other name,


and NO LIMIT, normal peeps will only get once, and pay after

explanation below

 

on the decrypt, it should be JSON.stringify(response.body), ma bad

[Day R Survival]

BROOOOOO. DID I JUST DO THAT OR THAT'S JUST A FLUKE

 

[Day R Survival]

i think this is how AUTH_SAVE works, this can be used after you already made a handshake or whatever the thing called, basically already authenticate with the server and made a connection 

MasterServer = Library.Multiplayer.HandShake().Auth();

    MasterServer.Request("https://auth.tltgames.net/save_2.0", 
    {
      Headers: {
        method: POST
        "Content-Type": "application/x-www-form-urlencoded"
        "Accept-Language": "en-US"
        "Cache-Control": "no-cache"
      },
      Body: {
        data: {
          Base64(
            AES_Encrypted(
              JSON.stringify(
                {UserSaveJSONFile}
              ),
              "6g83zKNShmZcYE747WaLuKdzyMNspM4Y"
            )
          )
        }
      }
    })

which makes me think, i'll do analysis with the dumped datas i have since it's yeah, kinda interest me

[Day R Survival]

4 hours ago, cth said:

Ok folks, I need some help here. I want to make some biomass. I think the easiest way is to edit this recipe:

Looking for 1;3:: is too borad. I get about 17k 3s. That is too much to change and check. I keep breaking the game whenever I try and I think it's risky if I get on server sync, so I'm trying to be careful.

I found it in the code here: https://github.com/Angelix1/dayr/blob/c7b6b16a29edceed363baffa20ea5f23c56e376e/src/1.764/lib/items/season_emba.lua#L34

I tried looking for 1;1;3;10, but to no avail.

Anyone knows has a better idea for the biomass extraction?

perhaps get the item id and then pointerscan the item id adn then add pointer offset by idk 4 or so? then refine the double value by 3, since the game always need to do pointer  call to get the item data yk 

i also add 1.766 to the repo btw

[Day R Survival]

fun fact 
on your savefile it has 2 thing inside of it, a 128 random letters and a readable json
and you thinks maybe i can tamper the save, nope you cant, cuz on load the game did server checks on it using that 128 random letters or SHA512, basically it goes like
- read the file
- do request to a server and fetch the save file (cloud save using that sha512 as identifier)
- compare both local and server, and if it mismatch, start new game,
and i was thinking what if i send external rest api call to their server and says, here my new save, and remember this sha512 okie,
and since the loads always be checked on load, for example, if you start a new game from existing game then play abit, then quit and then resume same save, it'll ask if you want to load cloud or use local, soo basically that what i mean.
sooooooooo....... :3
basically, i can tamper it all i want, since it has deviceID, userID, caps, and most importantly ShoppingList where you can just insert stuff in it as "topup", i admit it, using irreversible method of checking is quite good than old save file that add this (i found this specifically on 1.462 to compare what changes)

L3_2.****YouCoolHackerSuckMyBinaryBalls = {}

lol, kinda defeats the purpose of the sumchecks when you can easily tamper it. i also understand WHY you need UserID for the topup, cuz you can ask for pincode, and then from that pincode you can basically do everything, Changename, tampersave, unban yourself, add items to yourself, basically Admin priv, in scope of your own account obviously
you'll understand what i mean by 128 SHA512 on 1st line and then JSON data on 2nd line, if you see the datas 

[Day R Survival]

55 minutes ago, cth said:

Yeah, sure. Updated it. Does your pet replacing script work? You can spawn pets? How does one get a copy of the script with the pets logic?

it just like badcase's, replacing pet pointer with other pet and do something minimal to make the game save, iirc you can get infinite pumpkin pet, but i havent checked it for awhile

[Day R Survival]

@cthalso if possible replace the download links on the reddit thread with the link on my youtube desc, i mean i need sumthing yk lol
you get like freebies that if other scripter made it, it'll be premium yk, atleast i get is sum ads from downloads yk

[Day R Survival]

5 hours ago, cth said:

yeah, remove starting ap hack. I just went through all the hardest battles with the rest of the hacks and they're more than enough I'd say.

That duping of items is very dangerous. If admins see double numbers of quest items, they can safely ban then. It also dupes whatever you get from the caps store and it remains duped even after disabling. Same about quest items, if you get them while having this on, they will remain duped even after. I'd suggest either removing it or saying that it's dangerous like you did for caps. Let people make exp through the town quests. It's a lot safer.

 

Just posted your update on reddit too here: 

A dude left a comment there offering removing bans for money. Seems legit. I think he either opened the encryption protocol for the data transfer and can update the save game that way or, more likely, made his own game client allowing him to safely change any values, including the ban stuff. No need to go dig in the memory when you can just change the source to do whatever you want and build it. Very elegant.

i create my hacks free of charges, soo basically no money involved, like if i go through premium version, there's like 7 options will be marked as premium only hacks, but i choose make it free for people, all i ask is simply donation if you like,
but if you want to buy their hacks or whatever it is go for it,
and also for rebuilding custom client, it's possible, but i wanted the game literally open to edits without recompling the .car, for example World Conqueror mods, those game were compiled and some modder rebuilds the game and uses custom loader to loads Json, soo hopefully i can recreate that in day r, i also will replace Instant Level to get set of EXP from battles, cuz i did experiments on it awhile ago

[Day R Survival]

3 hours ago, cth said:

All works overall, but there are a few bugs. Like for example when you disable decrease of perk points, you can't take perks above the first level. Only the lvl1 perks show up. If you disable it and then re-enable it, it will crash the game. 

Battle hacks are a bit odd. They don't give you exactly 1000 AP, they just increase those to max every turn, which is good enough. Starting 1k AP doesn't work either.

Reputation hack seems to be Exp hack. I think you misplaced it. It's even called Exp hack when you edit it.

it seems that battle hacks failed to pinpoint the max AP value, if i understand what you mean.
hmm, im unsure about the you can't pick any lvl 1+ perks, all i did was replacing the calculation of perk points, i'll see if i can fix it, if not then ig it is what it is.
bruh, im incline to removes starting AP hack, cuz it always broken, for others.
yeah its my fault for the mismatch name for rep exp, because idk what to name the hack and probably forgot to rename the hack too lol.
for instant leveling, i still uses the old revolted 2 instant level, it's known issue to dupe other items and such, i'll find something like gains exp from battle or something like that and replace it on revolted 4.
I havent tested the rep hack while also rerolling quests, and now since you mentioned it, i'll look into it later,

for the perk hacks, maybe i accidentally modify the perk selection. lol

[Day R Survival]

alright, hope it works for everyone else, this script is just for general use, soo not specific stuff such as event specific

MediaFire Direct Download Link

it's zip file, you gotta extract it first :3

[Day R Survival]

i call it, replacing instruction, or basically, replace pointer to DO what i want instead what it supposedly do

[Day R Survival]

7 hours ago, AngelWolf said:

yoooooooo, i have proof of concept for caps hacks

.......

POGGERS, IT WORKS, pepepog ( watch the caps )

it doesnt work if you dont have caps to start with, bare minimun is 50, cuz that's iirc the cheapest thing on the store, there's a check for it, but since i have 25k i cant test it lmao

here's the code lmao, this is what responsible for those free stuffies

target = spendCaps
replace = addCaps

0x00				L4_2 = main
0x10				L4_2 = L4_2.profile
0x20				L5_2 = L4_2
0x30				L4_2 = L4_2.spendCaps

 

[Day R Survival]

yoooooooo, i have proof of concept for caps hacks

soo i found something on the code that basically identify if we spent caps or not, and im thinking to just make a script that, points to function to add caps instead, this is proof of concept, if it works, i'll be pogging lmao, cuz ive been snooping a new way to gain caps since they add somekind checks to prevent negatives, hopefully they dont have such checks for this concept.
and maybe get premium feature, without buying one too

[Day R Survival]

yall do modify the modifier lmao, anyway, that's where most calculation is calculated, either on calculate.lua or on the utils libs or on _masters, and such, you can find most battle hacks calculation on battle_masters. too, soo yeh, also you each line of code basically offset by 0x10, for example
L_02 = L_01.math
L_03 = L_02.max
L_04 = 1
L_01 = L_03(L_05, L_04)

so from math to 04 is 0x20, that's basically how most my complicated hacks finds it, just looks up math and then uses the offset,
but most value has dummy or duplicate, soo i currently trying to make it check if the target value's -0x10 offset is max or min or codeToNum, soo it'll always hard find it, rather blindly editAll and cause a crash
 

9 hours ago, cth said:

Disks work.

Rep works too. Here, for now I'm playing with exp and reward, but the rep is near, I know:

 

And found the rep too:

Dude,please explain where you got the numbers for rep? 

probs on base_masters.lua

or sum, because there i found rep reward.

[Day R Survival]

i found modifier for reputatation reward for quest, i just need to add gazilion checks to hard find the correct value, since it has dummy value

and for caps, again you can make use of survivor base refresh value group, and modify them as much as you want and for currency, just modify the worth of it, and just like inflate it soooo much you can gains alot of it by either casino or quest reward.
i still need to finalize the code to it checks everything before applying a changes to avoid crash and such

you can fool the client to think you're not banned, but it's boolean or true and false, and idfk on how to find it on memory, while some said it's 00 and 01 in byte, reading memory in GG is hard, there's no memory view like Cheat Engine soo it's just stab in the dark.

[Day R Survival]

5 hours ago, cth said:

@AngelWolf did you have success modifying the event disks rewards? I can't any longer go back to .761 to hack them through the crate value change.

uh, the emba disk?, personally i havent snoop into the code yet, but i assume it just works like quest reward, basically modifiying the currency worth should supplied it, that's basically how you get kk's of currencies.

also you cant use make everything {currency} 1 anymore, cuz it seems they have check in place to not do anything if the cost is lower than the item's worth, tbf you can modify it, but i couldnt be bother to snoop the awful code.

[Day R Survival]

16 hours ago, cth said:

Oh, so that's how ranges work!!! Wow, now I can cheat even more. But this game got boring, any other game that's as easily hackable?

clicker games lul

[Day R Survival]

11 hours ago, MrZbot said:

I'd love to try this but I don't understand how to edit the output... so I hope you will make a video about this, it would be a lot easier to get it.

sooo, the output value is literally can be found after the last recipe value, probably roughly 5-10 address away, with type double, with exact same output, let's say titanium alloy outputs 1, 
so the value is under steel value, you can find it when looking the memory view, and if the value is like bone glue output which is iirc 3-5x, then the value just stack ontop each other example
last recipe value (something x) 
... buffer(object something)
first value or normal value if the result/output is exact amount and not range
second value if range output

[Day R Survival]

for sake keeps things simple, the caps hacks simply modified survivor base reset cost.

and for crafting recipe, tbh for me atleast each addresses is like 10 address apart, soo yeh, and each address has their own pointer to what item required, and what item to give after craft, on badcase's script iirc, his script just nullify the recipe and make crafting free. while my script arent advanced as his, personally i have decent skill on memory reading, so the script i made often crash, broke, or just doesnt work, i understand i need to chain of pointer, to find certain modifier or certain value, but since i dont really grasp how to do chain of pointer in GG, makes my script again, often broke. so yeah, that's why so far my script are not obfuscated

i also still having issue with 5 options on the new script, battle hacks just broken, and often the game crash due table doesnt exist or somekind when it do check if table existed or not

[Day R Survival]

20 hours ago, MrZbot said:

Is there a way to dupe without using old method (0.06/0.08) ? I seem to get banned every time doing this.

crafting recipe

[Day R Survival]

15 hours ago, dzete said:

How to cheat pet level? 

if you using my script, just enable instant level feature and do battle, after the battle you and your pet should be max level and disable the option after