Clash Of Clans

[EzzR0gue]

Before I begin, I know clash is a server sided game and you are very limited to the amount of stuff you can change before experiencing a out of sync error. However over the past month or so, 2 players have figured out how to attack in multiplayer battles as a Townhall 1. This is usually not possible as multiplayer attacks only unlock at Townhall 2. After taking to one of them, he give me a hint, which was changing 74 to EB in this: 74 09 48 8D 35 07 60 97 FF
I immediately knew these were hex values which I did find in the games memory. However after the newest update, where the entire attack UI changed, these values were changed to something else. 

Now to get to my question: How would you go about finding these hex values in memory? They seem to be completely random BUT always appear in the same place in memory. He did also mention something about reverse engineering a bunch of C++ objects if that helps? I know a bit of C++ myself but I am not entirely sure where he is finding these Objects?

I have upload 2 clips of what the guy does, verse what actually happens in game.
Any help regarding this would be much appreciated 

[_hitem_]

I am bit late to reply but i am happy to see this is still a thing, lately i was back at clash of clans again trying to find tricks and bugs because even tho it is server sided you can still achieve cool glitchs, back in the days using gameguardian i managed to manipulate speed so i can attack with all troops instantly, and also cause the one being attacked to not be able to replay the attack, other than that my best trick was moving the castle even tho it is not rebuilt, i know there were hacked bases that had crazier stuff like clipped buildings and hacked levels but i have yet to know how it is done, if anyone is intrested in digging into this game and finding cool stuff like this i am open to making a discord server and discussing our findindgs.

[_hitem_]

I just found my player id and the base still exist with the hacked castle i am amazed that it wasn't banned

For anyone curious to check it out

#Q8j8YRG9P

The way i did it back then i didn't havz root so i used virtualxposed and cloned the app and then i ran the speedhack function slowed the game down.

Then i changed the elixir value to 10000 (you can do this by searching the elixir as Dword) quickly built the castle before the game syncs with the server and reboots and then placed the castle somewhere, the intresting part is that the server does indeed check that elixir value is wrong and that you shouldn't have the castle built but it does not check to verify that the coordinates are still the same.

But for this modern version i run into ptrace protection which idk if it is due to newer versions of the game or because i am using root (using magisk) instead of virtually cloning the app.