Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Hacking GTA V RP Servers Using Web Exploitation Techniques

nullpt.rs

Post reply on HN
Print view View original

31–40 of 40 posts

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#31

Post by was_a_dev »

serf wrote: post #5

it's nice seeing someone open with telling everyone that GTA V is some of the most poisoned online gameplay with regards to cheating. I don't agree with the conclusion that it's because it's peer-to-peer. that's not why -- it's because of lazy developer methods and a lower prioritization of security effort. the biggest genuine effort that Rockstar puts into anti-cheat effort is an occassional memory-structure shuffle…

Is it possible to automate a process that leads to random memory-structure changes, that could be done regularly? How would that look for developement and debugging

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#33

Post by numpad0 »

mavamaarten wrote: post #7
serf wrote: post #5

it's nice seeing someone open with telling everyone that GTA V is some of the most poisoned online gameplay with regards to cheating. I don't agree with the conclusion that it's because it's peer-to-peer. that's not why -- it's because of lazy developer methods and a lower prioritization of security effort. the biggest genuine effort that Rockstar puts into anti-cheat effort is an occassional memory-structure shuffle…

Yeah, they absolutely don't care. It cannot be hard to detect griefing and obnoxious cheating by just looking at player behavior. How hard can it be to detect 90000000000 in-game dollars to be added to players, how hard can it be to detect that someone is blowing up everyone in the server, ... They just don't care, and it's a shame because GTA V still holds up as a fantastic game even after all these years.

Sounds exactly like Twitter up to the exit(gotten worse after they took griefing to themselves, tbc).

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#34

Post by davikr »

was_a_dev wrote: post #31
serf wrote: post #5

it's nice seeing someone open with telling everyone that GTA V is some of the most poisoned online gameplay with regards to cheating. I don't agree with the conclusion that it's because it's peer-to-peer. that's not why -- it's because of lazy developer methods and a lower prioritization of security effort. the biggest genuine effort that Rockstar puts into anti-cheat effort is an occassional memory-structure shuffle…

Is it possible to automate a process that leads to random memory-structure changes, that could be done regularly? How would that look for developement and debugging

Yes, Roblox does it.

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#35

Post by mtlynch »

Jerrrry wrote: post #23
mtlynch wrote: post #22

Earlier quoted context omitted.

> I know XSS is dying due to CORS CORS isn't related to XSS. CORS actually isn't a security protection at all. It's a way for web apps to explicitly disable standard protections that browsers apply to enforce same origin policy. You might be thinking of Content Security Policy (CSP).[0] That's the most effective protection I'm aware of for XSS, but it's not very widely used because so few JavaScript libraries are com…

yea, i meant CSP. >so few JavaScript libraries are compatible with it. is this because of the 'eval' function specifically, or is there other reasons?

Yeah, eval is the main culprit, but there's also Function, setTimeout, setInterval and friends.[0]

The other gotcha is that with a secure CSP policy, you can no longer do things like because that's inline JS, so that's kind of a bummer.

[0] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Co...

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#36

Post by Jerrrry »

rainonmoon wrote: post #29
Jerrrry wrote: post #25

Earlier quoted context omitted.

Looking forward to reading it -- genuine, raw, straight up hacking is almost nostalgic at this point. wish we could get more bug bounty write up submissions

My friend, you seem genuine in your enthusiasm if a little misinformed, so in the spirit of trying to stoke that rather than smother it, can I gently alert you to the thousands of bug bounty write ups you can read online? A decent place to start is the various H1 Disclosed writeups [0] but there's an avalanche of this sort of content on Medium (most not as well written as OP's, it must be said, but still very technic…

Thank you, this was precisely what I was looking for, as searching for "bug bounty write ups" in the past was more noise than signal; but this is what I wanted, thank you a lot!

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#37

Post by [deleted] »

Capricorn2481 wrote: post #21
mavamaarten wrote: post #7

Earlier quoted context omitted.

Yeah, they absolutely don't care. It cannot be hard to detect griefing and obnoxious cheating by just looking at player behavior. How hard can it be to detect 90000000000 in-game dollars to be added to players, how hard can it be to detect that someone is blowing up everyone in the server, ... They just don't care, and it's a shame because GTA V still holds up as a fantastic game even after all these years.

For what it's worth, I used to play GTA online a lot and was getting bored with it. For a last hurrah, I had my account hacked by a friend to give me billions. I bought all the stuff I wanted even though I was told to be careful with buying too much (as if I was money laundering). I opened it up recently and my money was back to normal. I imagine I did something that got me detected. In all honesty, it was a blessing…

[deleted]

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#38

Post by hellotheretoday »

padjo wrote: post #32

A bit off topic but I played a bit of GTA online recently after not playing for years, was really amazed at how little it had developed in terms of core gameplay. Lots of new weapons and vehicles but very little to make a compelling game.

That’s modern gaming now. Once they figured out the concept of the Skinner box it was all downhill

I do wonder if there are statistics on how many of the attempts at creating micro transaction economies fail though. I hope it’s high. I feel like it has to be, but I guess at the same time it’s a question of as long as game sales recoup development costs any micro transaction stuff just needs to cover server and admin costs and then the rest is all profit. But I feel like so many studios go in hoping to recreate Fortnite, Roblox, or gta V and that’s just so unlikely.

Re: Hacking GTA V RP Servers Using Web Exploitation Techniques

#39

Post by imtringued »

Alupis wrote: post #18
roxil wrote: post #13

Earlier quoted context omitted.

True, but the main game is similarly plagued by some of the worst cheats I've ever encountered in an online game and I'm almost certain there are some serious security vulnerabilities to be found there. I stopped playing when some cheater impersonated me in the game chat and then crashed my game, after I insulted them (mostly out of curiosity to see what else their cheats can do). It's just so far beyond what happens…

> True, but the main game is similarly plagued by some of the worst cheats I've ever encountered in an online game Why is it even possible for a player to change the entire map for all players on the server to winter? Why is it even possible to "attach" a helicopter to someone's head? Why is it even possible for players to spontaneously burst into flames, even after dying and respawning? These are dumbfounding "cheat…

Because it is a single player game with multiplayer hacked into it.
Post reply on HN