[Уязвимость] Тюряга на покупку шапки

[CreatiK]

1: Ловим 6 запрос (universal.php&getData) -> Edit response
2: Находим такие строчки

FIXED
3:Удаляем всё из [], то есть было "req":[{"type":"bossDrop","bossId":5,"value":1}], стало просто "req":[]
4: Дальше отпрвляем запрос.
5: Заходим в Сменить шапки покупаем и все.
Вам все равно придется потратить сигареты 1500
Пример:
То что отмечено желтым, удалять!

"type_id":"1","category":"face","req":[{"type":"bossDrop","value":1,"bossId":5}],"alt":null,"rating":"150","price":"1500","nrfv iew ":"0","av":"0","fillings":null},{"id":"263","t ype" :"cap","type_id":"2","category":"face","req":[{"type":"bossDrop","value":1,"bossId":4}],"alt":null,"rating":"150","price":"1500","nrfv iew ":"0","av":"0","fillings":null},{"id":"264","t ype" :"cap","type_id":"3","category":"face","req":[{"type":"bossDrop","value":1,"bossId":3}],"alt":null,"rating":"150","price":"1500","nrfv iew ":"0","av":"0","fillings":null},{"id":"265","t ype" :"cap","type_id":"4","category":"face","req":[{"type":"friends","value":29,"unlockPrice":29}],"alt":null,"rating":"180","price":"1800","nrfv iew ":"0","av":"0","fillings":null},{"id":"266","t ype" :"cap","type_id":"5","category":"face","req":[{"type":"bossDrop","value":1,"bossId":2}],"alt":null,"rating":"150","price":"1500","nrfv iew ":"0","av":"0","fillings":null},

Покупки некоторых наколок(Открыты все части тела)
1: Ловим 6 запрос (universal.php&getData) -> Edit response
2: Находим такие строчки(в самом конце)

3:Удаляем всё из [], то есть было "req":[{"type":"bossDrop","bossId":5,"value":1}], стало просто "req":[]
4: Дальше отпрвляем запрос.
5: Заходим в накаловываем наколки и все.
(Не все можно накалывать но некоторые можно)

Вам все равно придется потратить сигареты
Так что быстрей пока не профексили
Пример:
Удалить все что желтым
{"id":"272","type":"shin_left","type_id":"11","cat egory":"general","req":[{"type":"cityLevel","value":1,"cityId":10}],"alt":null,"rating":"50","price":"500","nrfview": "0","av":"1","fillings":null},{"id":"273","type":" hand_right","type_id":"16","category":"general","r eq":[{"type":"cityLevel","value":2,"cityId":10}],"alt":null,"rating":"60","price":"600","nrfview": "0","av":"1","fillings":null},{"id":"274","type":" hand_left","type_id":"16","category":"general","re q":[{"type":"cityLevel","value":3,"cityId":10}],"alt":null,"rating":"70","price":"700","nrfview": "0","av":"0","fillings":null},{"id":"275","type":" biceps_left","type_id":"17","category":"general"," req":[{"type":"cityLevel","value":4,"cityId":10}],"alt":null,"rating":"80","price":"800","nrfview": "0","av":"0","fillings":null},{"id":"276","type":" shoulder_right","type_id":"13","category":"general ","req":[{"type":"cityLevel","value":5,"cityId":10}],"alt":null,"rating":"90","price":"900","nrfview": "0","av":"0","fillings":null},{"id":"277","type":" forearm_left","type_id":"14","category":"general", "req":[{"type":"cityLevel","value":6,"cityId":10}],"alt":null,"rating":"100","price":"1000","nrfview ":"0","av":"0","fillings":null},{"id":"278","type" :"forearm_right","type_id":"14","category":"genera l","req":[{"type":"cityLevel","value":7,"cityId":10}],"alt":null,"rating":"110","price":"1100","nrfview ":"0","av":"0","fillings":null},{"id":"279","type" :"clavicle_left","type_id":"12","category":"genera l","req":[{"type":"cityLevel","value":8,"cityId":10}],"alt":null,"rating":"120","price":"1200","nrfview ":"0","av":"0","fillings":null},{"id":"280","type" :"knee_right","type_id":"8","category":"general"," req":[{"type":"cityLevel","value":9,"cityId":10}],"alt":null,"rating":"130","price":"1300","nrfview ":"0","av":"0","fillings":null},{"id":"281","type" :"knee_left","type_id":"8","category":"general","r eq":[{"type":"cityLevel","value":10,"cityId":10}],"alt":null,"rating":"140","price":"1400","nrfview ":"0","av":"0","fillings":null},{"id":"282","type" :"clavicle_right","type_id":"12","category":"gener al","req":[{"type":"cityLevel","value":11,"cityId":10}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},{"id":"283","type" :"biceps_right","type_id":"17","category":"general ","req":[{"type":"cityLevel","value":12,"cityId":10}],"alt":null,"rating":"160","price":"1600","nrfview ":"0","av":"0","fillings":null},{"id":"284","type" :"shin_right","type_id":"11","category":"general", "req":[{"type":"cityLevel","value":13,"cityId":10}],"alt":null,"rating":"170","price":"1700","nrfview ":"0","av":"0","fillings":null},{"id":"285","type" :"ankle_right","type_id":"9","category":"general", "req":[{"type":"cityLevel","value":14,"cityId":10}],"alt":null,"rating":"180","price":"1800","nrfview ":"0","av":"0","fillings":null},{"id":"286","type" :"ankle_left","type_id":"9","category":"general"," req":[{"type":"cityLevel","value":15,"cityId":10}],"alt":null,"rating":"190","price":"1900","nrfview ":"0","av":"0","fillings":null},{"id":"287","type" :"shoulder_left","type_id":"13","category":"genera l","req":[{"type":"cityLevel","value":16,"cityId":10}],"alt":null,"rating":"200","price":"2000","nrfview ":"0","av":"0","fillings":null}],

[2951865]

не получается!!! надо просто удалить надпись
{"type":"bossDrop","bossId":5,"value":1} ???
или то что ты отметил на фотке тоже надо всё удалить????

[CreatiK]

2951865, надо удалять {"type":"bossDrop","bossId":5,"value":1} то что в квадратной скобках. А на скрине отметил где искать значение шапок

[cunt85]

а если папирос не хватает?

[CreatiK]

cunt85,то не купишь

[2951865]

{"id":"262","type":"cap","type_id":"1","category": "face","req":[{"type":"bossDrop","value":1,"bossId":5}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},{"id":"263","type" :"cap","type_id":"2","category":"face","req":[{"type":"bossDrop","value":1,"bossId":4}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},{"id":"264","type" :"cap","type_id":"3","category":"face","req":[{"type":"bossDrop","value":1,"bossId":3}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},{"id":"265","type" :"cap","type_id":"4","category":"face","req":[{"type":"friends","value":29,"unlockPrice":29}],"alt":null,"rating":"180","price":"1800","nrfview ":"0","av":"0","fillings":null},{"id":"266","type" :"cap","type_id":"5","category":"face","req":[{"type":"bossDrop","value":1,"bossId":2}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},

Это удолять или это?

"type_id":"1","category":"face","req":[{"type":"bossDrop","value":1,"bossId":5}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},{"id":"263","type" :"cap","type_id":"2","category":"face","req":[{"type":"bossDrop","value":1,"bossId":4}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},{"id":"264","type" :"cap","type_id":"3","category":"face","req":[{"type":"bossDrop","value":1,"bossId":3}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},{"id":"265","type" :"cap","type_id":"4","category":"face","req":[{"type":"friends","value":29,"unlockPrice":29}],"alt":null,"rating":"180","price":"1800","nrfview ":"0","av":"0","fillings":null},{"id":"266","type" :"cap","type_id":"5","category":"face","req":[{"type":"bossDrop","value":1,"bossId":2}],"alt":null,"rating":"150","price":"1500","nrfview ":"0","av":"0","fillings":null},

просто не очень видно на скрине от куда надо начинать удолять???!!!

[KlouS]

То что отмечено желтым, удалять!
"type_id":"1","category":"face","req":[{"type":"bossDrop","value":1,"bossId":5}],"alt":null,"rating":"150","price":"1500","nrfv iew ":"0","av":"0","fillings":null},{"id":"263","t ype" :"cap","type_id":"2","category":"face","req":[{"type":"bossDrop","value":1,"bossId":4}],"alt":null,"rating":"150","price":"1500","nrfv iew ":"0","av":"0","fillings":null},{"id":"264","t ype" :"cap","type_id":"3","category":"face","req":[{"type":"bossDrop","value":1,"bossId":3}],"alt":null,"rating":"150","price":"1500","nrfv iew ":"0","av":"0","fillings":null},{"id":"265","t ype" :"cap","type_id":"4","category":"face","req":[{"type":"friends","value":29,"unlockPrice":29}],"alt":null,"rating":"180","price":"1800","nrfv iew ":"0","av":"0","fillings":null},{"id":"266","t ype" :"cap","type_id":"5","category":"face","req":[{"type":"bossDrop","value":1,"bossId":2}],"alt":null,"rating":"150","price":"1500","nrfv iew ":"0","av":"0","fillings":null},


Каждая строчка {"type":"bossDrop","bossId":*,"value":1}, отвечает за разных боссов, после удаления всех этих строчок, откроються все шапки?!Я так понял?

[CreatiK]

KlouS,Да можно таким способом все открыть))) Я уже начал скелета покупать)

вот так выгледит изначально "req":[{"type":"bossDrop","value":1,"bossId":5}] вот так выгледит после редактирования "req":[]

[4oc3p]

Спасибо, канает)
Вот только интересно, можно ли таким способом наколки бить? Я бы проверил да вот сиг нету слил на кепончик)

[APXMAG]

че то не работает((((

[WNMR]

Цитата: Сообщение от APXMAG че то не работает((((

Все работает! Может не так сделал?

[CreatiK]

APXMAG,опиши свои действия

[APXMAG]

Цитата: Сообщение от CreatiK APXMAG,опиши свои действия

Сделал все так как ты написал шапки открылись но купить их нельзя!
я пробовал купить шапку адидас, ушанку и кепарик но не проканало...
ты сам то какую купил?

[4oc3p]

я адидасик черный купил - все нормуль, но вот папиросок жаль 1.5 куска =(

[CreatiK]

APXMAG,я адик черную купил