
We’ve found a scoring game named “Rookie Jump” over the internet, graphics looks cool but something is wrong. Let’s find a web player game made with unity on the internet. Since this this has not been fixed yet, I will replace sensitive data by fake ones but all the process and ideas are stayed intact. No more talking, let’s see what we can do! Practice and methodology step-by-stepįor this example, I will apply this tutorial on a real game from a website with 30k+ active users.


Considering the client has authority, it has to contain the endpoint and methods to send the score to an API which will update the scoreboard. Since we’re aiming to cheat our score, we will concentrate on extracting the scripts. Now we know most of games are client based, what if we could get that client and extract it? Extracting a game will give us all its resources (textures, animation, scripts, etc.). People making a simple scoring game like the popular “flappy bird” or “doodle jump” will only need to send the final score to an API and it seems overkill to make an emulator for your game if a single page can handle the score, right? Well, that’s what most of developers think and that’s the reason most of games playable in browsers are basing the game authority in the client. If you’re an indie developer, you make your game on your free time and you don’t have too much time to spare on the security part of your game because you probably trust the tools you’re using or you don’t even realize what can be the consequences. If you already tried to make an online game, you were probably facing issues like deciding who will have the main authority, the client, the server, both? As a matter of fact, we keep saying to people to never trust a client and all the game logic should be calculated server side but Hey! Servers can cost a lot and all of games don’t necessarily need to have a big client-server communication.

Games can be made easily by anyone who has a computer and know basics of programming.Īlthough I like to see new games, I’ve realized most of them were poorly developed and were containing big flows even when they were made by big companies. Game programming is no longer reserved to special organization with high resources. The use of Unit圓D is growing with the years because of its convenience to make and deploy games across all platforms.

More exactly, we’ll be talking about scoring game made with the game engine Unity 3D. Today, we’ll be talking about scoring games. To speak about the most famous technologies used right now, we have Flash, Html5 and Unit圓D. Some of them are even playable under your browser. There is a lot of kind of games over internet. Some of you have already been tempted to cheat in video game because somehow, they find it funnier like this. Games are a great way to kill the time and most of you probably already played video games.
