I have been trying to hack this game, Cargo Hunters, for a while now. The mobile version is largely a PvE game that the devs have officially abandoned in favor of developing the PC version. This is not an exaggeration: as updates for the PC version keep getting churned out, the mobile versions got pulled from Google Play Store a few days ago.
I have tried several ways to hack the game, namely using Game Guardian to find client side values I could tweak; as well as using memory dumps and HttpToolKit to modify the network packets requested by the server. However my attempts have mostly been unsuccessful.
With Game Guardian I was able to modify values that seemed to give me unlimited bullets (freezing the number of bullets in the clip) however after shooting the original bullets in the clip, the gun would keep firing but no damage would register.
Similarly with the memory dumps and HttpToolKit, obfuscating the packet sniffer from the game and Google was a massive hurdle to overcome. One that I still haven't completely cleared, such that any attempts to edit the network requests or responses have swiftly caused the game to crash and Google Play to stop allowing logins.
The main goal of these hacks was to obtain this loot item that has been impossible to source, the Gas Mask. One key part of the game are these monthly quests called contracts that require submitting a set number of items found in a raid in exchange for some exclusive gear that you cannot get otherwise. My current contract has called for 5 Gas Masks and I have yet to even encounter one, let alone successfully extract them for submission.
The game is notoriously tough: random spawns by the enemy, all-seeing snipers that two shot you from hundred yards away, suicidal bots that spawn towards the end of the raids and giant juggernaut bots called the Janitor that roam around the map as a constant threat. All these combined to produce an extremely frustrating and challenging environment. I am at my wit's end with this game, the way NPC spawn and behave in the game is so damm rage inducing. I want to hack it so bad. Sick of dying, so incredibly frustrating!!!
Naively I thought the game would be relatively easy to hack, given that its abandonment by the devs was due to staff shortages. However the reason for my failings could also be due to my minimal hacking experience, or the clever implementation of server side controls.
The game has been discussed on several modding sites, namely a thread that revealed 228 config variables, a complete list of item IDs and properties as well as a seemingly working save state editor. Sadly this was for the PC version, nevertheless I was still able to gain some important insights about possible attack vectors and naming conventions. There are also several modded versions of the game. These mods claim several features including movement hacks, unlimited ammo and unlimited stamina. However, I am still determined to find a way on my own so I have not tried any of these downloadable mods.
Given your extensive knowledge of developing working mods and unity based games, how should I proceed going forward?
What else could I use to manipulate the game data?
Il2ccp dumps and dll injections? Or use cheat engine to brute force some variables?
How do I work out what is stored server-side vs client-side?
Can you point me to some relevant websites or other experts in this space that can help me?
I have a rooted OnePlus 8T that is able to hide root and game guardian from the game, as well as a laptop for ADB support.
Any advice and guidance is very appreciated, thank you for your ti
me and consideration.
I have tried several ways to hack the game, namely using Game Guardian to find client side values I could tweak; as well as using memory dumps and HttpToolKit to modify the network packets requested by the server. However my attempts have mostly been unsuccessful.
With Game Guardian I was able to modify values that seemed to give me unlimited bullets (freezing the number of bullets in the clip) however after shooting the original bullets in the clip, the gun would keep firing but no damage would register.
Similarly with the memory dumps and HttpToolKit, obfuscating the packet sniffer from the game and Google was a massive hurdle to overcome. One that I still haven't completely cleared, such that any attempts to edit the network requests or responses have swiftly caused the game to crash and Google Play to stop allowing logins.
The main goal of these hacks was to obtain this loot item that has been impossible to source, the Gas Mask. One key part of the game are these monthly quests called contracts that require submitting a set number of items found in a raid in exchange for some exclusive gear that you cannot get otherwise. My current contract has called for 5 Gas Masks and I have yet to even encounter one, let alone successfully extract them for submission.
The game is notoriously tough: random spawns by the enemy, all-seeing snipers that two shot you from hundred yards away, suicidal bots that spawn towards the end of the raids and giant juggernaut bots called the Janitor that roam around the map as a constant threat. All these combined to produce an extremely frustrating and challenging environment. I am at my wit's end with this game, the way NPC spawn and behave in the game is so damm rage inducing. I want to hack it so bad. Sick of dying, so incredibly frustrating!!!
Naively I thought the game would be relatively easy to hack, given that its abandonment by the devs was due to staff shortages. However the reason for my failings could also be due to my minimal hacking experience, or the clever implementation of server side controls.
The game has been discussed on several modding sites, namely a thread that revealed 228 config variables, a complete list of item IDs and properties as well as a seemingly working save state editor. Sadly this was for the PC version, nevertheless I was still able to gain some important insights about possible attack vectors and naming conventions. There are also several modded versions of the game. These mods claim several features including movement hacks, unlimited ammo and unlimited stamina. However, I am still determined to find a way on my own so I have not tried any of these downloadable mods.
Given your extensive knowledge of developing working mods and unity based games, how should I proceed going forward?
What else could I use to manipulate the game data?
Il2ccp dumps and dll injections? Or use cheat engine to brute force some variables?
How do I work out what is stored server-side vs client-side?
Can you point me to some relevant websites or other experts in this space that can help me?
I have a rooted OnePlus 8T that is able to hide root and game guardian from the game, as well as a laptop for ADB support.
Any advice and guidance is very appreciated, thank you for your ti
me and consideration.
Last edited by a moderator:
