ctfwriteup.com
Search
K

Pwnie Island

What is Pwnie Island?

Pwn Adventure 3: Pwnie Island
Pwn Adventure 3: Pwnie Island
Pwn Adventure 3: Pwnie Island is a MMORPG game designed to be hacked. Download the Windows version. Hackers don't hack Linux games, pls.

Setup

We set up the client on Windows. The /etc/hosts file is at C:\Windows\System32\drivers\etc\hosts.

Game Architecture

First, let's conclude the architecture of this game:
  • The game lauched is written in Mono, which is a cross-platform .NET framework.
  • The underlying game engine is Unreal 4, but we don't attack the engine itself because net code and game logic are completely custom.
  • The game logic is written in C++. This is expected since Unreal 4 is the game engine.
  • The game client communicates with the game server for computation. There are two servers:
    • Master server: master.pwn3 -> port 3333
    • Game server: game.pwn3 -> port 3002
Based on common game hacking techniques, there are a few things that we can do:
  • Try speed hack, health/mana hack, teleport hack, fly hack
  • Figure out how to patch game binary
  • Write a proxy to discover the data format of client-server communication
  • Maybe we can do DLL injection