Prodigy-Hacking / ProdigyMathGameHacking

Prodigy Hacking: Hacking for the right reasons. | Questions? Ask on our Discord. https://discord.gg/XQDfbfq
https://prodigyhacking.com
Other
17 stars 10 forks source link

android app #344

Closed ghost closed 3 years ago

ghost commented 3 years ago

we need one

may I make

pls

rusprice commented 3 years ago

Is that even possible?

ghost commented 3 years ago

Yes. You can make an APK file, and the end user can allow installing from unknown sources. Or, we can submit to Play Store for $15.

rusprice commented 3 years ago

How is prodigy even played on android? Is there an app?

ghost commented 3 years ago

Yes, there is an app on the Google Play Store.

rusprice commented 3 years ago

Actually, the cheats are all in JS, we would have to recreate an entirely new codebase just for the android app.

ghost commented 3 years ago

The Android app embeds the site and injects JS, I think.

rusprice commented 3 years ago

Yeah, alright.

rusprice commented 3 years ago

We'd have to make a modified version of the app then?

ghost commented 3 years ago

Screenshot_2020-10-23_200848.png

Prodigy's app from the Play Store

ghost commented 3 years ago

We'd have to make a modified version of the app then?

Yea. Or embed prodigygame.com and inject WCM.

rusprice commented 3 years ago

If it just embeds the site, then we'd have to figure out how to implement a redirector for web requests inside of the app.

ghost commented 3 years ago

If it just embeds the site, then we'd have to figure out how to implement a redirector for web requests inside of the app.

Hmm... true. For now we can just implement script-based hacks, then figure out Redirector later.

rusprice commented 3 years ago

We have to have the code redirected in some way just to load in the actual scripts (the _)

ghost commented 3 years ago

Also, by embedding the site, I mean it has a custom login and loading that it draws over the site, then logs the user in via the app's login screen or whatever.

rusprice commented 3 years ago

That's the only tie in between the app and embed.

ghost commented 3 years ago

We have to have the code redirected in some way just to load in the actual scripts (the _)

I mean Arc's script-based hacks. All network-based.

ghost commented 3 years ago

That's the only tie in between the app and embed.

Yes.

rusprice commented 3 years ago

We could only do the script based hacks (ones without using _)

rusprice commented 3 years ago

I'll decompile the android app.

ghost commented 3 years ago

We could only do the script based hacks (ones without using _)

Yea, but it's something. Maybe @ArcerionDev could work on the script-based hacks more? The goal is reaching as large of an audience as possible. I personally know at least 10 people who this will help. Not everyone has a PC, so this is a major improvement, even if the current functionality is small.

ghost commented 3 years ago

I'll decompile the android app.

I did that like a year ago. It's somewhat obfuscated, but feel free to give it a try.

rusprice commented 3 years ago

here ya go prodigy.zip

ghost commented 3 years ago

here ya go prodigy.zip

Ooh, that's a major change since the last time I tried.

ghost commented 3 years ago

Unrelated, but Prodigy uses Google Firebase Analytics? Interesting. Screenshot_2020-10-23_202849.png

PatheticMustan commented 3 years ago

I suggest not working on an app. Prodigy would probably DMCA us.

ghost commented 3 years ago

I suggest not working on an app. Prodigy would probably DMCA us.

Why didn't they DMCA the GitHub? Why didn't they report the web store app? We might be able to only distribute an APK file, and not put it in the Play Store. If they DMCA the GitHub, GitHub won't take down an entire repository for a single file, they'll just delete the APK file.

ghost commented 3 years ago

test #1 loads prodigy and alerts "hello world"

havent tested yet but ik it works

PatheticMustan commented 3 years ago

I suggest not working on an app. Prodigy would probably DMCA us.

Why didn't they DMCA the GitHub? Why didn't they report the web store app? We might be able to only distribute an APK file, and not put it in the Play Store. If they DMCA the GitHub, GitHub won't take down an entire repository for a single file, they'll just delete the APK file.

We didn't actually use their code, we just inject our own.

With an app, it's more of a gray area, since we're just modifying their existing app

ghost commented 3 years ago

We're not modifying their app. We're embedding the website and injecting code!

ghost commented 3 years ago

ok looks like the app is broken idk how

ghost commented 3 years ago

ok nvm figured it out brb

ghost commented 3 years ago

https://prnt.sc/v616t4

the user agent string is a samsung s8 in chrome to make it look less suspicious and harder to create an anti-cheat

ghost commented 3 years ago

took an hour to get it working and avast says it's making suspicious activity lmfao

ArcerionDev commented 3 years ago

:thonk:

ghost commented 3 years ago

it's probs 'cause it's injecting JS into prodigy or something lmao

ghost commented 3 years ago

ah, i see

ghost commented 3 years ago

AYYY I SUCCESSFULLY DIDD SOMETHING

Screenshot_2020-10-24_102710

ArcerionDev commented 3 years ago

did you just embed it or what

rusprice commented 3 years ago

If you add the hack by only injecting JS then we could create a bookmarklet.

ArcerionDev commented 3 years ago

You can already install Chrome extensions on phone with Yandex

ghost commented 3 years ago

WAHOOO ALERTS ARE WORKING Screenshot_2020-10-24_104939.png

ghost commented 3 years ago

You can already install Chrome extensions on phone with Yandex

idc this is cooler. also wouldnt it be easier to just offer an app than telling everyone to download ANOTHER third-party program?

ghost commented 3 years ago

sketchware (what im using as my laptop is broken and mit app inventor won't work on my Linux machine) link: http://sketchware.io/import.jsp?id=Gzaw

and im uploading the zip file for android studio hold on

ghost commented 3 years ago

https://github.com/SwxtchCode/SwxtchCode/blob/main/PMGH.zip

ghost commented 3 years ago

btw, once everyone downloads that, tell me so i can delete the comments linking the source.

ghost commented 3 years ago

uhh what did i screw up now lmao

https://imgur.com/7K5UcPG.png

ArcerionDev commented 3 years ago

cleartext communication

ArcerionDev commented 3 years ago
<platform name="android">
  <edit-config file="app/src/main/AndroidManifest.xml" mode="merge" target="/manifest/application">
      <application android:usesCleartextTraffic="true" />
  </edit-config>
</platform>
ArcerionDev commented 3 years ago

I def didn't just look up what was wrong on stackoverflow oh no I'm not like that no no no

ghost commented 3 years ago

kk lmao