Hacking IBP Arcade Scores

A guide to changing your score in any Invision Power Board Arcade game /gg

Download Burp Proxy here http://www.portswigger.net/proxy/burpproxy_v1.3.zip

Download the Java Runtime Environment if you do not already have it installed. If you have LimeWire installed, than you already have JRE installed.

Run proxy.bat in your Burp Proxy Folder. If 1 minute has passed after running proxy.bat and Burp Proxy has not yet opened, double click the burpproxy_v1.3.jar file in your Burp Proxy Folder.

Now go to the arcade game you wish to spoof your score on, and once the game loads, go into your browsers proxy settings, and change the hostname to "127.0.0.1" and change the port to "8080". Methods for changing your browser’s proxy settings are below.

In Avant...
Tools -> Avant Browser Options -> Proxy Server :
Address: 127.0.0.1 Port: 8080
-> Add
(Make sure the entry is checked)
-> Apply -> Okay

http://img353.imageshack.us/img353/528/avantvd3.png
In Firefox…
Tools -> Options -> General Tab -> Connection Settings
Manual proxy configuration:
HTTP Proxy: 127.0.0.1 Port: 8080
-> OK

http://img353.imageshack.us/img353/6616/firefoxfb2.png
In Opera…
Tools -> Preferences -> Advanced Tab -> Network -> Proxy Servers
HTTP: 127.0.0.1 Port: 8080
-> OK

http://img353.imageshack.us/img353/804/operars7.png

Now just finish the game as quick as possible and click the "submit score" button or whatever the game has. Your Burp Proxy window should now be flashing.

http://img353.imageshack.us/img353/8073/penguinngamevy2.png

Go into Burp Proxy, and go to tab entitled "Intercept". There should be the data that the arcade game is attempting to send. Find where it says "score=" and there should be your score after it. Change that to anything you please.

http://img95.imageshack.us/img95/5341/proxyorigeditfl1.png

http://img95.imageshack.us/img95/8697/proxychangededitkt1.png

After your score is modified, click "forward" in the intercept tab of Burp Proxy.

Take your browser off proxy (using the same steps described in #4) and follow the submitting process (enter a comment that will be viewed with your score, etc.)

http://img353.imageshack.us/img353/6606/commentiz5.png
Go look at your completely pwnage score in the arcade.

http://img353.imageshack.us/img353/76/pwnagescorerm5.png