Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.
WildStar Online ASSOCIATED_WITH Manfred
Manfred emailed WildStar Online about an exploit and its ramifications after the Defcon talk.
Explicit Confidence 99% · Manfred EP 7 Details
“The other one for WildStar Online, I sent him an e-mail describing the issue at hand and its ramifications.”
Manfred ASSOCIATED_WITH Shadowbane
Manfred describes extensively reverse-engineering and exploiting Shadowbane, including manipulating packets and game mechanics.
Explicit Confidence 99% · Manfred EP 7 Details
“Shadowbane was so hopelessly insecure”
“we were just using the game protocol and the game logic against itself”
Manfred ASSOCIATED_WITH Defcon
Manfred first presented this research in a talk at Defcon.
Explicit Confidence 98% · Jack Rhysider EP 7 Details
“He first spoke about this at Defcon”
Manfred ASSOCIATED_WITH Anarchy Online
Manfred says he reported exploits in Anarchy Online and that his accounts were subsequently banned.
Explicit Confidence 98% · Manfred EP 7 Details
“For one example would be Anarchy Online.”
“The next day we wake up and our accounts are banned.”
Elder Scrolls Online ASSOCIATED_WITH Manfred
Manfred disclosed an unfixed bug in Elder Scrolls Online after his Defcon talk.
Explicit Confidence 98% · Manfred EP 7 Details
“I showed them the exploit shortly after Defcon.”
“It still hasn’t been fixed.”
Manfred ASSOCIATED_WITH World of Warcraft
Manfred exploited World of Warcraft’s talent system and used the exploit for roughly eight to nine months.
Explicit Confidence 99% · Manfred EP 7 Details
“We used this talent exploit to complete dungeons with very few people for probably eight to nine months.”
World of Warcraft ASSOCIATED_WITH Debug packets
World of Warcraft had development/debug packets enabled in its production MMORPG, according to Manfred’s account.
Explicit Confidence 98% · Manfred EP 7 Details
“They shouldn’t have included development packets in their production MMORPG on the scale of World of Warcraft.”
Guild Wars 2 DEVELOPED_BY ArenaNet
Jack identifies ArenaNet as the maker of Guild Wars 2.
Explicit Confidence 99% · Manfred EP 7 Details
“ArenaNet, the makers of Guild Wars 2.”
Manfred EXPLOITS Integer overflow
Jack says the exploit Manfred finds in almost every game is an integer overflow.
Explicit Confidence 98% · Jack Rhysider EP 7 Details
“The exploit he finds in almost every game is an integer overflow.”
Manfred USES Debug packets
Manfred analyzed debug packets that were enabled on production servers.
Explicit Confidence 99% · Jack Rhysider EP 7 Details
“He found there were debug packets that were enabled in production servers.”
“After spending time analyzing the debug packets”
Manfred USES Game protocol
Manfred says he and his group used the game protocol and game logic against themselves by finding unattended protocol features.
Explicit Confidence 99% · Manfred EP 7 Details
“we were just using the game protocol and the game logic against itself”
Manfred USES Reverse engineering
Manfred says he reverse-engineers games and their client-server protocols.
Explicit Confidence 99% · Manfred EP 7 Details
“For fun I reverse-engineer games and I reverse-engineer how the protocol talks to the server”
Jack Rhysider USES Game bot
Jack says he used a bot to automate his EverQuest character and gain experience while he slept.
Explicit Confidence 99% · Jack Rhysider EP 7 Details
“So I started using a bot.”
“The bot would take control of my character and automate it for me.”
Manfred used IRC to communicate with Anarchy Online developers about exploits.
Explicit Confidence 99% · Manfred EP 7 Details
“We go in; we talk in the IRC”
“here’s the exploits, here’s how to reproduce them”
Manfred USES Packet injection
Manfred captures packets, changes their values, and sends them to the server.
Explicit Confidence 99% · Jack Rhysider EP 7 Details
“He’ll injects his own data into packets and see how the game responds.”
“he captures it, changes some values, and sends it off”
Manfred USES Man-in-the-middle
Jack characterizes Manfred’s packet-level manipulation as being similar to a man-in-the-middle technique.
Derived Confidence 92% · Jack Rhysider EP 7 Details
“He’s doing this at the packet level, sort of like a man-in-the-middle.”
instance-crash duplication exploit AFFECTS Asheron’s Call 2
The instance-crash duplication exploit affected item persistence in Asheron’s Call 2.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“he used an exploit that would allow him to crash an instance”
vendor item-ID manipulation AFFECTS Lineage II
The vendor item-ID manipulation exploit affected buying and selling items in Lineage II.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“when buying items from a vendor he could change the item ID the vendor was selling”
Integer overflow AFFECTS Anarchy Online
An integer-overflow bug affected character attributes in Anarchy Online.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“He found an integer overflow bug that allowed him to subtract his strength beyond zero”
character duplication exploit AFFECTS Dark Age of Camelot
The character-duplication exploit affected character login and inventory state in Dark Age of Camelot.
Explicit Confidence 98% · Manfred EP 8 Details
“you could log in two characters at once that were the same database instance”
house deletion exploit AFFECTS Ultima Online
The house-deletion exploit affected houses and house ownership in Ultima Online.
Derived Confidence 97% · Manfred EP 8 Details
“my neighbor’s house just disappeared”
auction-bid arithmetic overflow AFFECTS WildStar Online
The auction-bid arithmetic overflow affected platinum balances in WildStar Online.
Explicit Confidence 98% · Manfred EP 8 Details
“it would roll your money amount back into the positive and you’d end up with nine quintillion in game platinum”
Manfred ASSOCIATED_WITH SQL injection
Manfred compared the prevalence of integer-overflow bugs in games to SQL injection in websites; he did not claim to use SQL injection.
Explicit Confidence 95% · Manfred EP 8 Details
“It’s akin to having SQL injection in a website.”
Lineage server hacking campaign ATTRIBUTED_TO North Korea
The New York Times report attributed the Lineage server hackers to North Korea sponsorship, reportedly to raise money for North Korea.
Attributed Confidence 97% · Jack Rhysider EP 8 Details
“the New York Times reported hackers that were sponsored by North Korea and Kim Jong-Il”
character duplication exploit EXPLOITS database reload duplication bug
The character-duplication exploit relied on a fresh database reload restoring duplicated items and gold.
Derived Confidence 98% · Manfred EP 8 Details
“I’d get a fresh [00:15:00] reload of the database and I’d have all my items and my gold again”