Episode

EP 7 — Manfred (Part 1)

01 December 2017 Official episode · Official transcript

black hat cybercrime

Jack Rhysider interviews Manfred about reverse-engineering MMORPG clients and protocols, exploiting packet handling and game logic, and disclosing vulnerabilities in online games.

Topics: Integer overflow vulnerabilities, Reverse engineering of game clients, Game client/server protocol analysis, Packet capture, modification, injection, and replay, Man-in-the-middle interception, Missing server-side packet validation, Debug or development functionality enabled in production, Responsible vulnerability disclosure, Game-logic abuse and unintended privilege escalation, Player-versus-player abuse and mass griefing

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

No Sources heading on this episode page.

Entities (32)

Claims (18)

Qualified statements from this episode, not graph facts.

Jack Rhysider USES Game bot

Jack says he used a bot to automate his EverQuest character and gain experience while he slept.

Explicit Confidence 99% · Jack Rhysider EP 7 Details

“So I started using a bot.”

Jack Rhysider · offsets 822–847

“The bot would take control of my character and automate it for me.”

Jack Rhysider · offsets 848–914

Manfred ASSOCIATED_WITH Defcon

Manfred first presented this research in a talk at Defcon.

Explicit Confidence 98% · Jack Rhysider EP 7 Details

“He first spoke about this at Defcon”

Jack Rhysider · offsets 2257–2292

Manfred USES Reverse engineering

Manfred says he reverse-engineers games and their client-server protocols.

Explicit Confidence 99% · Manfred EP 7 Details

“For fun I reverse-engineer games and I reverse-engineer how the protocol talks to the server”

Manfred · offsets 4720–4812

Manfred USES Packet injection

Manfred captures packets, changes their values, and sends them to the server.

Explicit Confidence 99% · Jack Rhysider EP 7 Details

“He’ll injects his own data into packets and see how the game responds.”

Jack Rhysider · offsets 5064–5134

“he captures it, changes some values, and sends it off”

Jack Rhysider · offsets 5933–5986

Manfred USES Man-in-the-middle

Jack characterizes Manfred’s packet-level manipulation as being similar to a man-in-the-middle technique.

Derived Confidence 92% · Jack Rhysider EP 7 Details

“He’s doing this at the packet level, sort of like a man-in-the-middle.”

Jack Rhysider · offsets 5806–5876

Manfred EXPLOITS Integer overflow

Jack says the exploit Manfred finds in almost every game is an integer overflow.

Explicit Confidence 98% · Jack Rhysider EP 7 Details

“The exploit he finds in almost every game is an integer overflow.”

Jack Rhysider · offsets 5225–5290

Manfred USES Game protocol

Manfred says he and his group used the game protocol and game logic against themselves by finding unattended protocol features.

Explicit Confidence 99% · Manfred EP 7 Details

“we were just using the game protocol and the game logic against itself”

Manfred · offsets 18310–18380

Manfred USES Debug packets

Manfred analyzed debug packets that were enabled on production servers.

Explicit Confidence 99% · Jack Rhysider EP 7 Details

“He found there were debug packets that were enabled in production servers.”

Jack Rhysider · offsets 10541–10615

“After spending time analyzing the debug packets”

Jack Rhysider · offsets 10617–10664

Manfred USES IRC

Manfred used IRC to communicate with Anarchy Online developers about exploits.

Explicit Confidence 99% · Manfred EP 7 Details

“We go in; we talk in the IRC”

Manfred · offsets 18925–18953

“here’s the exploits, here’s how to reproduce them”

Manfred · offsets 19033–19082

Guild Wars 2 DEVELOPED_BY ArenaNet

Jack identifies ArenaNet as the maker of Guild Wars 2.

Explicit Confidence 99% · Manfred EP 7 Details

“ArenaNet, the makers of Guild Wars 2.”

Manfred · offsets 3123–3160

World of Warcraft ASSOCIATED_WITH Debug packets

World of Warcraft had development/debug packets enabled in its production MMORPG, according to Manfred’s account.

Explicit Confidence 98% · Manfred EP 7 Details

“They shouldn’t have included development packets in their production MMORPG on the scale of World of Warcraft.”

Manfred · offsets 11933–12043

Server-side validation failure AFFECTS Shadowbane

Shadowbane is described as having no server-side validation for packets sent by the player.

Explicit Confidence 99% · Jack Rhysider EP 7 Details

“He found that there was no server side validation for any packet he sent”

Jack Rhysider · offsets 13579–13651

Elder Scrolls Online ASSOCIATED_WITH Manfred

Manfred disclosed an unfixed bug in Elder Scrolls Online after his Defcon talk.

Explicit Confidence 98% · Manfred EP 7 Details

“I showed them the exploit shortly after Defcon.”

Manfred · offsets 20362–20409

“It still hasn’t been fixed.”

Manfred · offsets 20799–20826

WildStar Online ASSOCIATED_WITH Manfred

Manfred emailed WildStar Online about an exploit and its ramifications after the Defcon talk.

Explicit Confidence 99% · Manfred EP 7 Details

“The other one for WildStar Online, I sent him an e-mail describing the issue at hand and its ramifications.”

Manfred · offsets 20502–20609

Manfred ASSOCIATED_WITH Anarchy Online

Manfred says he reported exploits in Anarchy Online and that his accounts were subsequently banned.

Explicit Confidence 98% · Manfred EP 7 Details

“For one example would be Anarchy Online.”

Manfred · offsets 18734–18774

“The next day we wake up and our accounts are banned.”

Manfred · offsets 19141–19193

Manfred ASSOCIATED_WITH Shadowbane

Manfred describes extensively reverse-engineering and exploiting Shadowbane, including manipulating packets and game mechanics.

Explicit Confidence 99% · Manfred EP 7 Details

“Shadowbane was so hopelessly insecure”

Manfred · offsets 12753–12790

“we were just using the game protocol and the game logic against itself”

Manfred · offsets 18310–18380

Manfred ASSOCIATED_WITH World of Warcraft

Manfred exploited World of Warcraft’s talent system and used the exploit for roughly eight to nine months.

Explicit Confidence 99% · Manfred EP 7 Details

“We used this talent exploit to complete dungeons with very few people for probably eight to nine months.”

Manfred · offsets 10127–10231

Manfred ASSOCIATED_WITH Ultima Online

Manfred describes playing and player-killing in Ultima Online under the name Phuckchop.

Explicit Confidence 99% · Manfred EP 7 Details

“Back in the early days of Ultima Online I did a lot of PKing and griefing”

Manfred · offsets 3317–3390

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-12T17:58:17.139152+00:00