Episode
EP 7 — Manfred (Part 1)
01 December 2017
Official episode
·
Official transcript
black hat
cybercrime
Jack Rhysider interviews Manfred about reverse-engineering MMORPG clients and protocols, exploiting packet handling and game logic, and disclosing vulnerabilities in online games.
Topics: Integer overflow vulnerabilities, Reverse engineering of game clients, Game client/server protocol analysis, Packet capture, modification, injection, and replay, Man-in-the-middle interception, Missing server-side packet validation, Debug or development functionality enabled in production, Responsible vulnerability disclosure, Game-logic abuse and unintended privilege escalation, Player-versus-player abuse and mass griefing
Official episode-page sources
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Entities (32)
Claims (18)
Qualified statements from this episode, not graph facts.
Jack Rhysider
USES
Game bot
Jack says he used a bot to automate his EverQuest character and gain experience while he slept.
Explicit
Confidence 99%
· Jack Rhysider
EP 7
Details
“So I started using a bot.”
Jack Rhysider ·
offsets 822–847
“The bot would take control of my character and automate it for me.”
Jack Rhysider ·
offsets 848–914
Manfred
ASSOCIATED_WITH
Defcon
Manfred first presented this research in a talk at Defcon.
Explicit
Confidence 98%
· Jack Rhysider
EP 7
Details
“He first spoke about this at Defcon”
Jack Rhysider ·
offsets 2257–2292
Manfred
USES
Reverse engineering
Manfred says he reverse-engineers games and their client-server protocols.
Explicit
Confidence 99%
· Manfred
EP 7
Details
“For fun I reverse-engineer games and I reverse-engineer how the protocol talks to the server”
Manfred ·
offsets 4720–4812
Manfred
USES
Packet injection
Manfred captures packets, changes their values, and sends them to the server.
Explicit
Confidence 99%
· Jack Rhysider
EP 7
Details
“He’ll injects his own data into packets and see how the game responds.”
Jack Rhysider ·
offsets 5064–5134
“he captures it, changes some values, and sends it off”
Jack Rhysider ·
offsets 5933–5986
Manfred
USES
Man-in-the-middle
Jack characterizes Manfred’s packet-level manipulation as being similar to a man-in-the-middle technique.
Derived
Confidence 92%
· Jack Rhysider
EP 7
Details
“He’s doing this at the packet level, sort of like a man-in-the-middle.”
Jack Rhysider ·
offsets 5806–5876
Manfred
EXPLOITS
Integer overflow
Jack says the exploit Manfred finds in almost every game is an integer overflow.
Explicit
Confidence 98%
· Jack Rhysider
EP 7
Details
“The exploit he finds in almost every game is an integer overflow.”
Jack Rhysider ·
offsets 5225–5290
Manfred
USES
Game protocol
Manfred says he and his group used the game protocol and game logic against themselves by finding unattended protocol features.
Explicit
Confidence 99%
· Manfred
EP 7
Details
“we were just using the game protocol and the game logic against itself”
Manfred ·
offsets 18310–18380
Manfred
USES
Debug packets
Manfred analyzed debug packets that were enabled on production servers.
Explicit
Confidence 99%
· Jack Rhysider
EP 7
Details
“He found there were debug packets that were enabled in production servers.”
Jack Rhysider ·
offsets 10541–10615
“After spending time analyzing the debug packets”
Jack Rhysider ·
offsets 10617–10664
Manfred
USES
IRC
Manfred used IRC to communicate with Anarchy Online developers about exploits.
Explicit
Confidence 99%
· Manfred
EP 7
Details
“We go in; we talk in the IRC”
Manfred ·
offsets 18925–18953
“here’s the exploits, here’s how to reproduce them”
Manfred ·
offsets 19033–19082
Guild Wars 2
DEVELOPED_BY
ArenaNet
Jack identifies ArenaNet as the maker of Guild Wars 2.
Explicit
Confidence 99%
· Manfred
EP 7
Details
“ArenaNet, the makers of Guild Wars 2.”
Manfred ·
offsets 3123–3160
World of Warcraft
ASSOCIATED_WITH
Debug packets
World of Warcraft had development/debug packets enabled in its production MMORPG, according to Manfred’s account.
Explicit
Confidence 98%
· Manfred
EP 7
Details
“They shouldn’t have included development packets in their production MMORPG on the scale of World of Warcraft.”
Manfred ·
offsets 11933–12043
Server-side validation failure
AFFECTS
Shadowbane
Shadowbane is described as having no server-side validation for packets sent by the player.
Explicit
Confidence 99%
· Jack Rhysider
EP 7
Details
“He found that there was no server side validation for any packet he sent”
Jack Rhysider ·
offsets 13579–13651
Elder Scrolls Online
ASSOCIATED_WITH
Manfred
Manfred disclosed an unfixed bug in Elder Scrolls Online after his Defcon talk.
Explicit
Confidence 98%
· Manfred
EP 7
Details
“I showed them the exploit shortly after Defcon.”
Manfred ·
offsets 20362–20409
“It still hasn’t been fixed.”
Manfred ·
offsets 20799–20826
WildStar Online
ASSOCIATED_WITH
Manfred
Manfred emailed WildStar Online about an exploit and its ramifications after the Defcon talk.
Explicit
Confidence 99%
· Manfred
EP 7
Details
“The other one for WildStar Online, I sent him an e-mail describing the issue at hand and its ramifications.”
Manfred ·
offsets 20502–20609
Manfred
ASSOCIATED_WITH
Anarchy Online
Manfred says he reported exploits in Anarchy Online and that his accounts were subsequently banned.
Explicit
Confidence 98%
· Manfred
EP 7
Details
“For one example would be Anarchy Online.”
Manfred ·
offsets 18734–18774
“The next day we wake up and our accounts are banned.”
Manfred ·
offsets 19141–19193
Manfred
ASSOCIATED_WITH
Shadowbane
Manfred describes extensively reverse-engineering and exploiting Shadowbane, including manipulating packets and game mechanics.
Explicit
Confidence 99%
· Manfred
EP 7
Details
“Shadowbane was so hopelessly insecure”
Manfred ·
offsets 12753–12790
“we were just using the game protocol and the game logic against itself”
Manfred ·
offsets 18310–18380
Manfred
ASSOCIATED_WITH
World of Warcraft
Manfred exploited World of Warcraft’s talent system and used the exploit for roughly eight to nine months.
Explicit
Confidence 99%
· Manfred
EP 7
Details
“We used this talent exploit to complete dungeons with very few people for probably eight to nine months.”
Manfred ·
offsets 10127–10231
Manfred
ASSOCIATED_WITH
Ultima Online
Manfred describes playing and player-killing in Ultima Online under the name Phuckchop.
Explicit
Confidence 99%
· Manfred
EP 7
Details
“Back in the early days of Ultima Online I did a lot of PKing and griefing”
Manfred ·
offsets 3317–3390
Transcript references
Works mentioned in the transcript. Distinct from show-note sources.
Wired Magazine article about the Shadowbane hack
article
Manfred’s Defcon talk recording
video · Manfred
Extraction provenance
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19
· 2026-09-12T17:58:17.139152+00:00