Manfred USES hex editor
Manfred inspected Sim City save files with a hex editor and changed values to alter the game.
Explicit Confidence 99% · Jack Rhysider EP 8 Details
“I decided to load the file into a hex editor.”
Episode
01 December 2017 Official episode · Official transcript
black hat cybercrime
The episode describes Manfred’s exploitation of online-game protocols and economic systems, including house deletion, item duplication, integer overflows, packet manipulation, and the sale of virtual goods.
Topics: Game protocol reverse engineering, Packet manipulation, Insufficient server-side authorization checks, House deletion and item-loss exploits, Character and item duplication, Integer overflow, Signed-integer arithmetic wraparound, Vendor and auction-house price manipulation, Credential theft and password reuse, Keyloggers, Denial-of-service attacks, Game database compromise, Virtual goods markets, Responsible vulnerability disclosure
Links published on the Darknet Diaries episode page. Not LLM output.
No Sources heading on this episode page.
Qualified statements from this episode, not graph facts.
Manfred USES hex editor
Manfred inspected Sim City save files with a hex editor and changed values to alter the game.
Explicit Confidence 99% · Jack Rhysider EP 8 Details
“I decided to load the file into a hex editor.”
Manfred modified Sim City save-game data, including the in-game money amount.
Explicit Confidence 99% · Jack Rhysider EP 8 Details
“I had given myself 100 billion in game dollars.”
Manfred USES online-game client reverse engineering
Manfred reverse-engineered the Ultima Online client.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“he started tinkering and reverse-engineering the client”
Manfred USES packet manipulation
Manfred manipulated Ultima Online packets while investigating game behavior.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“and manipulating the packets”
house deletion exploit EXPLOITS house ownership validation flaw
The house-deletion exploit worked because the server did not properly verify that the sender owned the targeted house.
Derived Confidence 98% · Manfred EP 8 Details
“the server doesn’t check if you’re the owner of this house when you send the delete packet”
house deletion exploit AFFECTS Ultima Online
The house-deletion exploit affected houses and house ownership in Ultima Online.
Derived Confidence 97% · Manfred EP 8 Details
“my neighbor’s house just disappeared”
Manfred USES house deletion exploit
Manfred used the house-deletion exploit to delete other players’ houses.
Explicit Confidence 99% · Manfred EP 8 Details
“I started deleting players’ homes of rival guilds”
Ultima Online house deletion fiasco INVOLVES house deletion exploit
The Ultima Online house-deletion fiasco involved the exploit used to delete large numbers of houses.
Derived Confidence 99% · Jack Rhysider EP 8 Details
“created a new character. He ran around the game deleting every house he could find”
Manfred used eBay to sell Ultima Online houses and Dark Age of Camelot virtual goods.
Explicit Confidence 99% · Manfred EP 8 Details
“That’s when eBay came into play.”
Ultima Online house deletion fiasco INVOLVES Ultima Online
The house-deletion fiasco occurred in Ultima Online.
Explicit Confidence 99% · Manfred EP 8 Details
“Shortly after the Ultima Online house deletion fiasco”
Manfred USES Dark Age of Camelot
Manfred used a duplication bug in Dark Age of Camelot to duplicate characters, items, and gold.
Explicit Confidence 99% · Manfred EP 8 Details
“I’d cause myself to log in again without logging out the previous character”
character duplication exploit EXPLOITS database reload duplication bug
The character-duplication exploit relied on a fresh database reload restoring duplicated items and gold.
Derived Confidence 98% · Manfred EP 8 Details
“I’d get a fresh [00:15:00] reload of the database and I’d have all my items and my gold again”
character duplication exploit AFFECTS Dark Age of Camelot
The character-duplication exploit affected character login and inventory state in Dark Age of Camelot.
Explicit Confidence 98% · Manfred EP 8 Details
“you could log in two characters at once that were the same database instance”
Manfred USES character duplication exploit
Manfred used the duplication exploit to create duplicated inventory and sell virtual goods.
Explicit Confidence 99% · Manfred EP 8 Details
“started selling Dark Age of Camelot platinum and items on eBay”
After eBay banned virtual-goods sales, Manfred sold directly to the Chinese supplier ige.com.
Explicit Confidence 99% · Manfred EP 8 Details
“I started selling directly to a Chinese supplier back then. It was ige.com.”
Manfred EXPLOITS Integer overflow
Manfred exploited integer-overflow bugs in multiple online games, including Anarchy Online and Final Fantasy titles.
Explicit Confidence 99% · Jack Rhysider EP 8 Details
“He found an integer overflow bug”
“He found numerous integer overflow exploits in this game”
Integer overflow AFFECTS Anarchy Online
An integer-overflow bug affected character attributes in Anarchy Online.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“He found an integer overflow bug that allowed him to subtract his strength beyond zero”
Manfred EXPLOITS Integer overflow
Manfred used integer-overflow behavior to obtain extreme character attributes and duplicate item quantities.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“This resulted in him getting two billion potions.”
vendor item-ID manipulation AFFECTS Lineage II
The vendor item-ID manipulation exploit affected buying and selling items in Lineage II.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“when buying items from a vendor he could change the item ID the vendor was selling”
Manfred USES vendor item-ID manipulation
Manfred used vendor item-ID manipulation to buy or sell items at altered prices.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“he could change the item ID the vendor was selling and buy any item he wanted for any price he wanted”
instance-crash duplication exploit AFFECTS Asheron’s Call 2
The instance-crash duplication exploit affected item persistence in Asheron’s Call 2.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“he used an exploit that would allow him to crash an instance”
Manfred USES instance-crash duplication exploit
Manfred used an instance-crash exploit to duplicate items and gold in Asheron’s Call 2.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“when they’d both log back in they’d both have the exact same items”
auction-bid arithmetic overflow AFFECTS WildStar Online
The auction-bid arithmetic overflow affected platinum balances in WildStar Online.
Explicit Confidence 98% · Manfred EP 8 Details
“it would roll your money amount back into the positive and you’d end up with nine quintillion in game platinum”
Manfred USES auction-bid arithmetic overflow
Manfred used an auction-house bid arithmetic overflow to generate in-game platinum in WildStar Online.
Explicit Confidence 98% · Manfred EP 8 Details
“you’d create a maximum signed 64-bit integer bid”
Lineage server hacking campaign TARGETS Lineage II
The Lineage server hacking campaign targeted Lineage video game servers.
Explicit Confidence 99% · Jack Rhysider EP 8 Details
“were caught hacking into the Lineage video game servers”
Lineage server hacking campaign ATTRIBUTED_TO North Korea
The New York Times report attributed the Lineage server hackers to North Korea sponsorship, reportedly to raise money for North Korea.
Attributed Confidence 97% · Jack Rhysider EP 8 Details
“the New York Times reported hackers that were sponsored by North Korea and Kim Jong-Il”
Manfred USES in-app purchases
Manfred characterized his virtual-goods business as providing in-app purchases before that model became common.
Explicit Confidence 98% · Jack Rhysider EP 8 Details
“providing players with in-app purchases before in-app purchases were a thing”
Manfred ASSOCIATED_WITH SQL injection
Manfred compared the prevalence of integer-overflow bugs in games to SQL injection in websites; he did not claim to use SQL injection.
Explicit Confidence 95% · Manfred EP 8 Details
“It’s akin to having SQL injection in a website.”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-12T17:59:49.151314+00:00