Way to download levels from official server #263

New issue

Open

opened 2022-09-08 05:37:17 -04:00 by iwalfy · 6 comments

iwalfy commented

2022-09-08 05:37:17 -04:00

(Migrated from github.com)

First run Wireshark and catch secret field of any user.
Then make HTTP POST request to http://www.boomlings.com/database/downloadGJLevel22.php that contains:

gameVersion=21
binaryVersion=35
gdw=0
levelID=<level id>
secret=<your secret>

Important to specify an empty User-Agent header otherwise Cloudflare will block us.

curl example: curl -X POST "http://www.boomlings.com/database/downloadGJLevel22.php" -d "gameVersion=21&binaryVersion=35&gdw=0&levelID=1389451&secret=XXXXXXX" -H 'User-Agent:'

#RobUseHTTPS

First run Wireshark and catch `secret` field of any user. Then make HTTP POST request to `http://www.boomlings.com/database/downloadGJLevel22.php` that contains: ``` gameVersion=21 binaryVersion=35 gdw=0 levelID=<level id> secret=<your secret> ``` Important to specify an empty `User-Agent` header otherwise Cloudflare will block us. curl example: `curl -X POST "http://www.boomlings.com/database/downloadGJLevel22.php" -d "gameVersion=21&binaryVersion=35&gdw=0&levelID=1389451&secret=XXXXXXX" -H 'User-Agent:'` ![Screenshot 2022-09-08 at 12 29 38](https://user-images.githubusercontent.com/99194003/189088170-9fee4f40-dd05-4daf-93f2-580d3411b0d9.png) ![Screenshot 2022-09-08 at 12 27 52](https://user-images.githubusercontent.com/99194003/189088581-19c09d51-b6be-4ad2-babc-675106c56d9a.png) #RobUseHTTPS

iwalfy commented

2022-09-08 06:13:06 -04:00

(Migrated from github.com)

And as far as I understand, the main problem is that you are blocked from the servers. Maybe in this case it is better to send all requests from the client side.

Nadwey commented

2022-09-08 08:09:26 -04:00

(Migrated from github.com)

And as far as I understand, the main problem is that you are blocked from the servers. Maybe in this case it is better to send all requests from the client side.

You can't move requests to client side because of CORS policy (as far as I know)

> And as far as I understand, the main problem is that you are blocked from the servers. Maybe in this case it is better to send all requests from the client side. You can't move requests to client side because of CORS policy (as far as I know)

iwalfy commented

2022-09-08 12:00:07 -04:00

(Migrated from github.com)

What if you use a proxy to change the server address for each request?

masckmaster2007 commented

2022-09-21 11:32:15 -03:00

(Migrated from github.com)

@iwalfy One small note: I understand why you censored the secret, but it's just a word that's used and can find in:
https://docs.gd-programming.org/server/topics/secrets/

@iwalfy One small note: I understand why you censored the secret, but it's just a word that's used and can find in: https://docs.gd-programming.org/server/topics/secrets/

iAndyHD3 commented

2022-09-21 11:35:36 -03:00

(Migrated from github.com)

Another small note: it's easier to use gdbrowser locally than do all that stuff

iwalfy commented

2022-09-21 12:09:42 -03:00

(Migrated from github.com)

@iwalfy One small note: I understand why you censored the secret, but it's just a word that's used and can find in: https://docs.gd-programming.org/server/topics/secrets/

I didn't know this at the time.

> @iwalfy One small note: I understand why you censored the secret, but it's just a word that's used and can find in: https://docs.gd-programming.org/server/topics/secrets/ I didn't know this at the time.

This discussion has been locked. Commenting is limited to contributors.