Way to download levels from official server #263

Open
opened 2022-09-08 05:37:17 -04:00 by iwalfy · 6 comments
iwalfy commented 2022-09-08 05:37:17 -04:00 (Migrated from github.com)

First run Wireshark and catch secret field of any user.
Then make HTTP POST request to http://www.boomlings.com/database/downloadGJLevel22.php that contains:

gameVersion=21
binaryVersion=35
gdw=0
levelID=<level id>
secret=<your secret>

Important to specify an empty User-Agent header otherwise Cloudflare will block us.

curl example: curl -X POST "http://www.boomlings.com/database/downloadGJLevel22.php" -d "gameVersion=21&binaryVersion=35&gdw=0&levelID=1389451&secret=XXXXXXX" -H 'User-Agent:'

Screenshot 2022-09-08 at 12 29 38
Screenshot 2022-09-08 at 12 27 52

#RobUseHTTPS

First run Wireshark and catch `secret` field of any user. Then make HTTP POST request to `http://www.boomlings.com/database/downloadGJLevel22.php` that contains: ``` gameVersion=21 binaryVersion=35 gdw=0 levelID=<level id> secret=<your secret> ``` Important to specify an empty `User-Agent` header otherwise Cloudflare will block us. curl example: `curl -X POST "http://www.boomlings.com/database/downloadGJLevel22.php" -d "gameVersion=21&binaryVersion=35&gdw=0&levelID=1389451&secret=XXXXXXX" -H 'User-Agent:'` ![Screenshot 2022-09-08 at 12 29 38](https://user-images.githubusercontent.com/99194003/189088170-9fee4f40-dd05-4daf-93f2-580d3411b0d9.png) ![Screenshot 2022-09-08 at 12 27 52](https://user-images.githubusercontent.com/99194003/189088581-19c09d51-b6be-4ad2-babc-675106c56d9a.png) #RobUseHTTPS
iwalfy commented 2022-09-08 06:13:06 -04:00 (Migrated from github.com)

And as far as I understand, the main problem is that you are blocked from the servers. Maybe in this case it is better to send all requests from the client side.

And as far as I understand, the main problem is that you are blocked from the servers. Maybe in this case it is better to send all requests from the client side.
Nadwey commented 2022-09-08 08:09:26 -04:00 (Migrated from github.com)

And as far as I understand, the main problem is that you are blocked from the servers. Maybe in this case it is better to send all requests from the client side.

You can't move requests to client side because of CORS policy (as far as I know)

> And as far as I understand, the main problem is that you are blocked from the servers. Maybe in this case it is better to send all requests from the client side. You can't move requests to client side because of CORS policy (as far as I know)
iwalfy commented 2022-09-08 12:00:07 -04:00 (Migrated from github.com)

What if you use a proxy to change the server address for each request?

What if you use a proxy to change the server address for each request?
masckmaster2007 commented 2022-09-21 11:32:15 -03:00 (Migrated from github.com)

@iwalfy One small note: I understand why you censored the secret, but it's just a word that's used and can find in:
https://docs.gd-programming.org/server/topics/secrets/

@iwalfy One small note: I understand why you censored the secret, but it's just a word that's used and can find in: https://docs.gd-programming.org/server/topics/secrets/
iAndyHD3 commented 2022-09-21 11:35:36 -03:00 (Migrated from github.com)

Another small note: it's easier to use gdbrowser locally than do all that stuff

Another small note: it's easier to use gdbrowser locally than do all that stuff
iwalfy commented 2022-09-21 12:09:42 -03:00 (Migrated from github.com)

@iwalfy One small note: I understand why you censored the secret, but it's just a word that's used and can find in: https://docs.gd-programming.org/server/topics/secrets/

I didn't know this at the time.

> @iwalfy One small note: I understand why you censored the secret, but it's just a word that's used and can find in: https://docs.gd-programming.org/server/topics/secrets/ I didn't know this at the time.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: serg2-mirrors/GDBrowser#263
No description provided.