u/__chum__

I have noticed playing gallipoli that a lot of players don't really get that silhouetteing is a thing, which is fair cuz its not intuitive.

Basically this is kind of a PSA.

Don't try to snipe, or stand in front of, open sky or something in the background that will provide a high contrast between you and whatever is behind you.

It makes you trivially easy to look for and shoot, so try to avoid being places that do this too much. I will see many snipers sit on rooftops and such, but by doing so silhouetteing thsemselves against the sky behind.

So, reverse engineering is not my area of expertise.

Regardless, I'm currently playing around with a particular application (a game) and testing it's security, so that if I find flaws, I can disclose them to the developer. (the solo dev does not have time to test these things on their own, and i'd like to help)

Getting it to run through mitmproxy, I was able to find it makes GET requests to a specific domain to check information on which users are patrons that support the project and those that are free users. It does this once when it starts up.

I was then able to set up a simple web server locally, then edited /etc/hosts to resolve the domain the application is trying to get information from to my computer locally (127.0.0.1) instead. Using ncat and some other tools, I was able to reroute the application's requests from localhost:443 to localhost:8090, my web server.

My thinking is that if I can respond to the application from my web server with a response formatted as it expects but with my testing user ID inserted into the list, someone could access patron content for free in theory, which would be a major bug.

The issue is, I can't seem to get the application to downgrade to HTTP, so I'm having problems making the application accept my webserver, because I'm presuming the application requires an HTTPS connection.

My question for any more experienced reverse engineers out there, is how would you go about this? Do I have the wrong idea (reverse engineering is not my area of expertise at all)? Or is there a way to accomplish this i'm not seeing. (and also, what are other common issues I could test for)

I'm fairly competent myself in other areas of hacking, just thought I'd ask here.