Upon finding a vulnerability within a casino's system, I also noticed something else...the casino cheating. http://vimeo.com/110040994 (password: dreamland). Made a video last night demonstrating that even when I can isolate the cards and give myself the best possible scenario, the game will always manufacture a losing situation. Normal game play would never pick this kind of thing up as there are too many card possibilities but since I was able to isolate the cards I wanted, it magnified the cheating. The "cheating code" is probably executed under many different circumstances and games on their site but the video shows it isolated under just one game, bet denomination and bonus round in order to show it at work.
An inside look to an online casino cheating
- Thread starter Elliot305
- Start date
Very true. Fortunately for me, provably fair casinos still have weaknesses just like any other casino. It's not so much about altering the cards or outcomes of the games, but rather the game functionality and sequence (i.e., using game functions that should be disabled or resetting the entire game to be played again, etc.)
Syzpe
Registered Member
- Oct 25, 2014
- 81
- 111
First off it's certainly a fascinating find that exploit, so well done.
But it makes sense that systems ''cheat'' in this way. There is very little regulation in online gambling and so while the systems do pay out on occasion, it's always in the houses favor by a steep margin. They can control their profits.
To be fair, real casinos are not far off. The games are always designed in the houses favor - they do have to be winnable but that certainly doesn't mean the odds aren't staked!
Online Casinos are just a seedy bunch - thats why for online gambling I stick to betting on real world events.
But it makes sense that systems ''cheat'' in this way. There is very little regulation in online gambling and so while the systems do pay out on occasion, it's always in the houses favor by a steep margin. They can control their profits.
To be fair, real casinos are not far off. The games are always designed in the houses favor - they do have to be winnable but that certainly doesn't mean the odds aren't staked!
Online Casinos are just a seedy bunch - thats why for online gambling I stick to betting on real world events.
TrafficWizard
Junior Member
- Aug 22, 2014
- 164
- 29
Nice find OP ! Tho don't mess or submit it there is no point - back in days I was playing around with poker and online roulette and I did reversing on few casino clients ALL were riged (talking about roullete) poker one was not it's people vs people not people vs house.
House always win ! back in day I reported it and got banned and my funds were gone.
House always win ! back in day I reported it and got banned and my funds were gone.
ItsBlinkHere
Regular Member
- Apr 27, 2014
- 408
- 150
Yup...systems that cheat like that need to be exploited.
Ricky Roma
Regular Member
- Sep 23, 2011
- 296
- 397
Wow great find! When you intercept response with fiddler and abort session, is it registered on their server? Can they see that many responses are aborted?
Also did you tried to modify response and directly get #3 without waiting for right card? IF you can send modified response what about putting #2?
BTW this reminds me a bit of this movie: http://www.youtube.com/watch?v=HAz_oUxUuDg
Also did you tried to modify response and directly get #3 without waiting for right card? IF you can send modified response what about putting #2?
BTW this reminds me a bit of this movie: http://www.youtube.com/watch?v=HAz_oUxUuDg
HoNeYBiRD
Elite Member
- May 1, 2009
- 10,187
- 12,580
which still can be bought lol
Well I do a lot of different techniques and aborting the session is just one of them. That particular example I call the "Skip." To answer your questions, it may register on their server as an aborted session, but it probably doesn't since it's a side bonus game and their server gives me a new session altogether. I've done techniques where I've played games only using fiddler and was able to play beyond what the interface showed for options. This included depleting the entire deck of cards to isolate the last few (kind of like card counting I suppose) or using game functions well past their intended limits. In some of those instances the casinos were able to see my actions even though I wasn't using the interface at all. But by that time it was already too late for them since the "damage" was already done. That's why forming correct deployment and exit strategies is very important for executing exploits...to catch them when they're not looking.
As for modifying actual game results such as switching the 3 to a 2, well, that's a whole other ballgame and most casinos don't allow that unless they really expose themselves. As such, I came up with techniques that dealt with manipulating game functionality and game structure rather than the cards themselves. A lot of casinos are weak in these areas. The end result is the same...I have the advantage instead of the casino.
Last edited:
ZennoBlaster
Senior Member
- Jan 17, 2014
- 1,047
- 324
Time and money.
ShadeDream
BANNED
- Nov 27, 2008
- 2,296
- 5,536
And this is why I do not gamble. Unfortunately I don't have the skills to exploit.
I'm sure it must be worthwhile to you if you're willing to waste money like that?
I'm sure it must be worthwhile to you if you're willing to waste money like that?
hatblackguy
Regular Member
- Jun 8, 2011
- 257
- 64
I dunno why but this come to me at no surprise, its good to let those who gamble know of this.
Its worth it monetary speaking if I find something, lol. But intellectually its always worth it.
I wonder how many douchebags are on BHW hating when someone is sharing something in the LOUNGE! hmm, I see a couple already.
Wilson Grant Fisk
Elite Member
- Nov 10, 2012
- 15,677
- 46,846
Downloads Fiddler, then calls himself Exploit Specialist Extraordinaire LMAO
Even a script kiddie has more sense than to post this stuff on a PUBLIC board.