When you’re on HTTPS, the server sends you an ID card and the encrypted content based on the ID (that you can’t fake). The first one, the most important, and I can’t believe I’m saying this… the server communication is made on an insecure https channel. There are two failures in term of security. So, if you are able to replace these codes with all values possible for SVL… then you have unlocked every survival modes and received that much Fight Money. The server answers “ OK, Here’s your account balance and unlocked items” and the game notifies the user with “ You’ve received 10k FM and some colors”.
As a recall, the exploit published by multiple users on reddit, with a video tutorial, unlocks all colors and gives around 1 million FightMoney on your account even if you are on PS4! How does the exploit work?īasically, when you finish a survival game, the g ame sends to the server some codes to say “ I finished Easy Survival with Ken in Story Costume” (something like SVL0003FF00,SVL10030100, the 3 means Ken, the 01 means story costume). So I took a closer look at this Fight Money exploit that Capcom has warned us about today.
