I found a simple vulnerability to exploit in one of those "play flash games for coins" site. Essentially, it rewards you for achievements completed in the games and then it sends a post request that consists of username, achievement name, score, game id, and a key. The key is MD5(username+secret key+score).
I have actually already exploited this vulnerability manually and now I am making a small program that will exploit it automatically. All I need to do is get the secret key automatically. Currently I am using a .swf decompiler and manually getting the key. The key is always at the same place.
I have tried using a HEX editor, but when searching for the secret key (that I already found in the decompiler) it does not find anything. What am I doing wrong and how could I make my process more efficient?
I have actually already exploited this vulnerability manually and now I am making a small program that will exploit it automatically. All I need to do is get the secret key automatically. Currently I am using a .swf decompiler and manually getting the key. The key is always at the same place.
I have tried using a HEX editor, but when searching for the secret key (that I already found in the decompiler) it does not find anything. What am I doing wrong and how could I make my process more efficient?