That is a packet, well its data. You inject that data from your PS3's IP to their Servers IP when you need to and it will give you super data, I would have to examine this further but you never know it could be true, and look @ packet data all that ascii stuff is shit and UNRELIABLE.

the thing most people dont think about is that people dont know doing simple mods to a packet could have a WHOLE different effect, did you know their so easily exploitable but people dont know it such as the exploit where you sniff the ICS data and sniff that it will send STUN packets when testing your connection on the PS3 and the packets will reveal the RAM in the packets because the connection becomes confused and hopeless and sends the wrong data so in this case it basically does the same, corrupt a chunk of the data and the server becomes confused and messes with your values.

Ill look into this.




ff is SUCH an amazing value in this type of the world because it makes it negative and if the server catches hold of that its the same of a god damn lag switch used for boosting, the server Capotes and gives you a nice high value, setting anything too high goes negative, anything too low goes high negative.

I bet I know how they patched it, either by changing the packet it sends and correcting it, in which case you would need to find a new way OR they just checked the unsigned integers value and made sure it wasn't past "so value" now in this case I would suggest looking @ the checksum which I think for UDP its the last 32bits.

never mind I checked the checksum is generally in the 16-31 bit range so look around there, I was thinking where it ends oops. Look Like I might to get to have some fun soon.

You can change the config in one of the packets "thumbstick_default" to what ever you like thats how the ufo came back on cod4 by .invictus. i tought him that ive been using packets for ages.

T.I.P (The independent packet)

i call it the golden packet this is were i got my imfamous score from there is a glitchy packet with disrupted information in it its never in the same place 2wice so look for it im still trying to find it im coming back.

Okay heres the thing I theory packet injection is 10000000% possible, look @ my host guide that uses packets to inject, rapid fire can be done by injection of packets etc. The thing is WHERE IS THE DAMN proof that striking gadder was infact Treyarch or the claimed ore real QF WAS IW, wheres the DAMN PROOF! Thats speculation so I am SICK AND TIRED of hearing it as a fact, its a theory NOT a fact theres a difference. Unless, IW comes out saying they put that account on top then it could of have really been this guy, IW doesn't seem like the people that would put a "bot" on the top and then just remove it later on, does it really honestly matter with the #1 score, #2-#1000+ are pretty much ALL boosters so what not make the top 10 accounts by IW? See my point? Unless there is solid proof that either it was infact injection or it was IW we will just have to guess.

I am going to place my bet saying it was injection, knowing that packet injection is real and works then I will have to say the leaderboard stuff could have really been done, now by this so claimed QF on these forums? Maybe, maybe not I dont know. Believe me I have experience in this stuff been around it for quite some time, its packets and their there for someone to come along and mod, just like code.

Think what you want to think I dont care, I just think its REALLY getting out of hand seeing everyone claiming everything as a damn fact when its either a theory or their idea, if its not official by IW then it could of well been that guy. Sure you may think its fishy he wont add on his old account but people want their privacy. Look into Tonic's injection videos for Socom confrontation people dont believe it all the time but I was there and I know tonic pretty well.

Think what you want to think, its just a value.

You are going to have to build a raw packet and edit it with that data. And oh btw I discussed the checksum with the unsigned values back on the first few pages. Packet injection is real but you HAVE to remember the checksum(usually) for UDP that would be in the 16-31 bit range, look in there and there should be the data you want to crack and figure out. If your doing something that sends text like with a taunt or vote(some games) then we you modify the values it SHOULD be the exact length it was before, packets can have a crazy checksum or a simple one. Sfo files DO have some sort of a checksum being that the padding and total data cannot be larger than 3kb. I am sure I have more on this but I just woke up so I am still somewhat sleepy.

@whoever asked about is this like PSP hacking? Well somewhat yes, myself, NoEffex and Tonic have done it on the PSP just like QF did so Ill give you an example and you MIGHT be able to understand?

This is sending and loading Quantum's packet data.

    

-addiu sp, sp, -30 <--- // 0x27bdffd0 = -30 //Preserves 30 bytes of data on the stack

sw a0, $0000(sp)//preserves data on the stack for how ever many bytes we need(in this case 30, packets count their hex in another way by the 10 offset, I did 4) 

sw a1, $0004(sp)//preserves data on the stack for further use with offset

sw a2, $0008(sp)//preserves data on the stack

sw a3, $000C(sp)//preserves data on the stack

sw t0, $0010(sp)//preserves data on the stack

sw t1, $0014(sp)//preserves data on the stack

sw t2, $0018(sp)//preserves data on the stack

sw s0, $001C(sp) //we need a saved register to hold data after a jal

sw ra, $0020(sp) //we need to save ra because we will use a jal

lui a0, $08D0//loads the first half of the data 08D0

addiu a0, a0, $44D8//adds that data back into the argument register to give the value 44D8

ori a1, zero, $0050//loads the data 00000050 

addiu a2, zero, $FFF1//adds the negative data ff-1

ori a3, zero, $0004//adds four to the data in a3

ori t0, zero, $0002//makes the value activate with the data 0x00000002

lui t1, $08FF // QF's data is retrieved at 0x08FF0000

addu s0, t1, zero //we copy t1 to s0

jal $088EE67C // go to packet setup

ori t2, zero, $0001 //Boolean 

jal $0890153C <--- //go to our packet sending function for the leaderboards

addu a3, s0, zero <--- //we copy s0 to a3

lw a0, $0000(sp)//Adds the data in 'so' register back into the stack

lw a1, $0004(sp)//Adds the data in 'so' register back into the stack

lw a2, $0008(sp)//Adds the data in 'so' register back into the stack

lw a3, $000C(sp)//Adds the data in 'so' register back into the stack

lw t0, $0010(sp)//Adds the data in 'so' register back into the stack

lw t1, $0014(sp)//Adds the data in 'so' register back into the stack

lw t2, $0018(sp)//Adds the data in 'so' register back into the stack

lw s0, $001C(sp)//Adds the data in 'so' register back into the stack

lw ra, $0020(sp) // return our registers to its original data

jr ra//returns all other data not contained in 'so' registers

addiu sp, sp, $0030 // 0x27bdff0030 //adds the data we subtracted back into the stack and packet data



#QuantumForce's Packet //NOT all of it, just some as its big

0x08FF0000 0x00e0188a//actually in mips were looking @ a jal here

0x08FF0004 0x1f8c001f //his data

0x08FF0008 0x00e0188a//Ill end it here

Help much? More to come!

Here's the only hint you will get from me Work it Out!

The Authorization Packet where QuantumForce Put Your username

    0000  00 e0 18 8a 1f 8c 00 1f  a7 f9 31 e1 08 00 45 00   ........ ..1...E.

0010  00 98 51 6a 00 00 40 11  6b 37 c0 a8 00 50 3f f1   ..Qj..@. k7...P?.

0020  bc ca e2 09 07 d5 00 84  a0 5e 0e 07 64 65 7a 69   ........ .^..Quan

0030  72 65 64 00 00 00 00 00  00 00 00 00 64 65 7a 69   tumForce..... ....

0040  72 65 64 00 49 57 34 20  4d 50 20 31 2e 32 20 62   .IW4  MP 1.2 b

0050  75 69 6c 64 20 35 30 38  20 6e 69 67 68 74 6c 79   uild 508  nightly

0060  20 57 65 64 20 4e 6f 76  20 31 31 20 32 30 30 39    Wed Nov  11 2009

0070  20 30 37 3a 31 32 3a 33  36 50 4d 20 70 73 33 00    07:12:3 6PM ps3.

0080  6d 70 5f 73 75 62 62 61  73 65 00 44 b9 5f 01 90   mp_subba se.D._..

0090  f0 71 84 04 d0 6d 80 cd  1b 3c ca 01 00 00 00 00   .q...m.. .<......

00a0  00 00 01 5c 41 7d                                  ...\A}           

   

The exploit score packet that i used "PATCHED" you have to find accuracy or kills or wins

    .à.Š.Œ..§ù1á..E.

..|¢..@.>pÀ¨.j?ñ

¼ÊÄÅ.Õ.ù–½..Quan

tumForce....Play

er.IW4 MP 1.2 bu

ild 508 nightly 

Wed Nov 11 2009 

07:12:36PM ps3..

...........!5^1E

rror: Unknown me

nu command 'roun

d' in menu_xboxl

ive:null).....

!5^1Error: Unkno

wn menu command 

',' in menu_xbox

live:null)....

.!5^1Error: Unkn

own menu command

 'awardCount' in

 menu_xboxlive::

(null).....!5^1E

rror: Unknown me

nu command ',' i

n menu_xboxlive:

null).....!5^1

Error: Unknown m

enu command '0' 

in menu_xboxlive

:null).....!5^

1Error: Unknown 

menu command ''

 in menu_xboxliv

e:null)..

Btw the score its patch only acc and kills can be done and wins

Now i'm not sure whether this is much use to your or not, but every little helps. Basically, before Sizzle- was number 1 in kills and score, i noticed him sitting at the bottom of the wins leaderboard with no rank and negative wins. Now as mentioned in the thread, this could be one of his packets tested but didn't give the result which he wanted, in fact the opposite!

people i think i found a way to inject it download hex editor neo.all the numbers mach up i just dont no how to put it in.this is it i no it message me for details

people i think i found a way to inject it download hex editor neo.all the numbers mach up i just dont no how to put it in.this is it i no it message me for details