darkSpyro

First my story

As always i was interested in the inner working of everything in this case including the skylanderrs characters.
and went on a personal Search and rescue for more info.
Eventually found out that sir "B.W" did the same and was stopped by Activision for these handelings.
I was never satisfied simply by the fact that his project would just drop dead.

Anyway's building forth on his basics
i created the ability to export the data of a Skylanders Character to a SEF file ( Skylander Exported File )
Including his/her Level, Money, Stats, Hat he/she is wearing, and all other data stored on the figurine.

And this combined with the ability to Re-import the data back into the figurine ( or another one )
I for many unnamed purposes have removed the ability to Maximize the statusses with one press of a button.

At this time i'm still in testing fase ( Although i did export a file and re-imported it without any problems )
Course I'll keep you guys updated if any updates do arrive.

But soon we will have the ability to share your Skylanders data with the world ( same as we see with many savegames )
With this info now known i would like to ask you guys to help me out here a bit.
namely with the following, Soon i will upload a file that i will make availeble for download that will only have the ability to export the .SEF files.
Your roles in this will be to export your figurines data to such a file and hand them to me to make research easier ( and with the file give me as much info on the skylander thats known like Level, Money, Hat that He/She is wearing, Heroics completed, Hero level, type of skylander, Name, all you can think of )
That way i can make a more complete database and therefore have a better working program.

i would like to thank you guys in advance for helping me or not ( soon i'll make the upload if enough guys like the idea )...

Over and out

Tsk Tsk Activision will not like what you are doing and may try to sue you or make you stop. JS

that i think i should disagree on

Cause local rulles state
Once something is bought it is to full ownership of person who bought it.
and can be used on any ways the person disires.

Also click through Eula's have no value here
plus weed is legal but thats just that

Thats pretty cool.

Are you building this from BW's source code or building it all new yourself?

Are the exports going to be in plain text easy to read or binary?

I wanted a program likle that for a game I'm trying to develop but all I want is too figure out what skylander is on the portal.

binary since al is based on his source code and im just reinventing the wheel just to say it like that
and learning c# and c++ while at it ( going off pretty well on this point since im already verry convertable with many other languages and they do have a lot of resemblances )
if the source was in one of my native languages i would have it done already


I wanted a program likle that for a game I'm trying to develop but all I want is too figure out what skylander is on the portal. alrady buildinmg the ability to chekc that and write the files with the skylanders names so

I've been trying to get someone who can program on a project like this for AGES. since b.w. released his original findings. maybe people will be pissed enough now that activision has continued to not supply skylanders for people to buy and screwed with dates so much. that maybe fooling around with the inner bits of skylanders wont be so taboo

get all this information, documentation, executable, whatever, into a .rar file, put it on a library system or cyber cafe, and run a torrent client in the background to host it.

share the torrent link of the upload on every single damn site you can think of.

activision's going to come after you pretty hard. remember that guy, what was his name , "rat"? from The Core? basically do what he did at the very end of the movie.

Quote: KiLLerBoy

that i think i should disagree on

Cause local rulles state
Once something is bought it is to full ownership of person who bought it.
and can be used on any ways the person disires.

Also click through Eula's have no value here
plus weed is legal but thats just that

also, this viewpoint is naive in the U.S legal system. you can be sued for basically anything that could be spun to be "hacking" in any way, and an idiot jury WILL convict you (because COMPUTRS R SCARY)

Warning: Your character web code and unique serial number will be exposed!

Exporter is done and works like a charm any file is exported to skylander.sef pleas change name to name of skylander and ad a readme with any info you can acquire as noted before

Just install driver and execute the exporter.exe
if it says cant find portal reinstall and make sure it's on and try again


no worries this doent change anything bout your skylander so there is no danger in it whatsoever

http://www.2shared.com/file/xadHZ1UC/Exporter.html

wth is this

Quote: spyrathedragon

wth is this

^ That's exactly what I was wondering earlier.

thats an exporter it exports a skylander to a binary file read original post for more info

Quote: KiLLerBoy

thats an exporter it exports a skylander to a binary file read original post for more info

Why don't you just buy the Skylanders yourself instead of asking people here to install something to their computers when they have no idea what it will do?

I strongly advise against installing this, people. You don't know this guy.

Quote: Himewad

I strongly advise against installing this, people. You don't know this guy.

THIS.

if you read the original post you will know what it will do ( and there is no need to install anything only the pc portal driver but you can get that anywhere i just included it to make things easier )

Plus a virustotal.com scan should pinpoint any problems?? agree and there are no problems whatsoever " Detection ratio: 0 / 42 "
course you can download and check it before doing anything ...

then just for starters let me introduce myself im Laurens Zalm A.K.A KiLLerBoy_001 / KiLLerBoy
I live in The netherlands.

26 years of age
known wel for reversed engineering anything i have from cars to software
just type "KiLLerBoy_001" in google 90 % of the hits are mine to learn more about me
believe that sums things up a bit

Quote: KiLLerBoy

if you read the original post you will know what it will do ( and there is no need to install anything only the pc portal driver but you can get that anywhere i just included it to make things easier )

Plus a virustotal.com scan should pinpoint any problems?? agree and there are no problems whatsoever " Detection ratio: 0 / 42 "
course you can download and check it before doing anything ...

That's what you SAY it does. How are we supposed to trust an anonymous online hacker?

Good luck, bubba.

Quote: KiLLerBoy

Plus a virustotal.com scan should pinpoint any problems?? agree and there are no problems whatsoever " Detection ratio: 0 / 42 "
course you can download and check it before doing anything ...

That may be true; however, we are still left with the following problems:

Quote: ransledsky

Warning: Your character web code and unique serial number will be exposed!

Quote: Himewad

You don't know this guy.

Quote: Himewad

How are we supposed to trust an anonymous online hacker?

Followed simply by the fact that Activision won't stand to have someone doing something like this. Why would anyone want to take part in that? It's a waste of time on the part of whoever wants to help you. This will get shut down or Activision will take legal action against you.

Quote: KiLLerBoy

then just for starters let me introduce myself im Laurens Zalm A.K.A KiLLerBoy_001 / KiLLerBoy
I live in The netherlands.

26 years of age
known wel for reversed engineering anything i have from cars to software
just type "KiLLerBoy_001" in google 90 % of the hits are mine to learn more about me
believe that sums things up a bit

Doesn't change the fact that I still don't know you, and I certainly don't trust you.

You could always run it in a sandbox program?

But still, I guess this would be an interesting thing to have a look at

Madel do you know the inner working or why i took so long to release an exporter from b.w source ( cause that did include that part ) so do you know what info is in the .sef file ?????


either way there is no way to stop the inevitable "try and find just a single famous PC game that isnt hacked or modded in any way"
Ill just know ill find some folowers and i do accept if people dont wanna join thats there choice and i'm fine with that.

I Only ask one thing dont go judging me for other people here "you can form your own opinion any time".


P.S: Now building a GUI around B.W Source thats where i need the more info for so i can edit hats on one click ( Even if i dont own them ) set my own amount of money etc etc

Quote: Madel

Quote: KiLLerBoy

Plus a virustotal.com scan should pinpoint any problems?? agree and there are no problems whatsoever " Detection ratio: 0 / 42 "
course you can download and check it before doing anything ...

That may be true; however, we are still left with the following problems:

Quote: ransledsky

Warning: Your character web code and unique serial number will be exposed!

Quote: Himewad

You don't know this guy.

Quote: Himewad

How are we supposed to trust an anonymous online hacker?

Followed simply by the fact that Activision won't stand to have someone doing something like this. Why would anyone want to take part in that? It's a waste of time on the part of whoever wants to help you. This will get shut down or Activision will take legal action against you.

I'm just going to quote my summary of the problems here and leave it at that.

I would NOT recommend installing or working with this program. It's a big waste of time. Activision will shut it down.

EDIT: Oh, and just for your information, I do know of modded games. Also, you'd be more convincing of your knowledge if you used proper grammar. I know you're from the Netherlands, but that's an eyesore. :l

as said before thats your opinion don't go forcing that on anybody else here
as I trully believe that one should be able to form their own opinions bout everything they do in live.

This gives you the characteristics of a dictator "Nobody likes a dictator"

Quote: KiLLerBoy

as said before thats your opinion don't go forcing that on anybody else here
as I trully believe that one should be able to form their own opinions bout everything they do in live.

This gives you the characteristics of a dictator "Nobody likes a dictator"

/facepalm

That's why I've used words like "advise" and "recommend."

Quote: Madel

Quote: KiLLerBoy

as said before thats your opinion don't go forcing that on anybody else here
as I trully believe that one should be able to form their own opinions bout everything they do in live.

This gives you the characteristics of a dictator "Nobody likes a dictator"

/facepalm

That's why I've used words like "advise" and "recommend."

lololol

Obviously Killer can't read.

Sorry i just seem to be an idiot from time to time


"Sometimes it seems to be all like that all the time"

You should include the code in the zip; that way the more tech savvy can compile themselves and be more confident that the code is not malicious.

Quote: chaosworrier

You should include the code in the zip; that way the more tech savvy can compile themselves and be more confident that the code is not malicious.

You never developped a program right ??

cause then you would no there is no use in releasing a beta code is there ?? ( it works as it should but not as i want it to A.T.M for that i need more resources )


anyway i made a icon for my tool
Now also my Avatar

"tool" just about sums it up.

Last I heard hacking/exploiting data is still illegal. It is not an "opinion."

Quote: Himewad

"tool" just about sums it up.

What are you saying??

It is an editing tool right ?

Quote: KiLLerBoy

Quote: Himewad

"tool" just about sums it up.

What are you saying??

It is an editing tool right ?

I don't even.

Quote: WickedRogue

Last I heard hacking/exploiting data is still illegal. It is not an "opinion."

Lets see. Im not editing data im just reading it atm. And yes i do know activision and toys for bob have copyright so does the writer of any given book but i can read that right.. ? As i can with anything i bought.

And afterall it's COPYrights im not copying anything. Now am i

^ You're copying data aren't you? That's an "anything".

Im reading data and storing it somewhere else thats more like make a backup of a dvd and watch that instead.
F.Y.I watching a backup is not illigal aslong as you have legally purchased the original. And that i did.

But you want other people to give you copied data. Interesting. Maybe you've devised an interesting way to shift the blame to anyone foolish enough to help you.

I also see that you said you aren't editing data, just reading it ATM. Kind of implies that you WILL be editing the data at some point.

Quote: KiLLerBoy

Quote: chaosworrier

You should include the code in the zip; that way the more tech savvy can compile themselves and be more confident that the code is not malicious.

You never developped a program right ??

cause then you would no there is no use in releasing a beta code is there ?? ( it works as it should but not as i want it to A.T.M for that i need more resources )


anyway i made a icon for my tool
Now also my Avatar

For the record, I have 20+ years of commercial software dev experience behind me.

Users frankly don't care how good the code is and just want to be sure that there is no malicious intent via a code inspection.

If you think the app is good enough to distribute then surely the codebase is good enough to also show, even if crappy/buggy/incomplete/etc...

Any response where you try to hide the code from scrutiny whilst expecting people to run it "on faith" merely looks like smoke and mirrors and deception. Sorry but that is how it looks...

Hey Killer...

I'm gonna save you a lot of time and energy.

I think the consensus is nobody wants to help you in your pointless exercise.

Every one of us here is cool with paying for our toys by legit means. We don't care to hack our portals. We don't care to hack our figures or to learn how to understand them better internally. I'd suggest you start playing the game and unlocking everything in the game. Then you'll have all the information you could need. And honestly, it's not that difficult to find the vast majority of the figures. I bet someone has probably already done what you've done anyways. You might consider scouring the net for info and work from there.

Good luck on your little adventure.

Edit: Can you do us a favor? Submit a text log of one of the .sef files with the data that you are extracting. I think we'd all love to see that it does indeed actually do what it says it does.

Quote: xerokills

Hey Killer...

I'm gonna save you a lot of time and energy.

I think the consensus is nobody wants to help you in your pointless exercise.

Every one of us here is cool with paying for our toys by legit means. We don't care to hack our portals. We don't care to hack our figures or to learn how to understand them better internally. I'd suggest you start playing the game and unlocking everything in the game. Then you'll have all the information you could need. And honestly, it's not that difficult to find the vast majority of the figures. I bet someone has probably already done what you've done anyways. You might consider scouring the net for info and work from there.

Good luck on your little adventure.

Edit: Can you do us a favor? Submit a text log of one of the .sef files with the data that you are extracting. I think we'd all love to see that it does indeed actually do what it says it does.

wrong wrong wrong.
i want to figure out my figures better. i want to know what they do and how they do it. i want to know exactly what they do. im not happy with the figures being released horribly late or in the "soon or later" time frame and then stores not even having them at all. i'm more than willing to help. and if you would do what you said instead of talking out of your butt, scour the net you will find nothing. even the wii cheat codes were pulled. activision has done their very best to keep any information from/staying out on the internet very long. only way i got b.w.'s files was by pulling a cached version from google. So I MYSELF will try this and report back on what it does and what it outputs. im not a fool, and i know my way around hex editing. so. yea.

Well...go for it exo. You're about to waste your time...but go for it.

you would not believe how much time ive wasted on skylanders.. at least this doesnt cost gas money. also its better than reading a lot of threads.

Quote: xerokills

Hey Killer...
....
Edit: Can you do us a favor? Submit a text log of one of the .sef files with the data that you are extracting. I think we'd all love to see that it does indeed actually do what it says it does.

Logs can be forged. Even if killerboy posted the source, he would be smart to not post Activision's encryption/decryption key without which your compiled executable would be non-functional anyways. His extractor executable is packed making it harder to analyze/disassemble/scan for virus. This is a red flag. At any rate if you share your character profile, online web code, serial number, you risk getting your figure banned or having someone register/stealing it! So is there any defined benefit to sharing your figure? No.

Why would someone want your figure data? Couple of possible questionable reasons: clone a figure without owning the real thing. With enough data, one might be able to extract the algorithm by which web codes/serials are generated and generate working codes without actually buying any figures.

No real Google cache was required for source code just eurasia.net i think it was

so, basically
Quote:

*dude makes way to share skylanders character information as a compact filetype
*offers it up for usage
*"HACKER"
*"DONT TRUST THIS GUY"
*"ANY PROOF HE HAS OTHERWISE IS HACKER STUFF, HACKERSSSSSSSSS"

protip, nothing i've seen in this thread seems to indicate this as any kind of malicious program
and there are many, many, very easy ways to gauge otherwise. such as running it within a virtual machine and watching what resources it attempts to access (protip, it won't)

might want to read more than the CNN headlines before you start prattling on about hacker this or that.

i for one, thank this killerboy for his contribution, however unwise it might be to share it in such....unencrypted...means
MAY OPEN SOURCE JESUS BLESS YOUR SOUL KILLERBOY, YOU DO TURRING'S WORK.

also your name is a little dumb, might want to consider changing your tag.

EDIT; also everyone seems to think this will allow people to copy toy codes and play characters they don't own ingame. this program doesn't do that, you'd need an RFID spoofer to pull that off (they're about $40 if you assemble one yourself from parts, it's a pretty fun project actually), unless i'm misinterpreting this

Just when you spin up your VM, remember to turn off NAT (or other config) for the NIC mapping, etc.

I am not saying that the code is malicious just to exercise temperance. After all, I left my low-level dev days behind me a fair while ago (hello nHibernate, Rhino Mocks, C#, etc) but I could still wrap up a tidy little payload if I really put my mind to it. I reckon you could watch the resource monitor like a hawk and still not notice. For example, a timed payload, etc.

I would simply prefer to do a quick code review to check what it does - after all, that is what I would hypothetically want to know, in any case...

I didn't think that data from one person's figure could be copied to that of another's, since I tried doing the same with two Ignitors (I actually wanted to swap the figures' data so the better painted one would have Flame of Soul) using BW's application. I'm pretty sure the "unique ID" part of the code is read-only.

And no, I won't be giving out my compilation of BW's editor. The figures aren't that hard to level, anyways.

my question would be if you could write the figure data to a fully read-writable RFID tag. one of the $2 ones you get online ($2 being rather expensive)

i tested the program, its just a recompile of skylanderseditor.zip except it has a more specific double click exe, makes the dump of the character, and gives a file name "skylander.sef" altho it seems he has a little bit different method of dumping the data. hex files from the same figure dont match. but it does have even the original error message that was in skylanderseditor (the checksum errors if you try to dump a new/fresh/reset character) so yea, didnt infect my virtual machine, didnt call out to anything, just auto dumps a file in his format.

you cant write a different characters dump to another character even the same character, theres a read protection on one of the bits thats important. but if you edit the other parts you can read/write those bits as long as you follow its encryption scheme and correct the checksums

osbor, some guy on a another site said he was trying that, but wasnt successful. if someone would write a driver for the skylanders portal or maybe using another RFID read/writer (they arent that expensive, like 50 dollars for a set) then a dumped character data could be just written to those tags. but everyone is scared to hack cause of activision or at least release their findings