In-App Purchases


in-app purchase hack

Just like the name suggests, In-App purchase is a feature in smartphones or mobile device to buy products and services within the app. The best example for this is Games, where a user can buy Gems, Coins and all sorts of virtual items needed from the game app itself by paying money. In this post, I will describe how some games and apps are affected by in-app purchase fraud and how to prevent it.

Bypassing/Hacking In-App purchases.


While it sounds very convenient to get the items from the app itself,  In-App purchases can be manipulated and goods can be obtained without actually paying anything. This is made possible by hijacking the purchase process and making the app believe that a purchase was successful, while in reality, it isn't. There are some apps readily available for this.

CreeHack is one such Android app, and it helps to bypass In-App purchases from google play store. Using this app, one will be able to purchase all Coins, Gems, Levels, Lives etc for free and also make trial version apps to full version.

Working Methodology


All these apps contain an inbuilt free card, which can be used on Google Play. So whenever you attempt to buy something (Like gems, coins, life etc), creehack hijacks the process and completes the purchase with its inbuilt card. The actual request that was supposed to reach the server will get blocked at the device level by these apps. The result would be the user getting everything for free, without the need of spending any money.

Here you can see a demo of bypassing In-App purchases with CreeHack. It doesn't even require root access. Simply by installing the app and then opening the purchase tab of any app and tapping 'buy' would complete the purchase as shown in the screenshots. For a detailed tutorial and step by step instructions, refer this post.

Disclaimer/Warning: Hacking games/apps is strictly illegal and we do not promote it. Usage of such apps to obtain unfair advantage in apps might be harmful to your device and also punishable by law. I cannot be held responsible for what you do with suc apps. If you like the apps respect the developer and consider paying for apps.


Preventing In-App Purchase Fraud.


There are several ways to fight In-App purchase fraud. Based on how these purchase manipulation works, below steps can be implemented. This also should explain why apps like CreeHack doesn't work on certain games/apps.
  • Server Side Validation: This can be done by implementing purchase validation in server side in addition to local validation. Thus the good bought will be valid only after it gets processed through a cloud platform. Client based tricks might work but tricking the server would be much harder. Moreover this can be further made secure by validating the user purchase receipt with the purchase history from Google servers. This however is not completely secure. Game hackers can always come with servers side exploits or even a fake server itself. Server based games like Clash Of Clans already has many modes and even private servers. 
  • Prevent apps from running on rooted devices : Most of these In-App purchase tricks works only on rooted devices. By making the app not run on rooted devices can prevent the fraudulent activities to a certain extent. However non root hacking apps like CreeHack is also available these days. You can see a demo of how CreeHack works on Non-rooted device below. 
  • Upgrade App Billing Format: Apps like Freedom fakes Google billing format 2 or 3. Upgrading the app to the latest available Billing format will prevent this. This is why some apps don't work with CreeHack. 
  • Google Play/Apple licensing and security best practices: Adhering strictly to the timely security measures provided by the app platforms could prevent In-App purchase hacks. 
  • Enable Multiplayer Interaction: This is a good practice for server based games and acts as an added security measure. It is rather difficult to tamper multiple clients at once to forge virtual goods. 
These are some of the way in which apps get hacked and possible solutions for it. However games/apps can be manipulated by altering the local storage too. So in order to fight these fraudulent changes, devs can implement periodic validation of purchases and make use of analytics to monitor and flag potential cases of abuse.  

Also Check : 

Post a Comment

  1. Replies
    1. Depends on how you use it. It is actually meant for android developers,to test the in-app purchase feature's functionality. If it is coded badly it is vulnerable and they pay the price like this.

      Delete
    2. Does this work fro line play? Im a bit clueless if it takes any effect..

      Delete
    3. Yeah,does it work for line play?

      Delete
    4. Does it work for Dokkan battle

      Delete
    5. does it work on My Singing Monsters and other online games?

      Delete
    6. It doesn't work on my android.
      Can someone please give me advise

      Delete
    7. Does it work on Roblox?

      Delete
    8. Dude can you make it work in gunclub 3 XD if can it really help me

      Delete
    9. Dude can you make it work in gunclub 3 XD if can it really help me

      Delete
  2. hello. will this work for online chat apps where you have to buy points? like SayHi!

    Please let me know if it does. When i tried it says 'no internet connection.

    Thx

    engr.nerd@yahoo.com

    ReplyDelete
    Replies
    1. It depends on the app. Remember it can only bypass the 'in-app purchase' feature of apps. You cannot buy points in chat apps if it doesn't use that feature. Most of the chat apps uses server side validation to ensure security. In that case this trick will not work.

      Delete
    2. Mine doesnt work it won't buy anything if i press the purchases in all diverend apps

      Delete
    3. Hi does it work go respawndebles

      Delete
  3. Works for most of the games. Thanks

    ReplyDelete
  4. Replies
    1. Doe it have in-app purchases? Then it will work. Try yourself

      Delete
  5. it asks me for credit card number !!

    ReplyDelete
    Replies
    1. Which means that game or App is not hackable with creehack.

      Delete
  6. Doesn't work, and I've done all the steps correctly..?

    ReplyDelete
    Replies
    1. Try again with an older version of the app or use Freedom app method instead.

      Delete
    2. It doesn't work even I download older version

      Delete
    3. I don't buy anything in Shadow Fight 2 even I download folder version please help.

      Delete
  7. Does it work for mortal kombat x

    ReplyDelete
  8. Does it work even in rooted device because freedom is broken

    ReplyDelete
    Replies
    1. It works. Try with older version of playstore.

      Delete
  9. It asked for payment method either thru your mobile service provider or credit/debit card. Cannot proceed...
    Does not work!

    PLEASE DONT DOWNLOAD

    ReplyDelete
    Replies
    1. It works only for in app purchases. Not those involve server side online purchases. Installing old version of PlayStore also might help in some cases.

      Delete
  10. Does this need internet connection????And will this use up my money?????

    ReplyDelete
    Replies
    1. Internet connection is recommended.

      Delete
  11. please help, its not working, says error

    ReplyDelete
  12. Give more details of the error.

    ReplyDelete
  13. Give more details of the error.

    ReplyDelete
  14. What hacks can hack crisis action ?

    ReplyDelete
  15. I have recently downloaded this on my android and it doesn't work for any games. I would very much appreciate if I could get some help with this

    ReplyDelete
  16. Does it work on line play? I tried to buy the cash but nothing happen?

    ReplyDelete
  17. Does it work for lineplay? I tried shadow fight 2 but they ask me for my credit card number...?

    ReplyDelete
    Replies
    1. Then it probably won't work on line pay.

      Delete
  18. The 1.8 version is not working for me. Im using an lg risio btw

    ReplyDelete
  19. Does it work on nba mobile?

    ReplyDelete
  20. Does this work for Battle Camp?

    ReplyDelete
  21. When I attempt to download, I only receive a .text file? What am I doing wrong, or is this no longer available?

    ReplyDelete
  22. When I download I only get a .txt file. Is this still in operation?

    ReplyDelete
    Replies
    1. I have updated the link. Check it now.

      Delete
  23. does this work for the game Conquer Online?

    ReplyDelete
  24. Does it works on dream girlfriend?

    ReplyDelete
  25. Will it work if you have no payment method saved

    ReplyDelete
  26. Does it work on champ man 2016

    ReplyDelete
  27. How much battery does this drain. Also, how much data does the background use? I've already had problems with battery drain before (I do gaming and such), so just curious.

    ReplyDelete
  28. will this work with server based games such as kill shot bravo?

    ReplyDelete
  29. will this work with server based games?

    ReplyDelete
  30. will this work with server based games such as kill shot bravo?

    ReplyDelete
  31. Does it work on pokemon go ?

    ReplyDelete
  32. How do I know it didn't charge my account. I'm trying to use it for Pokemon go

    ReplyDelete
  33. Not working on World Conqueror 3 and Colrfeel+ app please help

    ReplyDelete
  34. Shadow fight 2 is in the list of hacked games but I keep on getting the payment methods.I made sure it's enabled but it still doesn't work. Please help

    ReplyDelete
  35. does it work on gold rush:empire gold ? i dont want it taking money from my account

    ReplyDelete
  36. Nice Blog Post .. Best Hacking Apps for Android 2017 are here Best Hacking Apps

    ReplyDelete
  37. All the download links arnt the apk just a useless file that wants me to open it in HTML or Browser

    ReplyDelete
  38. So basically if its a server based game it cannot be hacked?

    ReplyDelete
  39. If its a server based game i cant hack it?

    ReplyDelete
  40. Doesn't work. When I press enable and return to my startscreen and open app again it's disabled.

    ReplyDelete
  41. Doesn't work. When I enable it it just keeps disabling itself when I reopen the app. And tried purchasing it just shows my own payment method

    ReplyDelete
  42. Does it work for mobile strike?

    ReplyDelete
  43. Creehack is not popping when I purchase. It keeps on displaying the google play store in app purchase, not the creehack pop up.

    ReplyDelete
  44. It is not working. When I do the in app purchase, the google plag pop up is the only one i saw, not the creehack pop up.

    P.S. I enabled the creehack. I pressed the home button after I enabled it.

    ReplyDelete
  45. IT DOES NOT WORK ON SHADOW FIGHT 2!!!!!! SAYS CHOOSE DEBIT/CREDIT CARD OR USE CODE.HELP!!!!!!!

    ReplyDelete
  46. Says I need card CVC? Message me on kik punydany66 or snapchat danny72202

    ReplyDelete
  47. Payment succesful but its doesnt add gems or gold that i buy, and when i try to purchase again it got error " querying order items"

    ReplyDelete
  48. Hi does it work on server side apps like GOW and MS mobile strike.

    ReplyDelete
  49. Hi does it work on server side apps like GOW and MS mobile strike.

    ReplyDelete
  50. this is not working , its asking debit card or redeem code. please help me out. and the app is enabled in background . what to do now????

    ReplyDelete
  51. Does it work for racing rivals

    ReplyDelete
  52. It doesn't work for me. When I try to buy some coins in fun run for example, it requires a payment method. I tried to log out of Google play and still doesn't work. What should I do?

    ReplyDelete
  53. does it works for 8 ball pool?

    ReplyDelete
  54. Doesn't work don't waste time

    ReplyDelete
  55. does it work on evocreo before you ask yes there in ingame purchases

    ReplyDelete
  56. If u cant do what want in offline games try to downl9ad lucky patcher for android it will help hack all games but only 99%of the OFFLINE games so online games wont be hacked
    It never can be hacked it a server that we cant breach because if we want we have to get a cabel form the main pc to another pc to just have some ordnairy data and the ip last 2 lines dont read �� okey i wish i helped u
    To download.lucky patcher take this very very simple step:
    1- google it ��

    ReplyDelete
  57. If u cant do what want in offline games try to downl9ad lucky patcher for android it will help hack all games but only 99%of the OFFLINE games so online games wont be hacked
    It never can be hacked it a server that we cant breach because if we want we have to get a cabel form the main pc to another pc to just have some ordnairy data and the ip last 2 lines dont read �� okey i wish i helped u
    To download.lucky patcher take this very very simple step:
    1- google it ��

    ReplyDelete
  58. Hi. This hack work for dead trigger2 ?

    ReplyDelete
  59. Hi. This hack work for dead trigger2 ?

    ReplyDelete
  60. Can you update about games because shadow fight doesnt work

    ReplyDelete
  61. Downloaded. Tried it on township. Did not work. I did not get a free card option. Google play payment unsuccessful

    ReplyDelete
  62. Can unable the free payment in saga go?i love the game

    ReplyDelete
  63. does it will work on TEEN PATTI GOLD

    ReplyDelete
  64. This doesn't work on anything I've tried.

    List I've tried
    Asphalt 8
    Real racing 3
    Hitman sniper
    Panda pop
    Subway surf

    When I like continue. No free card pops up during the payment option. It just tells me to add a card/paypal account. I have cree enabled and running in the background.

    ReplyDelete
  65. When I press buy it shows credit or debit card. . What should I do

    ReplyDelete
  66. Can you get it for pokemon go coins

    ReplyDelete
  67. It works for Nba live mobile??

    ReplyDelete
  68. Does it work on plants vs zombies 2?

    ReplyDelete
  69. They asked me for a payment option what do I do?

    ReplyDelete
  70. They asked me for a payment option what do I do?

    ReplyDelete
  71. They asked me for a payment option what do I do?

    ReplyDelete
  72. Doesn't work :/ it says dragons: rise of berk but it doesn't give freecard as a payment option

    ReplyDelete
  73. does it work for blae of bttle ?

    ReplyDelete
  74. Can i use it in Arcane Legends, to purchase platinum?

    ReplyDelete
    Replies
    1. Please read the post fully. List of working apps are mentioned in the end.

      Delete
  75. Can you make it please work for Legion Of Heroes game

    ReplyDelete
    Replies
    1. Sorry,I did not code this app. Just sharing it. :)

      Delete
  76. Every time I try to use it won't work it disabled every Time imbtrying to use for summoners wsr

    ReplyDelete
  77. Not working in asphalt 8 nd nfs no limits and gunshi battle second war

    ReplyDelete
    Replies
    1. List of working apps are already mentioned in the post. It will work for only certain games. Take a look=> http://creehack.net/game_creehack.html

      Delete
    2. Only games listed there work? So how about walking dead road to survival?

      Delete
  78. Will it work on walking dead road to survival?

    ReplyDelete
  79. Will it work on walking dead road to survival

    ReplyDelete
  80. Does it work for sonic 4 episode 1 ?
    Plz help

    ReplyDelete
  81. Does it work for Sonic 4 Episode 1?

    ReplyDelete
  82. It asked the type of payment method what should I choose?

    ReplyDelete
  83. I tried but it not working at Shadow fight 2

    ReplyDelete
  84. Hello Bro,
    It's all working fine. I had never used this app as I was using Freedom & Lucky PAtcher.
    All are working fine & the same.
    I got really help from your post.
    I appreciate your work....

    Keep up the work.

    ReplyDelete
  85. First time trying Creehack and Worked for my games. For anyone flat out saying it's busted it's because you have to know atleast something about how to get free purchases. If not you'll just continue to sit there holding yourself.

    ReplyDelete
  86. First time trying Creehack and Worked for my games. For anyone flat out saying it's busted it's because you have to know atleast something about how to get free purchases. If not you'll just continue to sit there holding yourself.

    ReplyDelete
  87. Replies
    1. Link is given in the post itself. Read carefully.

      Delete
  88. Hi, I downloaded cree hack for my hay day game on Android lollipop but it asked for my credit card number, please note my device is not rooted

    ReplyDelete
  89. I need download link b'coz I am not finding it.....

    ReplyDelete
    Replies
    1. Read the post carefully. Download link is right there.

      Delete

 
Top