In-App Purchases


in-app purchase hack

Just like the name suggests, In-App purchase is a feature in smartphones or mobile device to buy products and services within the app. The best example for this is Games, where a user can buy Gems, Coins and all sorts of virtual items needed from the game app itself by paying money. In this post, I will describe how some games and apps are affected by in-app purchase fraud and how to prevent it.

Bypassing/Hacking In-App purchases.


While it sounds very convenient to get the items from the app itself,  In-App purchases can be manipulated and goods can be obtained without actually paying anything. This is made possible by hijacking the purchase process and making the app believe that a purchase was successful, while in reality, it isn't. There are some apps readily available for this.

CreeHack is one such Android app, and it helps to bypass In-App purchases from google play store. Using this app, one will be able to purchase all Coins, Gems, Levels, Lives etc for free and also make trial version apps to full version.

Working Methodology


All these apps contain an inbuilt free card, which can be used on Google Play. So whenever you attempt to buy something (Like gems, coins, life etc), creehack hijacks the process and completes the purchase with its inbuilt card. The actual request that was supposed to reach the server will get blocked at the device level by these apps. The result would be the user getting everything for free, without the need of spending any money.

Here you can see a demo of bypassing In-App purchases with CreeHack. It doesn't even require root access. Simply by installing the app and then opening the purchase tab of any app and tapping 'buy' would complete the purchase as shown in the screenshots. For a detailed tutorial and step by step instructions, refer this post.

Disclaimer/Warning: Hacking games/apps is strictly illegal and we do not promote it. Usage of such apps to obtain unfair advantage in apps might be harmful to your device and also punishable by law. I cannot be held responsible for what you do with suc apps. If you like the apps respect the developer and consider paying for apps.


Preventing In-App Purchase Fraud.


There are several ways to fight In-App purchase fraud. Based on how these purchase manipulation works, below steps can be implemented. This also should explain why apps like CreeHack doesn't work on certain games/apps.
  • Server Side Validation: This can be done by implementing purchase validation in server side in addition to local validation. Thus the good bought will be valid only after it gets processed through a cloud platform. Client based tricks might work but tricking the server would be much harder. Moreover this can be further made secure by validating the user purchase receipt with the purchase history from Google servers. This however is not completely secure. Game hackers can always come with servers side exploits or even a fake server itself. Server based games like Clash Of Clans already has many modes and even private servers. 
  • Prevent apps from running on rooted devices : Most of these In-App purchase tricks works only on rooted devices. By making the app not run on rooted devices can prevent the fraudulent activities to a certain extent. However non root hacking apps like CreeHack is also available these days. You can see a demo of how CreeHack works on Non-rooted device below. 
  • Upgrade App Billing Format: Apps like Freedom fakes Google billing format 2 or 3. Upgrading the app to the latest available Billing format will prevent this. This is why some apps don't work with CreeHack. 
  • Google Play/Apple licensing and security best practices: Adhering strictly to the timely security measures provided by the app platforms could prevent In-App purchase hacks. 
  • Enable Multiplayer Interaction: This is a good practice for server based games and acts as an added security measure. It is rather difficult to tamper multiple clients at once to forge virtual goods. 
These are some of the way in which apps get hacked and possible solutions for it. However games/apps can be manipulated by altering the local storage too. So in order to fight these fraudulent changes, devs can implement periodic validation of purchases and make use of analytics to monitor and flag potential cases of abuse.  

Also Check : 

Post a Comment

  1. Replies
    1. Depends on how you use it. It is actually meant for android developers,to test the in-app purchase feature's functionality. If it is coded badly it is vulnerable and they pay the price like this.

      Delete
    2. Does this work fro line play? Im a bit clueless if it takes any effect..

      Delete
    3. Yeah,does it work for line play?

      Delete
    4. Does it work for Dokkan battle

      Delete
    5. Doesnt work on any of my games

      Delete
    6. does it work on My Singing Monsters and other online games?

      Delete
    7. It doesn't work on my android.
      Can someone please give me advise

      Delete
    8. Does it work on Roblox?

      Delete
    9. Dude can you make it work in gunclub 3 XD if can it really help me

      Delete
    10. Dude can you make it work in gunclub 3 XD if can it really help me

      Delete
  2. hello. will this work for online chat apps where you have to buy points? like SayHi!

    Please let me know if it does. When i tried it says 'no internet connection.

    Thx

    engr.nerd@yahoo.com

    ReplyDelete
    Replies
    1. It depends on the app. Remember it can only bypass the 'in-app purchase' feature of apps. You cannot buy points in chat apps if it doesn't use that feature. Most of the chat apps uses server side validation to ensure security. In that case this trick will not work.

      Delete
    2. Mine doesnt work it won't buy anything if i press the purchases in all diverend apps

      Delete
    3. Hi does it work go respawndebles

      Delete
  3. Works for most of the games. Thanks

    ReplyDelete
  4. Does it work on clash royale?

    ReplyDelete
    Replies
    1. Doe it have in-app purchases? Then it will work. Try yourself

      Delete
  5. Does it work on clash royale?

    ReplyDelete
  6. it asks me for credit card number !!

    ReplyDelete
    Replies
    1. Which means that game or App is not hackable with creehack.

      Delete
  7. Doesn't work, and I've done all the steps correctly..?

    ReplyDelete
    Replies
    1. Try again with an older version of the app or use Freedom app method instead.

      Delete
    2. It doesn't work even I download older version

      Delete
    3. I don't buy anything in Shadow Fight 2 even I download folder version please help.

      Delete
  8. Does it work for mortal kombat x

    ReplyDelete
  9. It doest work on clash royale

    ReplyDelete
  10. Does it work even in rooted device because freedom is broken

    ReplyDelete
    Replies
    1. It works. Try with older version of playstore.

      Delete
  11. It asked for payment method either thru your mobile service provider or credit/debit card. Cannot proceed...
    Does not work!

    PLEASE DONT DOWNLOAD

    ReplyDelete
    Replies
    1. It works only for in app purchases. Not those involve server side online purchases. Installing old version of PlayStore also might help in some cases.

      Delete
  12. Does this need internet connection????And will this use up my money?????

    ReplyDelete
  13. please help, its not working, says error

    ReplyDelete
  14. Give more details of the error.

    ReplyDelete
  15. Give more details of the error.

    ReplyDelete
  16. What hacks can hack crisis action ?

    ReplyDelete
  17. I have recently downloaded this on my android and it doesn't work for any games. I would very much appreciate if I could get some help with this

    ReplyDelete
  18. Does it work on line play? I tried to buy the cash but nothing happen?

    ReplyDelete
  19. Does it work for lineplay? I tried shadow fight 2 but they ask me for my credit card number...?

    ReplyDelete
    Replies
    1. Then it probably won't work on line pay.

      Delete
  20. The 1.8 version is not working for me. Im using an lg risio btw

    ReplyDelete
  21. Does it work on clash of clans?

    ReplyDelete
  22. Does it work on nba mobile?

    ReplyDelete
  23. Does this work for Battle Camp?

    ReplyDelete
  24. When I attempt to download, I only receive a .text file? What am I doing wrong, or is this no longer available?

    ReplyDelete
  25. When I download I only get a .txt file. Is this still in operation?

    ReplyDelete
    Replies
    1. I have updated the link. Check it now.

      Delete
  26. does this work for the game Conquer Online?

    ReplyDelete
  27. Does it works on dream girlfriend?

    ReplyDelete
  28. Will it work if you have no payment method saved

    ReplyDelete
  29. Does it work on champ man 2016

    ReplyDelete
  30. Does it work on champ man 2016

    ReplyDelete
  31. How much battery does this drain. Also, how much data does the background use? I've already had problems with battery drain before (I do gaming and such), so just curious.

    ReplyDelete
  32. will this work with server based games such as kill shot bravo?

    ReplyDelete
  33. will this work with server based games?

    ReplyDelete
  34. will this work with server based games such as kill shot bravo?

    ReplyDelete
  35. Does it work on pokemon go ?

    ReplyDelete
  36. How do I know it didn't charge my account. I'm trying to use it for Pokemon go

    ReplyDelete
  37. Not working on World Conqueror 3 and Colrfeel+ app please help

    ReplyDelete
  38. Shadow fight 2 is in the list of hacked games but I keep on getting the payment methods.I made sure it's enabled but it still doesn't work. Please help

    ReplyDelete
  39. does it work on gold rush:empire gold ? i dont want it taking money from my account

    ReplyDelete
  40. Nice Blog Post .. Best Hacking Apps for Android 2017 are here Best Hacking Apps

    ReplyDelete
  41. All the download links arnt the apk just a useless file that wants me to open it in HTML or Browser

    ReplyDelete
  42. So basically if its a server based game it cannot be hacked?

    ReplyDelete
  43. If its a server based game i cant hack it?

    ReplyDelete
  44. Doesn't work. When I press enable and return to my startscreen and open app again it's disabled.

    ReplyDelete
  45. Doesn't work. When I enable it it just keeps disabling itself when I reopen the app. And tried purchasing it just shows my own payment method

    ReplyDelete
  46. Does it work for mobile strike?

    ReplyDelete
  47. Does. It work fir mobile strike?

    ReplyDelete
  48. Does it work for mobile strike?

    ReplyDelete
  49. Creehack is not popping when I purchase. It keeps on displaying the google play store in app purchase, not the creehack pop up.

    ReplyDelete
  50. It is not working. When I do the in app purchase, the google plag pop up is the only one i saw, not the creehack pop up.

    P.S. I enabled the creehack. I pressed the home button after I enabled it.

    ReplyDelete
  51. IT DOES NOT WORK ON SHADOW FIGHT 2!!!!!! SAYS CHOOSE DEBIT/CREDIT CARD OR USE CODE.HELP!!!!!!!

    ReplyDelete
  52. Says I need card CVC? Message me on kik punydany66 or snapchat danny72202

    ReplyDelete
  53. Payment succesful but its doesnt add gems or gold that i buy, and when i try to purchase again it got error " querying order items"

    ReplyDelete
  54. Hi does it work on server side apps like GOW and MS mobile strike.

    ReplyDelete
  55. Hi does it work on server side apps like GOW and MS mobile strike.

    ReplyDelete
  56. this is not working , its asking debit card or redeem code. please help me out. and the app is enabled in background . what to do now????

    ReplyDelete
  57. Does it work for racing rivals

    ReplyDelete
  58. It doesn't work for me. When I try to buy some coins in fun run for example, it requires a payment method. I tried to log out of Google play and still doesn't work. What should I do?

    ReplyDelete
  59. does it works for 8 ball pool?

    ReplyDelete
  60. Doesn't work don't waste time

    ReplyDelete
  61. does it work on evocreo before you ask yes there in ingame purchases

    ReplyDelete
  62. If u cant do what want in offline games try to downl9ad lucky patcher for android it will help hack all games but only 99%of the OFFLINE games so online games wont be hacked
    It never can be hacked it a server that we cant breach because if we want we have to get a cabel form the main pc to another pc to just have some ordnairy data and the ip last 2 lines dont read �� okey i wish i helped u
    To download.lucky patcher take this very very simple step:
    1- google it ��

    ReplyDelete
  63. If u cant do what want in offline games try to downl9ad lucky patcher for android it will help hack all games but only 99%of the OFFLINE games so online games wont be hacked
    It never can be hacked it a server that we cant breach because if we want we have to get a cabel form the main pc to another pc to just have some ordnairy data and the ip last 2 lines dont read �� okey i wish i helped u
    To download.lucky patcher take this very very simple step:
    1- google it ��

    ReplyDelete
  64. Hi. This hack work for dead trigger2 ?

    ReplyDelete
  65. Hi. This hack work for dead trigger2 ?

    ReplyDelete
  66. Can you update about games because shadow fight doesnt work

    ReplyDelete
  67. Downloaded. Tried it on township. Did not work. I did not get a free card option. Google play payment unsuccessful

    ReplyDelete
  68. Can unable the free payment in saga go?i love the game

    ReplyDelete
  69. does it will work on TEEN PATTI GOLD

    ReplyDelete
  70. This doesn't work on anything I've tried.

    List I've tried
    Asphalt 8
    Real racing 3
    Hitman sniper
    Panda pop
    Subway surf

    When I like continue. No free card pops up during the payment option. It just tells me to add a card/paypal account. I have cree enabled and running in the background.

    ReplyDelete
  71. When I press buy it shows credit or debit card. . What should I do

    ReplyDelete
  72. Can you get it for pokemon go coins

    ReplyDelete
  73. It works for Nba live mobile??

    ReplyDelete
  74. Does it work on plants vs zombies 2?

    ReplyDelete
  75. They asked me for a payment option what do I do?

    ReplyDelete
  76. They asked me for a payment option what do I do?

    ReplyDelete
  77. They asked me for a payment option what do I do?

    ReplyDelete
  78. Doesn't work :/ it says dragons: rise of berk but it doesn't give freecard as a payment option

    ReplyDelete
  79. does it work for blae of bttle ?

    ReplyDelete
  80. Can i use it in Arcane Legends, to purchase platinum?

    ReplyDelete
    Replies
    1. Please read the post fully. List of working apps are mentioned in the end.

      Delete
  81. Can you make it please work for Legion Of Heroes game

    ReplyDelete
    Replies
    1. Sorry,I did not code this app. Just sharing it. :)

      Delete
  82. Every time I try to use it won't work it disabled every Time imbtrying to use for summoners wsr

    ReplyDelete
  83. Not working in asphalt 8 nd nfs no limits and gunshi battle second war

    ReplyDelete
    Replies
    1. List of working apps are already mentioned in the post. It will work for only certain games. Take a look=> http://creehack.net/game_creehack.html

      Delete
    2. Only games listed there work? So how about walking dead road to survival?

      Delete
  84. Will it work on walking dead road to survival?

    ReplyDelete
  85. Will it work on walking dead road to survival

    ReplyDelete
  86. Does it work for sonic 4 episode 1 ?
    Plz help

    ReplyDelete
  87. Does it work for Sonic 4 Episode 1?

    ReplyDelete
  88. It asked the type of payment method what should I choose?

    ReplyDelete
  89. I tried but it not working at Shadow fight 2

    ReplyDelete
  90. Hello Bro,
    It's all working fine. I had never used this app as I was using Freedom & Lucky PAtcher.
    All are working fine & the same.
    I got really help from your post.
    I appreciate your work....

    Keep up the work.

    ReplyDelete
  91. First time trying Creehack and Worked for my games. For anyone flat out saying it's busted it's because you have to know atleast something about how to get free purchases. If not you'll just continue to sit there holding yourself.

    ReplyDelete
  92. First time trying Creehack and Worked for my games. For anyone flat out saying it's busted it's because you have to know atleast something about how to get free purchases. If not you'll just continue to sit there holding yourself.

    ReplyDelete
  93. Replies
    1. Link is given in the post itself. Read carefully.

      Delete
  94. Hi, I downloaded cree hack for my hay day game on Android lollipop but it asked for my credit card number, please note my device is not rooted

    ReplyDelete
  95. I need download link b'coz I am not finding it.....

    ReplyDelete

 
Top