In-App Purchases


in-app purchase hack

Just like the name suggests, In-App purchase is a feature in smartphones or mobile device to buy products and services within the app. The best example for this is Games, where a user can buy Gems, Coins and all sorts of virtual items needed from the game app itself by paying money. In this post, I will describe how some games and apps are affected by in-app purchase fraud and how to prevent it.

Bypassing/Hacking In-App purchases.


While it sounds very convenient to get the items from the app itself,  In-App purchases can be manipulated and goods can be obtained without actually paying anything. This is made possible by hijacking the purchase process and making the app believe that a purchase was successful, while in reality, it isn't. There are some apps readily available for this.

CreeHack is one such Android app, and it helps to bypass In-App purchases from google play store. Using this app, one will be able to purchase all Coins, Gems, Levels, Lives etc for free and also make trial version apps to full version.

Working Methodology


All these apps contain an inbuilt free card, which can be used on Google Play. So whenever you attempt to buy something (Like gems, coins, life etc), creehack hijacks the process and completes the purchase with its inbuilt card. The actual request that was supposed to reach the server will get blocked at the device level by these apps. The result would be the user getting everything for free, without the need of spending any money.

Here you can see a demo of bypassing In-App purchases with CreeHack. It doesn't even require root access. Simply by installing the app and then opening the purchase tab of any app and tapping 'buy' would complete the purchase as shown in the screenshots. For a detailed tutorial and step by step instructions, refer this post.

Disclaimer/Warning: Hacking games/apps is strictly illegal and we do not promote it. Usage of such apps to obtain unfair advantage in apps might be harmful to your device and also punishable by law. I cannot be held responsible for what you do with suc apps. If you like the apps respect the developer and consider paying for apps.


Preventing In-App Purchase Fraud.


There are several ways to fight In-App purchase fraud. Based on how these purchase manipulation works, below steps can be implemented. This also should explain why apps like CreeHack doesn't work on certain games/apps.
  • Server Side Validation: This can be done by implementing purchase validation in server side in addition to local validation. Thus the good bought will be valid only after it gets processed through a cloud platform. Client based tricks might work but tricking the server would be much harder. Moreover this can be further made secure by validating the user purchase receipt with the purchase history from Google servers. This however is not completely secure. Game hackers can always come with servers side exploits or even a fake server itself. Server based games like Clash Of Clans already has many modes and even private servers. 
  • Prevent apps from running on rooted devices : Most of these In-App purchase tricks works only on rooted devices. By making the app not run on rooted devices can prevent the fraudulent activities to a certain extent. However non root hacking apps like CreeHack is also available these days. You can see a demo of how CreeHack works on Non-rooted device below. 
  • Upgrade App Billing Format: Apps like Freedom fakes Google billing format 2 or 3. Upgrading the app to the latest available Billing format will prevent this. This is why some apps don't work with CreeHack. 
  • Google Play/Apple licensing and security best practices: Adhering strictly to the timely security measures provided by the app platforms could prevent In-App purchase hacks. 
  • Enable Multiplayer Interaction: This is a good practice for server based games and acts as an added security measure. It is rather difficult to tamper multiple clients at once to forge virtual goods. 
These are some of the way in which apps get hacked and possible solutions for it. However games/apps can be manipulated by altering the local storage too. So in order to fight these fraudulent changes, devs can implement periodic validation of purchases and make use of analytics to monitor and flag potential cases of abuse.  

Also Check : 

Post a Comment

  1. Replies
    1. Depends on how you use it. It is actually meant for android developers,to test the in-app purchase feature's functionality. If it is coded badly it is vulnerable and they pay the price like this.

      Delete
    2. Does this work fro line play? Im a bit clueless if it takes any effect..

      Delete
    3. Yeah,does it work for line play?

      Delete
    4. Does it work for Dokkan battle

      Delete
    5. does it work on My Singing Monsters and other online games?

      Delete
    6. It doesn't work on my android.
      Can someone please give me advise

      Delete
    7. Does it work on Roblox?

      Delete
    8. Dude can you make it work in gunclub 3 XD if can it really help me

      Delete
    9. Dude can you make it work in gunclub 3 XD if can it really help me

      Delete
  2. hello. will this work for online chat apps where you have to buy points? like SayHi!

    Please let me know if it does. When i tried it says 'no internet connection.

    Thx

    engr.nerd@yahoo.com

    ReplyDelete
    Replies
    1. It depends on the app. Remember it can only bypass the 'in-app purchase' feature of apps. You cannot buy points in chat apps if it doesn't use that feature. Most of the chat apps uses server side validation to ensure security. In that case this trick will not work.

      Delete
    2. Mine doesnt work it won't buy anything if i press the purchases in all diverend apps

      Delete
    3. Hi does it work go respawndebles

      Delete
  3. Works for most of the games. Thanks

    ReplyDelete
  4. Replies
    1. Doe it have in-app purchases? Then it will work. Try yourself

      Delete
  5. it asks me for credit card number !!

    ReplyDelete
    Replies
    1. Which means that game or App is not hackable with creehack.

      Delete
  6. Doesn't work, and I've done all the steps correctly..?

    ReplyDelete
    Replies
    1. Try again with an older version of the app or use Freedom app method instead.

      Delete
    2. It doesn't work even I download older version

      Delete
    3. I don't buy anything in Shadow Fight 2 even I download folder version please help.

      Delete
  7. Does it work for mortal kombat x

    ReplyDelete
  8. Does it work even in rooted device because freedom is broken

    ReplyDelete
    Replies
    1. It works. Try with older version of playstore.

      Delete
  9. It asked for payment method either thru your mobile service provider or credit/debit card. Cannot proceed...
    Does not work!

    PLEASE DONT DOWNLOAD

    ReplyDelete
    Replies
    1. It works only for in app purchases. Not those involve server side online purchases. Installing old version of PlayStore also might help in some cases.

      Delete
  10. Does this need internet connection????And will this use up my money?????

    ReplyDelete
  11. please help, its not working, says error

    ReplyDelete
  12. Give more details of the error.

    ReplyDelete
  13. Give more details of the error.

    ReplyDelete
  14. What hacks can hack crisis action ?

    ReplyDelete
  15. I have recently downloaded this on my android and it doesn't work for any games. I would very much appreciate if I could get some help with this

    ReplyDelete
  16. Does it work on line play? I tried to buy the cash but nothing happen?

    ReplyDelete
  17. Does it work for lineplay? I tried shadow fight 2 but they ask me for my credit card number...?

    ReplyDelete
    Replies
    1. Then it probably won't work on line pay.

      Delete
  18. The 1.8 version is not working for me. Im using an lg risio btw

    ReplyDelete
  19. Does it work on clash of clans?

    ReplyDelete
  20. Does it work on nba mobile?

    ReplyDelete
  21. Does this work for Battle Camp?

    ReplyDelete
  22. When I attempt to download, I only receive a .text file? What am I doing wrong, or is this no longer available?

    ReplyDelete
  23. When I download I only get a .txt file. Is this still in operation?

    ReplyDelete
  24. does this work for the game Conquer Online?

    ReplyDelete
  25. Does it works on dream girlfriend?

    ReplyDelete
  26. Will it work if you have no payment method saved

    ReplyDelete
  27. Does it work on champ man 2016

    ReplyDelete
  28. Does it work on champ man 2016

    ReplyDelete
  29. How much battery does this drain. Also, how much data does the background use? I've already had problems with battery drain before (I do gaming and such), so just curious.

    ReplyDelete
  30. will this work with server based games such as kill shot bravo?

    ReplyDelete
  31. will this work with server based games?

    ReplyDelete
  32. will this work with server based games such as kill shot bravo?

    ReplyDelete
  33. Does it work on pokemon go ?

    ReplyDelete
  34. How do I know it didn't charge my account. I'm trying to use it for Pokemon go

    ReplyDelete
  35. Not working on World Conqueror 3 and Colrfeel+ app please help

    ReplyDelete
  36. Shadow fight 2 is in the list of hacked games but I keep on getting the payment methods.I made sure it's enabled but it still doesn't work. Please help

    ReplyDelete
  37. does it work on gold rush:empire gold ? i dont want it taking money from my account

    ReplyDelete
  38. Nice Blog Post .. Best Hacking Apps for Android 2017 are here Best Hacking Apps

    ReplyDelete
  39. All the download links arnt the apk just a useless file that wants me to open it in HTML or Browser

    ReplyDelete
  40. So basically if its a server based game it cannot be hacked?

    ReplyDelete
  41. If its a server based game i cant hack it?

    ReplyDelete
  42. Doesn't work. When I press enable and return to my startscreen and open app again it's disabled.

    ReplyDelete
  43. Doesn't work. When I enable it it just keeps disabling itself when I reopen the app. And tried purchasing it just shows my own payment method

    ReplyDelete
  44. Does it work for mobile strike?

    ReplyDelete
  45. Does. It work fir mobile strike?

    ReplyDelete
  46. Does it work for mobile strike?

    ReplyDelete
  47. Creehack is not popping when I purchase. It keeps on displaying the google play store in app purchase, not the creehack pop up.

    ReplyDelete
  48. It is not working. When I do the in app purchase, the google plag pop up is the only one i saw, not the creehack pop up.

    P.S. I enabled the creehack. I pressed the home button after I enabled it.

    ReplyDelete
  49. IT DOES NOT WORK ON SHADOW FIGHT 2!!!!!! SAYS CHOOSE DEBIT/CREDIT CARD OR USE CODE.HELP!!!!!!!

    ReplyDelete
  50. Says I need card CVC? Message me on kik punydany66 or snapchat danny72202

    ReplyDelete
  51. Payment succesful but its doesnt add gems or gold that i buy, and when i try to purchase again it got error " querying order items"

    ReplyDelete
  52. Hi does it work on server side apps like GOW and MS mobile strike.

    ReplyDelete
  53. Hi does it work on server side apps like GOW and MS mobile strike.

    ReplyDelete
  54. this is not working , its asking debit card or redeem code. please help me out. and the app is enabled in background . what to do now????

    ReplyDelete
  55. Does it work for racing rivals

    ReplyDelete
  56. It doesn't work for me. When I try to buy some coins in fun run for example, it requires a payment method. I tried to log out of Google play and still doesn't work. What should I do?

    ReplyDelete
  57. does it works for 8 ball pool?

    ReplyDelete
  58. Doesn't work don't waste time

    ReplyDelete
  59. does it work on evocreo before you ask yes there in ingame purchases

    ReplyDelete
  60. If u cant do what want in offline games try to downl9ad lucky patcher for android it will help hack all games but only 99%of the OFFLINE games so online games wont be hacked
    It never can be hacked it a server that we cant breach because if we want we have to get a cabel form the main pc to another pc to just have some ordnairy data and the ip last 2 lines dont read �� okey i wish i helped u
    To download.lucky patcher take this very very simple step:
    1- google it ��

    ReplyDelete
  61. If u cant do what want in offline games try to downl9ad lucky patcher for android it will help hack all games but only 99%of the OFFLINE games so online games wont be hacked
    It never can be hacked it a server that we cant breach because if we want we have to get a cabel form the main pc to another pc to just have some ordnairy data and the ip last 2 lines dont read �� okey i wish i helped u
    To download.lucky patcher take this very very simple step:
    1- google it ��

    ReplyDelete
  62. Hi. This hack work for dead trigger2 ?

    ReplyDelete
  63. Hi. This hack work for dead trigger2 ?

    ReplyDelete
  64. Can you update about games because shadow fight doesnt work

    ReplyDelete
  65. Downloaded. Tried it on township. Did not work. I did not get a free card option. Google play payment unsuccessful

    ReplyDelete
  66. Can unable the free payment in saga go?i love the game

    ReplyDelete
  67. does it will work on TEEN PATTI GOLD

    ReplyDelete
  68. This doesn't work on anything I've tried.

    List I've tried
    Asphalt 8
    Real racing 3
    Hitman sniper
    Panda pop
    Subway surf

    When I like continue. No free card pops up during the payment option. It just tells me to add a card/paypal account. I have cree enabled and running in the background.

    ReplyDelete
  69. When I press buy it shows credit or debit card. . What should I do

    ReplyDelete
  70. Can you get it for pokemon go coins

    ReplyDelete
  71. It works for Nba live mobile??

    ReplyDelete
  72. Does it work on plants vs zombies 2?

    ReplyDelete
  73. They asked me for a payment option what do I do?

    ReplyDelete
  74. They asked me for a payment option what do I do?

    ReplyDelete
  75. They asked me for a payment option what do I do?

    ReplyDelete
  76. Doesn't work :/ it says dragons: rise of berk but it doesn't give freecard as a payment option

    ReplyDelete
  77. does it work for blae of bttle ?

    ReplyDelete
  78. Can i use it in Arcane Legends, to purchase platinum?

    ReplyDelete
    Replies
    1. Please read the post fully. List of working apps are mentioned in the end.

      Delete
  79. Can you make it please work for Legion Of Heroes game

    ReplyDelete
    Replies
    1. Sorry,I did not code this app. Just sharing it. :)

      Delete
  80. Every time I try to use it won't work it disabled every Time imbtrying to use for summoners wsr

    ReplyDelete
  81. Not working in asphalt 8 nd nfs no limits and gunshi battle second war

    ReplyDelete
    Replies
    1. List of working apps are already mentioned in the post. It will work for only certain games. Take a look=> http://creehack.net/game_creehack.html

      Delete
    2. Only games listed there work? So how about walking dead road to survival?

      Delete
  82. Will it work on walking dead road to survival?

    ReplyDelete
  83. Will it work on walking dead road to survival

    ReplyDelete
  84. Does it work for sonic 4 episode 1 ?
    Plz help

    ReplyDelete
  85. Does it work for Sonic 4 Episode 1?

    ReplyDelete
  86. It asked the type of payment method what should I choose?

    ReplyDelete
  87. I tried but it not working at Shadow fight 2

    ReplyDelete
  88. Hello Bro,
    It's all working fine. I had never used this app as I was using Freedom & Lucky PAtcher.
    All are working fine & the same.
    I got really help from your post.
    I appreciate your work....

    Keep up the work.

    ReplyDelete
  89. First time trying Creehack and Worked for my games. For anyone flat out saying it's busted it's because you have to know atleast something about how to get free purchases. If not you'll just continue to sit there holding yourself.

    ReplyDelete
  90. First time trying Creehack and Worked for my games. For anyone flat out saying it's busted it's because you have to know atleast something about how to get free purchases. If not you'll just continue to sit there holding yourself.

    ReplyDelete
  91. Replies
    1. Link is given in the post itself. Read carefully.

      Delete
  92. Hi, I downloaded cree hack for my hay day game on Android lollipop but it asked for my credit card number, please note my device is not rooted

    ReplyDelete
  93. I need download link b'coz I am not finding it.....

    ReplyDelete

 
Top