Hacking Prodigy used to be as easy as PIXI.game.prodigy.player.gold=999, but now we need a whole team!
If you'd like to join as an official collaborator, you can message us on our official Discord server!
Additionally, read our (Code of Conduct) before continuing.
Our main goal in this repository is to bring Prodigy's attention to their game's architecture.
Most of the data stuff is handled on the client side, so hacking is as easy as changing a variable. No pwn needed!
Since we've started this repository, Prodigy's security has improved by leaps and bounds, but the main issue is still the same; once you get to the player variable, you can easily change anything you want.
Ideally everything would be handled server side. For example, arena points are already handled properly. The only way to increment arena points is by sending a "win" event, which is rate limited to once per minute.
There are lots of things to do! (Ranked from easiest to hardest)
As the name indicates, research. Research includes:
- looking for new endpoints to mess around with
- reading the Prodigy source extensively
- reporting broken hacks
- suggesting new hack ideas
Requirements:
- basic coding skills
- basic understanding of what an API is (the bar is super low huh)
- reading skills
Anybody can do this! If you want to help with any of these, you can post your findings in Discussions, or our official Discord.
Basically just typescript definitions for Prodigy objects. Pretty much grunt work.
Requirements:
- lots of spare time
If you make a PR with Typings, Will will will you into his Will will. <3
Will's Cheat Menu! Written in Typescript, it gives a visual cheat menu, with tons of handy dandy hacks in one place. No more copy pasting required!
Requirements:
- Extensive Javascript/Typescript knowledge
- A good personality
you can build it from ./willsCheatMenu with webpack.
We used to rely on the Chrome extension "Redirector", and "Anti-CSP", but due to some extra anti-cheats from Prodigy, we've decided to roll our own extension.
The extension does a few things (only on Prodigy domains):
- disable CSP, so we can inject our scripts
- disable Prodigy's official game files, and inject our hacked files
- hehehehehehe
We usually don't need help with this, it almost never changes, When it does change, we usually need extremely skilled researchers to figure out the problem, and fix it.
Redirector was made by Will. Thanks, Will!
It just edits the gamescript so we can bypass any clientside anti-cheats, and expose the special sauce objects we desire.
Redirector is written in Typescript. It also comes in its own repository!
To build:
tscWe usually don't require help with Redirector, but it's pretty important to know it exists.
Because we can edit the game script, we can also import external scripts, such as WCM.
When you submit anything here, your contributions will be licensesd under the MPL 2.0 license. Contact a collaborator if this is an issue to you.
We use GitHub to host code, track issues/feature requests, and provide you with this work.