Hacks for the everwing game.
The security of the today systems should be strong. We as users demand that the systems we use should be secure to protect our data. For educational reasons we try to see, how easy it is to change the system's data (like in this example Everwing Game's data). When a game is so unsecure, it makes a player's ingame achivements and items useless.
We use these cheat codes as an example of how a supposed well crafted game like Everwing, with fancy sprites and game modes, has no security at all. By using this cheats your account may be banned.
To apply the hacks you have to open the developer console of your browser.
Detailed guide with photos here.
To do that:
- Click F12 on the everwing game page (or, right click the page and select "inspect element")
- This will open the developer's tools on most major browsers. From here web developers tests and debug the web aplications they create. If your browser don't have dev tools, you can use firebug (https://getfirebug.com/)
- Click the "Console" tab if you are not already there
- The console tab is a javascript console. Here, we can write javascript code and run it on the active page.
- Click the down arrow next to the "top"
- On the drop down, sellect "index.html" (it should be on the bottom)
- This will set the active javascript window to the game window, so that the code we run will run on the game window and not on the messenger window.
Now paste any of the codes bollow to hack the game.
var names = ["fiona", "sophia", "coin", "magnet", "lenore", "jade", "arcana", "lyra", "trixie"];
for (var i = 0; i < names.length; i++) {
if(GC.app.mvc.models.CharactersModel.characters[names[i]].state == "locked")
GC.app.client.runFunction("purchaseCharacter", { characterID: names[i], isFree: true });
}Get a random sidekick
var types = ["smart", "common", "bronze", "silver", "gold", "magical", "legendary", "bossraid"];
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : types[Math.floor(Math.random() * types.length)]});Get a random event sidekick
var events = GC.app.client.schemaAPI.getTable("sidekicksEvents").rows;
var sidekickEvents = [];
for(var i = events.length - 1; i>=0; i--){
if (events[i].sidekicks) sidekickEvents.push(events[i].name);
}
if(sidekickEvents.length > 0){
GC.app.client.runFunction("sidekickEventGacha", {eventID : sidekickEvents[Math.floor(Math.random() * sidekickEvents.length)]});
}
else{console.log("No events.");}Get a smart sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "smart"});Get a common sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "common"});Get a bronze sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "bronze"});Get a silver sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "silver"});Get a gold sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "gold"});Get a magical sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "magical"});Get a legendary sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "legendary"});Get a mythic sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "mythic"});Get a bossraid sidekick
GC.app.client.runFunction("sidekickGacha", {isFree : true, gachaType : "bossraid"});First paste this function
var getSidekickById = function(id){
var index = -1;
var models = GC.app.client.schemaAPI.ledger.schemaManager.models
for (var i = 0; i < models.length; i++) {
if(models[i].name == "sidekicksEvents") index = i;
}
if(!models[index].hacked){
var realEvents = models[index];
var fakeEvents = {
hacked : true,
realEvents : realEvents,
id : "Table:sidekicksEvents",
name : "sidekicksEvents",
rowIDName : "name",
rows : [],
getRow : function(name){
for (var i = 0; i < this.rows.length; i++) {
if(this.rows[i].name == name) return this.rows[i];
}
}
};
fakeEvents.fakeEvent = {
"name":"the_hack_event",
"sidekicks":[{"id":"sidekick:FC00"}]
}
fakeEvents.setSidekick = function(id){
this.fakeEvent.sidekicks[0].id = "sidekick:" + id;
}
for (var i = 0; i < realEvents.rows.length; i++) {
fakeEvents.rows.push(realEvents.rows[i]);
}
fakeEvents.rows.push(fakeEvents.fakeEvent);
models[index] = fakeEvents;
}
models[index].setSidekick(id);
GC.app.client.runFunction("sidekickEventGacha", {eventID : "the_hack_event"}).then(function(){
var items = GC.app.client.stateAPI.getNewItems();
if(items && items.length > 0 && items[0].name == "sidekick:" + id){console.log("You got it");}
else {console.log("Error?");}
});
}And then call it with the id of the sidekick you want. For example to get Nuno (id WC23) I run the code
getSidekickById("WC23");You can find the full sidekick ID list in SidekickCodes.md
First apply this function
var getFreeEnergy = function(x){
if(GC.app.client.schemaManager.models[17]._frozen)
GC.app.client.schemaManager.models[17]._frozen = false;
if (GC.app.client.schemaAPI.getTable("raidEnergyShop").rows.length == 6) {
GC.app.client.schemaManager.models[17].rows = JSON.parse(JSON.stringify(GC.app.client.schemaManager.models[17].rows));
for(var i = 0; i < GC.app.client.schemaManager.models[17].rows.length; i++){
if(GC.app.client.schemaManager.models[17].rows[i].count == x)
break;
}
GC.app.client.schemaManager.models[17].rows.splice(i, 0, {
"id" : "item-free",
"icon" : "resources/images/game/base/item_energy.png",
"count" : x,
"cost" : 0,
"currency" : "trophies",
"bonus" : 0
});
} else {
GC.app.client.schemaAPI.getTable("raidEnergyShop").getRow("item-free").count = x;
}
GC.app.mvc.sendNotification("PurchaseEnergyCommand",{id: "item-free"});
}Then call it with any ammount you want, for example, if you want 10 energy, write
getFreeEnergy(10);First apply this function
var playFakeGame = function(data) {
// Fake game data
var data = data || {};
data.score = data.score || 10 + Math.round(Math.random()*10);
data.seconds = data.seconds || 10 + Math.round(Math.random()*10);
data.coins = data.coins || 0;
data.trophies = data.trophies || 0;
data.energy = data.energy || 0;
data.xp = data.xp || 0;
data.sidekick_xp = data.sidekick_xp || 0;
// Get sidekicks
var sidekicks = {};
var sidekicks_db = window.GC.app.gameView.sidekicksModel.sidekicksList;
for(var i=0; i<sidekicks_db.length; i++){
if(sidekicks_db[i].state == "equippedLeft"){sidekicks.left = sidekicks_db[i];}
else if(sidekicks_db[i].state == "equippedRight"){sidekicks.right = sidekicks_db[i];}
}
// App reference
var app = window.GC.app;
// Send command
app.mvc.commandMap.GamePlayedCommand.prototype.execute.apply({mvc :app.mvc,finishCommand : function(e, $){}},
[{
playerID : app.gameModel.player.id,
secondsElapsed : data.seconds,
killedBy : "Meteor SINGLE " + (Math.round(Math.random()*3) + 1),
background : "ocean",
score : data.score,
commonEarned : data.coins,
premiumEarned : data.trophies,
energyEarned : data.energy,
playerXP : data.xp,
sidekickXP : data.sidekick_xp,
sidekickLeftID : (sidekicks.left) ? sidekicks.left.id : null,
sidekickRightID : (sidekicks.right) ? sidekicks.right.id : null,
}]);
}Then call it with the amount of resources you need.
Get 15.000 coints
playFakeGame({coins : 15000});Get 1.500 trophies
playFakeGame({trophies : 1500});Get 9.999 player XP points
playFakeGame({xp : 9999});Get 9.999 sideckick XP points
playFakeGame({sidekick_xp : 9999});There are limits on the resources you can get, for example you can't get 999.999 coins with 1 fake game.