PMGH Public Archive

.github/CODE_OF_CONDUCT.md

@@ -0,0 +1,25 @@
+# Citizen Code of Conduct
+
+Our goal was to improve Prodigy's security, not ruining the game for profit. We won't sell our hacks, or put ads.
+
+Our hacks will **always** be open-source, and free to use.
+
+---
+
+You may ***never***:
+
+- sell our hacks in any way shape or form
+- hide our hacks behind a paywall/subscribewall of any kind
+  - This includes adfly 😐
+- use our hacks to leak private information
+- use our hacks to steal user login information or tokens
+- claim ownership of our hacks (Just stop bragging about it 😠)
+- modify it slightly just to add your own ads 🤨
+
+If you're gonna talk about our hacks (on YouTube or other social media platforms), please please pretty please [credit us properly](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/blob/master/YOUTUBE_ATTRIBUTION.md).
+
+It hurts our souls when skids take credit for our hacks and don't even link us.
+
+---
+
+Last reminder that we are **volunteers**, and do not profit from this. We do this for *fun*, not for evil. Please don't spoil our fun.

.github/CONTRIBUTING.MD

@@ -0,0 +1,104 @@
+# Contributing
+
+Hacking Prodigy used to be as easy as `PIXI.game.prodigy.player.gold=999`, but now we need a whole team!
+
+If you'd like to join as an official collaborator, you can message us on [our official Discord server](https://discord.gg/XQDfbfq)!
+
+Additionally, read our [Code of Conduct](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/blob/master/.github/CODE_OF_CONDUCT.md) before continuing.
+
+---
+
+## The Goal of [PMGH](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking)
+
+Our main goal in this repository is to bring Prodigy's attention to their game's architecture.
+
+Most of the data stuff is handled on the client side, so hacking is as easy as changing a variable. No pwn needed!
+
+Since we've started this repository, Prodigy's security has improved by leaps and bounds, but the main issue is still the same;
+once you get to the player variable, you can easily change anything you want.
+
+Ideally everything would be handled server side. For example, arena points are already handled properly. The only way to increment arena points is by sending a "win" event, which is rate limited to once per minute.
+
+## Tasks
+
+There are lots of things to do! (Ranked from easiest to hardest)
+
+### Research
+
+As the name indicates, research. Research includes:
+
+- looking for new endpoints to mess around with
+- reading the Prodigy source extensively
+- reporting broken hacks
+- suggesting new hack ideas
+
+Requirements:
+
+- basic coding skills
+- basic understanding of what an API is (the bar is super low huh)
+- reading skills
+
+Anybody can do this! If you want to help with any of these, you can post your findings in [Discussions](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/discussions), or [our official Discord](https://discord.gg/XQDfbfq).
+
+### Typings
+
+Basically just typescript definitions for Prodigy objects. An understanding of how to implement the types is also necessary.
+
+Requirements:
+
+- lots of spare time
+
+If you make a PR with Typings, [Will](https://github.com/MelnCat) will will you into his Will will. <3
+
+### [Will's Cheat Menu](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/tree/master/willsCheatMenu)
+
+[Will's Cheat Menu](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/tree/master/willsCheatMenu)! Written in Typescript, it gives a visual cheat menu, with tons of handy dandy hacks in one place. No more copy pasting required!
+
+Requirements:
+
+- Javascript/Typescript knowledge
+- Basic knowledge of how to use the command line
+- Basic knowledge of Node.js/npm syntax
+- A good personality
+
+you can build it from `./willsCheatMenu` with `webpack`.
+
+### [Browser Extension](https://chrome.google.com/webstore/detail/prodigy-hacking-extension/gjabpajagbgoifbkflgojeojmnlmioea)
+
+We used to rely on the Chrome extension "Redirector", and "Anti-CSP", but due to some extra anti-cheats from Prodigy, we've decided to roll our own extension.
+
+The extension does a few things (only on Prodigy domains):
+
+- disable CSP, so we can inject our scripts
+- disable Prodigy's official game files, and inject our hacked files
+- hehehehehehe
+
+We usually don't need help with this, it almost never changes, When it does change, we usually need
+*extremely skilled* researchers to figure out the problem, and fix it.
+
+#### [P-NP](https://github.com/Prodigy-Hacking/P-NP) (aka Redirector)
+
+Redirector was made by [Will](https://github.com/MelnCat). Thanks, [Will](https://github.com/MelnCat)!
+
+It just edits the gamescript so we can bypass any clientside anti-cheats, and expose the special
+sauce objects we desire.
+
+[Redirector]((https://github.com/Prodigy-Hacking/P-NP)) is written in Typescript. It also comes in its own repository!
+
+To build:
+
+```cmd
+npm tsc
+```
+
+We usually don't require help with [Redirector](https://github.com/Prodigy-Hacking/P-NP), but it's pretty important to know it exists.
+
+Because we can edit the game script, we can also import external scripts, such as [WCM](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/tree/master/willsCheatMenu).
+
+## Your contributions are licensed under the [MPL 2.0 software license](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/blob/master/LICENSE)
+
+When you submit anything here, your contributions will be licensesd under [the MPL 2.0 license](https://www.mozilla.org/en-US/MPL/2.0/). Contact a collaborator if this is an issue to you.
+
+## We Develop with [GitHub](https://github.com/)
+
+We use [GitHub](https://github.com/) to host code, track [issues](https://github.com/Prodigy-Hacking/ProdigyMathGameHacking/issues) and feature requests, and provide you with this work.

.github/FUNDING.yml

@@ -0,0 +1 @@
+custom: ["https://discord.gg/XQDfbfq"]

.github/ISSUE_TEMPLATE/bug_report.md

@@ -0,0 +1,19 @@
+---
+name: Bug report
+about: Describe an issue
+title: "[BUG]"
+labels: Bug
+assignees: ''
+
+---
+
+***Description***:
+
+
+***Replication***:
+
+
+***Images***:
+
+
+***Additional Errors***:

.github/ISSUE_TEMPLATE/request-new-hack.md

@@ -0,0 +1,15 @@
+---
+name: Request New Hack
+about: Request a new hack!
+title: "[HR]"
+labels: 'enhancement,hack'
+assignees: ''
+
+---
+
+**Describe your hack:**
+<!-- Example: Membership Hack-->
+
+**(Optional) Additional information**
+
+**Have you made sure this hack isn't available yet?* (Yes/No)**

.github/pull_request_template.md

@@ -0,0 +1,9 @@
+## Description
+<!--
+Describe your PR here
+-->
+
+## Screenshots
+<!--
+If this PR touches the interface of anything in this repository, add screenshots here.
+-->

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,67 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+#
+# ******** NOTE ********
+# We have attempted to detect the languages in your repository. Please check
+# the `language` matrix defined below to confirm you have the correct set of
+# supported CodeQL languages.
+#
+name: "CodeQL"
+
+on:
+  push:
+    branches: [ master, masterf ]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ master ]
+  schedule:
+    - cron: '18 12 * * 3'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        language: [ 'javascript' ]
+        # CodeQL supports [ 'cpp', 'csharp', 'go', 'java', 'javascript', 'python' ]
+        # Learn more:
+        # https://docs.github.com/en/free-pro-team@latest/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#changing-the-languages-that-are-analyzed
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+        # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.vscode/PMGH.code-snippets

@@ -0,0 +1,23 @@
+{
+    "Create Hack": {
+        "scope": "typescript",
+        "prefix": "ch",
+        "body": [
+            "new Hack(category.$1, \"\", \"\").setClick(async () => {",
+            "    ",
+            "});"
+        ],
+        "description": "Create new hack",
+    },
+    "Create Toggler": {
+        "scope": "typescript",
+        "prefix": "ct",
+        "body": [
+            "new Toggler(category.$1, \"\", \"\").setEnabled(async () => {",
+            "    ",
+            "}).setDisabled(async() => {",
+            "    ",
+            "});"
+        ]
+    }
+}