CityVille Exploit, How To Get Free Items (Method 1, Using Charles Proxy)

CityVille exploit, free items, method 1: 
How to get free CityVille items.


credits: unknown person who discovered the exploit.
tools: Charles proxy, a browser.
disclaimer: implement following steps at your own risk.


important! Have dummy CityVille accounts. (to be used as receivers of the requests you sent.)
important! Make sure Charles is proxying your browser.

In tutorial described here, we will change an energy_3 request to a lm_pearltower request. The request will be sent to your dummy neighbors.

This is first method. There is also second alternative method (using Chrome), with the same result. 



PART I
(1) in Charles, run Tools | Rewrite menu, to open Rewrite Settings dialog.

(click image to open full size)

(2,3) in dialog, check Enable Rewrite, click Add button.

(click image to open full size)

(4) give your new setting a name, whatever name you like.
(5) after creating a new setting, in the Locations pane, click Add button.
(6) fill in location data:

• protocol = http
• host = fb-?.cityville.zynga.com
• path = /request.php

Click OK.


(7) add a new rule, in the Rules pane click Add button.

(click image to open full size)

(8a) select Type = Body
(8b) check on Response
(8c) fill in Match value (which will be rewritten) = energy_3
(note: you can also use other item, like permits etc.)


(8d) fill in replace-value to replace energy_3, this is your FREE ITEM code.
example in the picture is lm_pearltower (landmark building)
(8e) check Replace All.
Click OK.
(9) Click Apply button, and (10) OK button.

(click image to open full size)

In the right bottom corner (status bar) of Charles, you should see a Rewrite text, indicating that this feature is ON/enable.

after above steps, Charles is ready to be used with Rewrite feature is turned on/enabled.


When you run any http connections in browser, everytime Charles meets a match word "energy_3" in the response-body of fb-?.cityville.zynga.com, it will replace "energy_3" with "lm_pearltower"


note: you can always change "lm_pearltower" with any other item code.
unfortunately, only items of these type are working: 
residence, business, municipal, landmark, decoration, storage, zooEnclosure.


all of the other types: energy_7, energy_12, all collection items, dobber items, etc. are NOT working.
zoo's animals (decoration) are working.


PART II
(A) Now, open your browser, make sure Charles is listening to the browser.
(B) Log in to your main account, close CV game if opened.
(C) into browser's Address bar, enter and run this URL (copy-paste):

http://apps.facebook.com/cityville/request.php?action=default&itemName=energy_3&view=app&ref=&requestType=level_up

(click image to open full size)

(D) after browser finishes the connection, look at Charles, as seen in picture below:

(click image to open full size)

In the Charles' Overview pane, you should see a text:

Notes: "Rewrite Tool  body match "energy_3" replacement "lm_pearltower"

If you do not see this text, then you simply fail.


(E) if you succeed, in the browser select your dummy neighbors.


WARNING: Select only your dummy neighbors which is owned by yourself. Do not trust anybody other than yourself.
Many has been banned, because they sent requests to random neighbors, and then were reported to Z by those jealous neighbors.


(F) after making sure that you select only safe and correct dummy neighbors, you can click on the dark-blue Send Help Request button in browser's page.


Let the browser finishes its connection.
After browser complete its task, in Charles there will be a "fb-client-0.cityville.zynga.com/request.php" node, with a URL contains the item-code (in this case = lm_pearltower).

(click image to open full size)

If you want to send another item request, go back in Charles, and edit the Rewrite setting.
To edit a rule, double-click on the rule.
Change "lm_pearltower" to another item code. Click OK, Apply, then repeat steps A-F.

(click image to open full size)

Newest items, their codes and pictures can be inspected in wikia plugin from CityVille bot,
or this page: http://code8888.blogspot.com/p/cityville-item-code.html

Remember, there's a 30 requests limit a day for CityVille request. You can send request to  the same neighbor once a day (once in 24 hours).


After finish with all items, now last important step:
TURN OFF/DISABLE the Rewrite feature in Charles. Do not forget to do this, because you don't want to mess other Charles proxying/debugging processes.

(click image to open full size)

After turn off the rewrite, you can now close Charles.


Redeeming your free items:
Log out your main account, and go open your dummies in browser (which were you selected as receivers in the above steps).
Open CityVille game, and wait for Message Center to open. Click all the appropriate Help them out buttons.


an example picture with Garden Cottage (res_springstone, 1 million coins, 700 population)

(click image to open full size)

You should get a success message "You helped them out!"
If you get no message or error message then you fail. This maybe caused by you've requested a not-working item, or you have a connection problem, or.. Z has already patched this exploit.

After receiving all requests in all dummy neighbors, now go back to your main account. Your free items are in the Inventory.

Please do not show grediness, cheat only expensive/cash items. If you have enough coin or cash I recommend you to buy the items directly from CityVille game, to minimize this kind of naughty action.


Cheat the exploit at your own risk. Put a strict safety rules about neighboring by yourself, or you get banned due to be reported. Will be patched soon by Z, as usual.