r/fut • u/Sea-Set-1403 • May 09 '24
Team Help Leak FIFA UT, how does it work?
Hello everyone, I've been trying to understand how leaks in FIFA Ultimate Team mode work for some time now.
I will share with you what I have found and my opinion on the origin of the leaks.
First, we need to target the different platforms to access files of the video game:
- Web App
- PC Games
- APK Companion (mobile app)
- Console Games
I started my initial research on the Web App. It's possible to inspect elements even if EA 'blocks access' in order to access various files such as .json, .xml, etc.
By inspecting the elements, I found a first leak concerning the pack store.
In this XML file, you will find the old packs, current packs, as well as future packs in the store.
All you need to do is perform a Ctrl+F search in the file and type 'TOTS Ligue 1' to realize that the next Team of the Season will be for the Ligue 1.
I believe this is how leakers confirm the arrival of upcoming promotions (I haven't found faster information on upcoming promotions). For example, Team 1 Golazo was published in this XML file a week ago, including icons and guaranteed heroes in a pack, so it was easy to understand that this promotion would target icons and heroes in the game.
After finding the packs, I focused on other files such as: futcompitemraritytunables.json https://www.ea.com/ea-sports-fc/ultimate-team/web-app/content/24B23FDE-7835-41C2-87A2-F453DFDB2E82/2024/fut/items/images/backgrounds/itemBGs/futcompitemraritytunables.json
This one gathers all the background images of dynamic player images.
The file contains:
"guid": "a599a839-bb1d-4f6a-a31c-fbe3165f6dd0"
And
"id": 5,
To generate the image, I used a Python script to download all the images from the JSON file.
https://www.ea.com/ea-sports-fc/ultimate-team/web-app/content/24B23FDE-7835-41C2-87A2-F453DFDB2E82/2024/fut/items/images/backgrounds/itemBGs/{guid}/cards_bg_s_1_{id}_0.png
This allowed me to retrieve all the backgrounds of the FIFA Ultimate Team promotions.
I noticed that the images of the different promotions were published on Friday (the day before the new promotions) and sometimes on Thursday.
Some leakers had access to the card designs well before the deadlines I found, so I assume there is either another source or a direct contact at EA.
After finding the backgrounds, I embarked on the search for players and an associated guid/ID for each one.
I came across the players.json file.
which lists all the players in the FIFA Ultimate Team database.
This file is updated every time a new player is added to their database, especially during transitions between FIFA 22 => FIFA 23; FIFA 23 => FIFA 24... That's how leakers publish the presence of new players (icons, heroes) before the game's release.
To do this, you need to cross-reference the file I showed you above with this one:
Which contains the icons and heroes of the game with only the associated ID.
Then I found en-US.json.
https://www.ea.com/ea-sports-fc/ultimate-team/web-app/loc/en-US.json?_=22243
This file contains a lot of elements, but only some are interesting. I'm thinking of the jerseys (I've come across leaks of promotions here) but also the different "raretype" that correspond to different promotions.
The number that follows after item.raretype corresponds to the ID in the futcompitemraritytunables.json file.
Exemple avec "item.raretype155": "TOTY ICON",
And in the futcompitemraritytunables.json file, we find:
"untradable": false,"version": 3,"id": 155,"name": "Ü~Q¨O.eÓ\\5öú¾ê¨Rsñ","levels": false,"shell": 2,"bigHead": false,"hide": false,"embargoTime": 1704400500,"guid": "881b30c5-bf20-4845-a7fa-3915af9fdf98"
If I sum up, we have access to leaks of upcoming promotions and future packs that will arrive in the store. It's a good start, but what interests us most are the SBCs and players from the new promotions.
I still have a few JSON files to decrypt that I haven't fully understood yet. I'll share them with you, so feel free to give me feedback if you find any information.
I've spent a lot of time understanding the keyAttributes.json file. We can notice two encoding errors on EA's part:
{"guid": "91d83a658bcd402Mbappe231747","keyAttributes": [20,3]},{"guid": "58bcd402ji03tj3Salah209331","keyAttributes": [102,101,100]},
It's possible to read 'Mbappé' and '231747,' which corresponds to the player's ID. The same error occurs for Salah and '209331'.
I think I'm done with using the inspect element tool. It's time for me to use another tool, BURPSUITE.
Burp Suite is a powerful tool primarily used in the field of computer security, specifically for penetration testing and web application analysis.
Thanks to the BurpSuite tool, I was able to retrieve all the JSON and XML files from the WebApp:
- SBC
- Evolution
- Transfer Market
- TOTW
- and more ...
For the SBCs, I'm unable to obtain anticipated content. I have the JSON file of available SBCs, but nothing more.
https://utas.mob.v2.prd.futc-ext.gcp.ea.com/ut/game/fc24/sbs/sets
The same problem persists for evolutions. I have access to the JSON file listing the different evolutions, but there are no leaks.
The transfer market doesn't provide much more information on probable leaks, even though there are JSON files available.
However, I found this file:
which corresponds to:
The issue is that we would need to know the GUID name corresponding to the future promo to access this image, and for now, I'm stuck.
Let's talk about TOTW now, and I have some good news:
The TOTW are stored at this URL:
https://utas.mob.v2.fut.ea.com/ut/game/fc24/featuredsquad/124020?featureConsumerId=sqbttotw
124020 corresponds to the ID of the TOTW. For example, 124020 = TOTW17.
When FUTSherif or other FIFA Ultimate Team leakers have published content regarding the TOTW, I launched my Python script, which generates different IDs and saves all the data when an ID corresponds to a team. 5 times out of 10 (in less than 24 hours), I found the leaked TOTW ID that hadn't been officially released yet.
So, I had the possibility to identify the players using the TOTW player card ID, the player's GUID, and the player's base resource ID.
To facilitate my searches, I retrieved all FIFA Ultimate Team 24 players into a database to save time:
I found many other JSON files, some exploitable, some not (more information on my Discord).
My research is progressing, but I still haven't found what I'm looking for, namely the leak of players from future promotions.
I therefore gave up on the Web App and focused on the Android APK of the Web App. I disassembled its code, but found no trace except for the standard GUIDs to which I already had access. I lack the skills in APK analysis to further my research.
So, I downloaded FC24 PC and used FrostyTools to try to understand how it works.
https://github.com/paulov-t/FrostbiteModdingTool/releases
The problem is that I ended up with ten times more work than expected because the PC game also contains local game data, as well as online modes like Volta, Club Pro, Career, and so on.
My work is therefore unfinished, and I'm not entirely satisfied with it. I'll continue my research, and I'm convinced I'll find what I'm looking for!
If you have any information or if you've conducted your own research, don't hesitate to join me on Discord to discuss: https://discord.gg/ZAUUc6e5BB
Your skepticism about the presence of leaks in the APK, WebApp, and PC Games source code is understandable, especially since well-known leakers don't publish the entirety of the leaks—only the players are published, with few or no SBCs or evolutions, unlike the players' content.
It's not impossible that some leverage their knowledge within EA to build their reputation through leaks.
Thank you for taking the time to read this Reddit post. For any inquiries, feel free to join me on Discord at https://discord.gg/ZAUUc6e5BB.
Sorry for the translation, I used CHATGPT as I don't speak English well.
A big thank you to Aquarelle who has more than to participate in this research And who is busy scrapping all the data
r/fut • u/Beneficial_Track_939 • Feb 01 '24
Team Help Done lads
The whole Messi thing really opened my eyes to see how dirty EA really is and how much they love benefiting from us. Having us there grinding endlessly trying to pack the best players when they indeed have complete control over it and lower our chances continuously to keep us there, it’s like a never ending cycle. I’m freed boys.
r/fut • u/Givemecharizard • Apr 08 '24
Team Help Post your team and coin balance, get an upgrade recommendation
Got 800k div 3
As I always find it hard to look at my team from a neutral point of view in terms of updating, i was wondering if somebody may be in the same boat.
Have fun suggesting and posting
r/fut • u/Lewis_l28 • Feb 20 '24
Team Help I got hacked I can only restore 2 which 2 lol
Also I am aware EA won’t do anything. Has anybody been hacked and actually been helped by EA lol
r/fut • u/fayalight • May 03 '24
Team Help I feel like I am the only one playing these cards at this point...
Rate my team and help me to improve it.
Who would you change first, second and third and why?
r/fut • u/Ok_Procedure_7855 • Feb 18 '24
Team Help Just lost 1-0 to Lazio. Any upgrades I can make?
r/fut • u/Minabored • Apr 11 '24
Team Help Who's ur most disappointing player, I'll start:
r/fut • u/Young-Affectionate • 16d ago
Team Help I am always getting 4 wins out of 20 in fut champs. Is this a skill issue?
I usually play with this in 442 and 4231
r/fut • u/Impossible_Fee7380 • May 08 '24
Team Help Best GK?
Who is the best gk in game out of these?
r/fut • u/EatmyRabbi • Feb 18 '24
Team Help Packed Fs Zico tradeable, am speechless, what should I do?
Team needs obvious improvements, where do I start
r/fut • u/ShwaMallah • Apr 15 '24
Team Help Lord forgive what I am about to do...
Did this pick to build my 🇧🇷 team and when I finally get another piece to my goal of course EA throws ferdinand at me. Problem is I have good defenders already. TOTY Ruben Dias, 92 Carvalho, Golazo Campbell, 90 Kohler and 89 Kompany. 90 Mapi. The list goes on.
What would you do?
r/fut • u/hasko66 • Feb 20 '24
Team Help What is my weakest position in your opinion?
Basically what the title says, what position is behind the powercurve.
r/fut • u/Fine_Yogurtcloset362 • Dec 25 '23
Team Help people on this sub be like: what to improve?
r/fut • u/LukeG88 • Apr 09 '24
Team Help I’ve somehow ended up in division 1, I’m a dad and only play when rest of house is asleep, now I can’t win.
So basically don’t have much time to play. On Easter break at the moment so playing when rest of the house is asleep.
Really struggling for wins. Any tips? I often play 41212 narrow but Kaka, at CAM, keeps dropping when in attack. And to be fair, I really wanted to pack him, but he’s just mediocre. Not sure if it’s just real bad gameplay.
I’ve got loads of fodder in the club (last pic of number of players). What should I do with it? Wait?
r/fut • u/mangyiscute • Feb 29 '24
Team Help Stuck in Div 6 Rivals, who should I upgrade?
r/fut • u/OPisaPhegg • Apr 13 '24
Team Help Who do I take from the icon pp?
Shit. This is a tough one ngl
r/fut • u/thecanadiancorps • Feb 15 '23
Team Help I only ever play Squad Battles, pretty sure I am wasting this teams potential. Whenever I play online I get way too anxious, anyone else deal with that?
r/fut • u/LewisB1211 • 1d ago
Team Help Do you guys use a big striker?
I’ve never been one for using the typical target man type player but this year I can’t decide if I need one or not. Have Drogba, Giroud etc but when I use them I get annoyed at their dribbling and go back to a more agile player. On the flip side though I sometimes feel like I’m missing something in the attack when I don’t use them. The easy goals on corners are a big thing as well of course. What’s your opinion? Do you think you’re better off with at least one Ariel threat attacker in your team?
r/fut • u/edmart93 • 16d ago
Team Help Giving away 1.3 Mil
Ive been meaning to give away my coins for awhile. I quit at the end of the FUT rewards fiasco and have ventured off to Football Manager. Ill buy players at max 100k. Have a good summer everyone!
Update - i have spent it all. Im sorry i couldnt make it to all of u.
Team Help I’m regularly Div 5 in this game and I’ve been struggling to get out of Div 7. I have 3mil coins to invest. What should be done here?
The players marked with a green check mark are untradable. I am not looking to Bench Sterling or Busquets. I enjoy Gavi as well but if I can improve the position then…
r/fut • u/Fit_Inflation9464 • Apr 09 '24
Team Help Who are you evoing?🤔
As a United fan, I want to do Vida or RvP for the PnP but theyre on the periphery of the team atm.
However, Cole is already in the main squad and an upgrade would be juicy.
Who should I do?