Expl0itz in LOTF - How to solve/abuse them

[LetterX]

Originally Posted by Arcotemple

i dont wanna be spoonfed answers...

i just need a little help in making serverside checks...

i have a coder that can do it but he's in germany...

im just asking for a lil help

Then you're SOL.

[justprownage]

Weird the way 3 of these listed exploits aren't in my LOTF source.

[tao4229]

Which ones?

[justprownage]

Well 2 actually. The equipping bug I originally didn't have. The trading bug with the tons of money thing I don't have. And I fixed the jump bug myself =D with the disconnection thing.

[alexbigfoot]

want to bet i can use hacks on ur server? ^^

[Arcotemple]

ok at least tell me this
if i code it in is it gonna go in client.cs? or what

[Arcо]

Originally Posted by tao4229

===============================================
Jumping
===============================================
Description - You can jump as far as you want. AS FAR AS YOU WANT.

Abuse - The only way you can really abuse this is with a proxy. Jumping to the other side of the map . I mean, you can do the super ass long jump by clicking opposite sides of the screen etc but meh.

Solution - Distance checks yet again. Simple solution, and if you do it like official CO(Disconnecting on long jumps) it provides an easy way to DC xD.

The way I fixed this was put in a pull back.
I got the pullback from Arcotemple and f0am a while back.

                                        if (MyMath.PointDistance(PrevX, PrevY, NewX, NewY) > 15)
                                        {
                                            MyChar.Teleport(MyChar.LocMap, MyChar.LocX, MyChar.LocY);
                                            SendPacket(General.MyPackets.SendMsg(MessageId,"SYSTEM", MyChar.Name, "PullBack!", 2011);
retrun;//this way your server won't still change the LocX and LocY of the client. 
                                        }

You're supposed to put that after I think case 133?
I'm pretty sure thats it.

ushort NewY = (ushort)((Data[0xf] << 8) + Data[0xe]);

It's supposed to be inserted directly under this code.
Sorry for bumping an old thread.
I barely realized the date on this thread.

[Basser]

You can fix the trading, equipment and jumping easily.
I didn't know that changing files in your client would give you the opportunity to wear high level equipment. Going to fix that in my source.

[ChingChong23]

heh, i've actually came across over 10 LOTF exploits when writing jonquer & checking LOTF how things are handled there, it seriously lacks validating anything the client sends it. Too bad i didn't log these as i came across them, but you can completely destroy any LOTF server if you wanted too.

[#*=DarkAngeL=*#]

Every solution you have ca be beatet.
The thing with jump is easy.
Also there is alot way more problems.
Speedhack,aimbot,botting,c3hack.
You cant fix the item.dat problem as your way.
You can change the language of it instead of checking everything.
If you have 1000players, you can check everything?
I dont think so, you ahve to make alot way more things to protect server real.
Thats why you have Screencam programs such as Fraps, so
players can report other players with videos.
Simple.

[Basser]

Originally Posted by #*=DarkAngeL=*#

Every solution you have ca be beatet.
The thing with jump is easy.
Also there is alot way more problems.
Speedhack,aimbot,botting,c3hack.
You cant fix the item.dat problem as your way.
You can change the language of it instead of checking everything.
If you have 1000players, you can check everything?
I dont think so, you ahve to make alot way more things to protect server real.
Thats why you have Screencam programs such as Fraps, so
players can report other players with videos.
Simple.

1) You're talking about hacks, not small edits to get benefit from
2) Changing the language? Can you please make clear what you mean? I don't think you can change the itemtype.dat to another language, since it's mainly numbers and will only effect the game in a bad way, besides there are many translators on the internet available. Beautiful isn't it?
3) What you're saying is: A server should depend on people sending videos of botters, hackers or what ever the guy is doing he shouldn't do.
4) What are you talking about? It's not simple to fix it, 2 lines above this, you said you have to make a lot more to protect the server for real, and now it's easy? Confused me.

Sorry for being a little rude, but your post didn't really make sense.

[irritantgassie]

Originally Posted by Basser

1) You're talking about hacks, not small edits to get benefit from
2) Changing the language? Can you please make clear what you mean? I don't think you can change the itemtype.dat to another language, since it's mainly numbers and will only effect the game in a bad way, besides there are many translators on the internet available. Beautiful isn't it?
3) What you're saying is: A server should depend on people sending videos of botters, hackers or what ever the guy is doing he shouldn't do.
4) What are you talking about? It's not simple to fix it, 2 lines above this, you said you have to make a lot more to protect the server for real, and now it's easy? Confused me.

Sorry for being a little rude, but your post didn't really make sense.

Haha i agree

[_tao4229_]

...
8 month bump,

Pretty ninja there