[Afro's Patches] Bad Action

[s4abdouser]

it doesn't work .. RIP s4 league

[Macadamia van Nussfried]

Originally Posted by darknight974

failed to inject.

Inject it with ce

[BoostyQ]

I've seen sources, it's very cool ^.^
But it will be more effective if filter player already in CRoomClient::RecvPacket

[tuaprimadd]

Guys injected a bypass before injecting this in the game, it might be the reason why it isn't working.

[ttboy070]

XD it works you need to do it when you load the server

[ZorinTR]

Well, does not work. :/

[TatsuKen]

When I try to run the Faith injector that someone linked above, the game closes automatically and a window pops up with a security alert saying there's a suspicious program running, and that I need to close it before running the game. How can I get around this? While it's open, I can't even play the game, let alone use the injector.

Secondly, OP, you really should have included some instructions on how to use this. Simply posting a file with a vague description of what it does isn't helpful to those of us who don't know how to actually use it.

[iGerald]

You need a bypass

[▒ Ant.]

Originally Posted by BoostyQ

I've seen sources, it's very cool ^.^
But it will be more effective if filter player already in CRoomClient::RecvPacket

It would not. P2P packets become sent practically every ms, from every client. Stuff like movement sync and so on, to filter each and every one of these packets could potentially impact performance.

OnTopic:
Updated:
-Changed the method of fixing the exploit. Now instead of just patching one instance of the exploit, I decided to go deeper and re-build the function that contained the exploit. So now this exploit can no longer be triggered at any part in S4.
-Changed the name to better fit the project.
-Both methods are included in the source, so you may use which you want and/or learn from both.

[PÐPplàÿər]

Originally Posted by ▒ Ant.

It would not. P2P packets become sent practically every ms, from every client. Stuff like movement sync and so on, to filter each and every one of these packets could potentially impact performance.

OnTopic:
Updated:
-Changed the method of fixing the exploit. Now instead of just patching one instance of the exploit, I decided to go deeper and re-build the function that contained the exploit. So now this exploit can no longer be triggered at any part in S4.
-Changed the name to better fit the project.
-Both methods are included in the source, so you may use which you want and/or learn from both.

Tho if you post the open source,can't they check it out and find a way to bypass ur fix?

[▒ Ant.]

Originally Posted by PÐPplàÿər

Tho if you post the open source,can't they check it out and find a way to bypass ur fix?

No.
The reason this crash happens is because the hacker first tells your client he is not wearing a skill and then tells your client to create a block.
Internally, this means that S4 looks up the Actor class of who sent the packet, then checks their skill for which .scn to use to render the skill.

S4 however does NOT check if the skill actually exists or not, thus trying to read from blank space and causing a crash if the user isn't using a skill.
All I'm doing now is adding that extra check to see if the skill exists or not before trying to read from it, effectively removing the possibility of this vulnerability.

[Aquaforce]

What does it do ?

[HDcreeperfag]

Ant you're the boss :*

[lasher61]

Pls tutorial

[Shyroth]

You start a Bypass, when you are in the server selection, start an injector (faith injector) and then add the dll from ant. thats it.