Enchant overflow fix

[nubness]

This particular fix is for the ep4.5 ps_game.exe. If it also works on ep5.4, please post here and I'll fix it.

[kolin79]

Yes 5.4 also crash

[nubness]

I just checked. The ep5.4 ps_game.exe seems to have the required code already in by default.

[Eric-Dutra16]

According to my tests it seems to be already fixed in ps_game 5.4.

[Yoquiz]

Excuse my ignorance but use this as the Cheat engine?

[nubness]

Originally Posted by Yoquiz

Excuse my ignorance but use this as the Cheat engine?

Yes, you use this with Cheat Engine.

[nubness]

I remade the fix in a more efficient way and updated the download link in the first post. You can also click to download the new version.

[wurstbrot123]

Client->Server Enchanting

[2] OP Code
[1] Inventory Page ( Lapisa )
[1] Inventory Slot ( Lapisa )
[1] Inventory Page ( Enchant item )
[1] Inventory Slot ( Enchant Item )
[1] Amount ( Enchant Items )
[1] Inventory Page ( Item )
[1] Inventory Slot ( Item )

in case its this packet ( 0805 op code ) 0806 might be possible as well

Client->Server Rerolling

[2] OP Code
[1] Inventory Page ( Recreation Rune )
[1] Inventory Slow ( Recreation Rune )
[1] Inventory Page ( Item )
[1] Inventory Slow ( Item )

dont know how accurate my data is though collected the packet infos kinda a while ago

[zhangliang]

Originally Posted by nubness

Hello everyone,

As most of you might have noticed, there was a new kind of "attack" that got a few server admins quite worried. It was first reported by Cronus , then later on by other admins. I did come up with a small fix weeks ago, but it wasn't good enough.

Today I finally found some time to look into it, and wrote a final fix, which should protect your server against this specific attack.

Click to download the fix !

I assume everyone knows how to work with a .CT file.

Now that that's out of the way, maybe we should talk about who was behind this attack. Right after the first attacks, I asked a few server administrators to run a debugger on the ps_game process, which lead us to getting the character name of the "hacker". Thanks to Indugo, we traced that char name and account information (which was similar on every server that had suffered from this attack) back to [Adm]Acid of . We also have some chat logs from this guy, who claims he has more ways of causing overflows in the ps_game, which will be proven soon enough.

Thank you for reading.

What's the password

[wallerus]

There is no password requirement