[Release] Superman (vSRO) anti-exploit FREE

07/10/2015 01:06 Pure3viL#136
Quote:
Originally Posted by Gray Face View Post
In order for me to test stuff I need a test-server a vps and I do not have funds for this at the moment, so I cannot redo sro_clients for all caps, they are really easy to change and the offsets is already released in threads all over epvp.

Use olly and change this to your "preferences".
PHP Code:
// Mastery limit
0069C7C8   3C 78                CMP AL,78 # 120 CAP
0069C7C8   3C 78                CMP AL,6E # 110 CAP
0069C7C8   3C 78                CMP AL,64 # 100 CAP
0069C7C8   3C 78                CMP AL,5A # 90 CAP
0069C7C8   3C 78                CMP AL,50 # 80 CAP
0069C7C8   3C 78                CMP AL,46 # 70 CAP
0069C7C8   3C 78                CMP AL,3C # 60 CAP

//Level up limit (SRO_Client)
008A99A2   80FB 6E              CMP BL,78 # 120 CAP
008A99A2   80FB 6E              CMP BL,6E # 110 CAP
008A99A2   80FB 6E              CMP BL,64 # 100 CAP
008A99A2   80FB 6E              CMP BL,5A # 90 CAP
008A99A2   80FB 6E              CMP BL,50 # 80 CAP
008A99A2   80FB 6E              CMP BL,46 # 70 CAP
008A99A2   80FB 6E              CMP BL,3C # 60 CAP

//Max Mastery Limit (SRO_Client)
006A51BC   BF 77010000          MOV EDI,168 # 360 mastery
006A51BC   BF 77010000          MOV EDI,14A # 330 mastery
006A51BC   BF 77010000          MOV EDI,12C # 300 mastery
006A51BC   BF 77010000          MOV EDI,10E # 270 mastery
006A51BC   BF 77010000          MOV EDI,F0 # 240 mastery
006A51BC   BF 77010000          MOV EDI,D2 # 210 mastery
006A51BC   BF 77010000          MOV EDI,B4 # 180 mastery

//EU Mastery Limit (SRO_Client)
#120 CAP
006A5197   3D F0000000          CMP EAX,0F0
006A51A2   BF F0000000          MOV EDI
,0F0
006AA498   3D F0000000          CMP EAX
,0F0
006AA4A3   BE F0000000          MOV ESI
,0F0

#110 CAP
006A5197   3D F0000000          CMP EAX,0DC
006A51A2   BF F0000000          MOV EDI
,0DC
006AA498   3D F0000000          CMP EAX
,0DC
006AA4A3   BE F0000000          MOV ESI
,0DC

#100 CAP
006A5197   3D F0000000          CMP EAX,0C8
006A51A2   BF F0000000          MOV EDI
,0C8
006AA498   3D F0000000          CMP EAX
,0C8
006AA4A3   BE F0000000          MOV ESI
,0C8

// Party matching
#120 CAP
0073B013 6A 6E PUSH 78 (party match search max level write-able)
0073B030 6A 6E PUSH 78 (party match search default max level)
0073FAAF 6A 6E PUSH 78 (form party max level write-able) 
0073FACC 6A 6E PUSH 78 (form party default max level)

#110 CAP
0073B013 6A 6E PUSH 6E (party match search max level write-able)
0073B030 6A 6E PUSH 6E (party match search default max level)
0073FAAF 6A 6E PUSH 6E (form party max level write-able) 
0073FACC 6A 6E PUSH 6E (form party default max level)

#100 CAP
0073B013 6A 6E PUSH 64 (party match search max level write-able)
0073B030 6A 6E PUSH 64 (party match search default max level)
0073FAAF 6A 6E PUSH 64 (form party max level write-able) 
0073FACC 6A 6E PUSH 64 (form party default max level)

#90 CAP
0073B013 6A 6E PUSH 5A (party match search max level write-able)
0073B030 6A 6E PUSH 5A (party match search default max level)
0073FAAF 6A 6E PUSH 5A (form party max level write-able) 
0073FACC 6A 6E PUSH 5A (form party default max level)

#80 CAP
0073B013 6A 6E PUSH 50 (party match search max level write-able)
0073B030 6A 6E PUSH 50 (party match search default max level)
0073FAAF 6A 6E PUSH 50 (form party max level write-able) 
0073FACC 6A 6E PUSH 50 (form party default max level)

#70 CAP
0073B013 6A 6E PUSH 46 (party match search max level write-able)
0073B030 6A 6E PUSH 46 (party match search default max level)
0073FAAF 6A 6E PUSH 46 (form party max level write-able) 
0073FACC 6A 6E PUSH 46 (form party default max level)

#60 CAP
0073B013 6A 6E PUSH 3C (party match search max level write-able)
0073B030 6A 6E PUSH 3C (party match search default max level)
0073FAAF 6A 6E PUSH 3C (form party max level write-able) 
0073FACC 6A 6E PUSH 3C (form party default max level)


//Quest level cap (fix crash, SRO_Client)
00955134   8078 20 7D       CMP BYTE PTR DS:[EAX+20],6E --188 
Taken from:
[Only registered and activated users can see links. Click Here To Register...]


i can supply you with a dedicated
07/10/2015 07:33 vnkzo01#137
How can i view user's login ip ? :D
All ip login in _Iplogs table goes to local ip server :D
07/10/2015 09:47 witchymoo#138
Quote:
Originally Posted by vnkzo01 View Post
How can i view user's login ip ? :D
All ip login in _Iplogs table goes to local ip server :D
Yep true, I have same question ;), all logged IPs were local machine IP instead of real client IP. And I think this is an important issue for most server owners.

A suggestion though, if the SUPERMAN cannot pass real client IP to gateway server, (hence we'll get local IP server in the log table), perhaps it can write a log file or something containing useful information such as "[date], [username], [real_client_ip]". Still much more better if it can pass real client IP as it should be.
07/10/2015 09:56 Death#139
Nice Job
07/10/2015 10:12 hossamxt#140
I Work With Old One Fine !! but when i started With This is Program Got C9 !!
07/10/2015 16:18 ​Goofie​#141
Quote:
Originally Posted by witchymoo View Post
Yep true, I have same question ;), all logged IPs were local machine IP instead of real client IP. And I think this is an important issue for most server owners.

A suggestion though, if the SUPERMAN cannot pass real client IP to gateway server, (hence we'll get local IP server in the log table), perhaps it can write a log file or something containing useful information such as "[date], [username], [real_client_ip]". Still much more better if it can pass real client IP as it should be.
At least for my knowledge this is not possible. Because Superman like all other tools is resending the traffic.
07/10/2015 16:25 witchymoo#142
Quote:
Originally Posted by Gray Face View Post
At least for my knowledge this is not possible. Because Superman like all other tools is resending the traffic.
That's fine I guess, if such filter cannot pass real ip to gateway server.

But since IP logging is very important, perhaps you can make the filter write some kind of log file containing useful information such as [date, username, ip] (Which I think your filter actually have them all captured). So server owners could refer to that log file for IP auditing. ;)
07/10/2015 17:34 ​Goofie​#143
Quote:
Originally Posted by witchymoo View Post
That's fine I guess, if such filter cannot pass real ip to gateway server.

But since IP logging is very important, perhaps you can make the filter write some kind of log file containing useful information such as [date, username, ip] (Which I think your filter actually have them all captured). So server owners could refer to that log file for IP auditing. ;)
I will see what I can do when I get a server to work with.
07/10/2015 18:16 witchymoo#144
Quote:
Originally Posted by Gray Face View Post
I will see what I can do when I get a server to work with.
superb! :)

anyway, your latest update still produce this error (I even tried default configuration provided by the rar file), previous one works just fine, did you add some new library when compiling new one?...

[Only registered and activated users can see links. Click Here To Register...]

FYI, I'm on Windows 2008 R2 Core (No-GUI) Edition. And since the latest update gave me that error, I still use your old file ;)
07/10/2015 19:16 ​Goofie​#145
Quote:
Originally Posted by witchymoo View Post
superb! :)

anyway, your latest update still produce this error (I even tried default configuration provided by the rar file), previous one works just fine, did you add some new library when compiling new one?...

[Only registered and activated users can see links. Click Here To Register...]

FYI, I'm on Windows 2008 R2 Core (No-GUI) Edition. And since the latest update gave me that error, I still use your old file ;)
Open config.txt with Notepad++.

Change Encoding to "CONVERT INTO UTF-8 WITHOUT BOM". And test again.

During late errors in the guard, I'm uploading a guard, this one is working for me.
* Make sure your Server has .Net framework 3 or greater.

Download link:
[Only registered and activated users can see links. Click Here To Register...]

Do not edit this config.txt in normal notepad, Use Notepad++ to edit the config file.

Thanks for using Superman.

Enjoy!
07/10/2015 19:50 witchymoo#146
Quote:
Originally Posted by Gray Face View Post
Open config.txt with Notepad++.

Change Encoding to "CONVERT INTO UTF-8 WITHOUT BOM".
Still the same error.

Btw, I never used notepad, always notepad++ :)

Perhaps the string thingy isn't compatible to some systems somehow. Can you revert back without welcome message settings like the old version? We can test compatibility regarding string matters with this.

many thanks :)

Your old file:


Works like a charm ;)
07/10/2015 20:37 ​Goofie​#147
Quote:
Originally Posted by witchymoo View Post
Still the same error.

Btw, I never used notepad, always notepad++ :)

Perhaps the string thingy isn't compatible to some systems somehow. Can you revert back without welcome message settings like the old version? We can test compatibility regarding string matters with this.

many thanks :)

Your old file:
Works like a charm ;)
Your IP exist in the second image, remove it. Try to set encoding language to ANSI instead and try again.
07/11/2015 07:09 Yui..#148
Request for add more ideas
1- Exit delay
2- Restart delay
3- Refrom party delay
4- Plus limit
5- Block ress in CTF
6- Block revers when use jop mode
7- Disable/Enable PK
07/11/2015 14:16 ​Goofie​#149
Quote:
Originally Posted by tetoman2010 View Post
Request for add more ideas
1- Exit delay
2- Restart delay
3- Refrom party delay
4- Plus limit
5- Block ress in CTF
6- Block revers when use jop mode
7- Disable/Enable PK
Plus limit is something you can make in your database. You know that right?

^Working on:
1- Exit delay
2- Restart delay
7- Disable/Enable PK
07/11/2015 15:22 hossamxt#150
Grey I Got some problem here ... when I use Old Version Got C9 after set my I'd and pw so, any answer