Expl0itz in LOTF - How to solve/abuse them

Page 2 of 2 1 2
04/22/2009 02:38 LetterX#16
Quote:
Originally Posted by Arcotemple View Post
i dont wanna be spoonfed answers...

i just need a little help in making serverside checks...

i have a coder that can do it but he's in germany...

im just asking for a lil help
Then you're SOL.
04/22/2009 03:12 justprownage#17
Weird the way 3 of these listed exploits aren't in my LOTF source.
04/22/2009 03:15 tao4229#18
Which ones?
04/22/2009 03:37 justprownage#19
Well 2 actually. The equipping bug I originally didn't have. The trading bug with the tons of money thing I don't have. And I fixed the jump bug myself =D with the disconnection thing.
04/22/2009 17:04 alexbigfoot#20
want to bet i can use hacks on ur server? ^^
04/23/2009 07:28 Arcotemple#21
ok at least tell me this
if i code it in is it gonna go in client.cs? or what
11/19/2009 03:41 Arcо#22
Quote:
Originally Posted by tao4229 View Post


===============================================
Jumping
===============================================
Description - You can jump as far as you want. AS FAR AS YOU WANT.

Abuse - The only way you can really abuse this is with a proxy. Jumping to the other side of the map :bandit:. I mean, you can do the super ass long jump by clicking opposite sides of the screen etc but meh.

Solution - Distance checks yet again. Simple solution, and if you do it like official CO(Disconnecting on long jumps) it provides an easy way to DC xD.
The way I fixed this was put in a pull back.
I got the pullback from Arcotemple and f0am a while back.
Code:
                                        if (MyMath.PointDistance(PrevX, PrevY, NewX, NewY) > 15)
                                        {
                                            MyChar.Teleport(MyChar.LocMap, MyChar.LocX, MyChar.LocY);
                                            SendPacket(General.MyPackets.SendMsg(MessageId,"SYSTEM", MyChar.Name, "PullBack!", 2011);
retrun;//this way your server won't still change the LocX and LocY of the client. 
                                        }
You're supposed to put that after I think case 133?
I'm pretty sure thats it.
Code:
ushort NewY = (ushort)((Data[0xf] << 8) + Data[0xe]);
It's supposed to be inserted directly under this code.
Sorry for bumping an old thread.
I barely realized the date on this thread.
11/19/2009 16:47 Basser#23
You can fix the trading, equipment and jumping easily.
I didn't know that changing files in your client would give you the opportunity to wear high level equipment. Going to fix that in my source.
11/19/2009 22:09 ChingChong23#24
heh, i've actually came across over 10 LOTF exploits when writing jonquer & checking LOTF how things are handled there, it seriously lacks validating anything the client sends it. Too bad i didn't log these as i came across them, but you can completely destroy any LOTF server if you wanted too.
11/19/2009 22:15 #*=DarkAngeL=*##25
Every solution you have ca be beatet.
The thing with jump is easy.
Also there is alot way more problems.
Speedhack,aimbot,botting,c3hack.
You cant fix the item.dat problem as your way.
You can change the language of it instead of checking everything.
If you have 1000players, you can check everything?
I dont think so, you ahve to make alot way more things to protect server real.
Thats why you have Screencam programs such as Fraps, so
players can report other players with videos.
Simple.
11/20/2009 18:35 Basser#26
Quote:
Originally Posted by #*=DarkAngeL=*# View Post
Every solution you have ca be beatet.
The thing with jump is easy.
Also there is alot way more problems.
Speedhack,aimbot,botting,c3hack.
You cant fix the item.dat problem as your way.
You can change the language of it instead of checking everything.
If you have 1000players, you can check everything?
I dont think so, you ahve to make alot way more things to protect server real.
Thats why you have Screencam programs such as Fraps, so
players can report other players with videos.
Simple.

1) You're talking about hacks, not small edits to get benefit from
2) Changing the language? Can you please make clear what you mean? I don't think you can change the itemtype.dat to another language, since it's mainly numbers and will only effect the game in a bad way, besides there are many translators on the internet available. Beautiful isn't it?
3) What you're saying is: A server should depend on people sending videos of botters, hackers or what ever the guy is doing he shouldn't do.
4) What are you talking about? It's not simple to fix it, 2 lines above this, you said you have to make a lot more to protect the server for real, and now it's easy? Confused me.

Sorry for being a little rude, but your post didn't really make sense.
07/02/2010 13:40 irritantgassie#27
Quote:
Originally Posted by Basser View Post
1) You're talking about hacks, not small edits to get benefit from
2) Changing the language? Can you please make clear what you mean? I don't think you can change the itemtype.dat to another language, since it's mainly numbers and will only effect the game in a bad way, besides there are many translators on the internet available. Beautiful isn't it?
3) What you're saying is: A server should depend on people sending videos of botters, hackers or what ever the guy is doing he shouldn't do.
4) What are you talking about? It's not simple to fix it, 2 lines above this, you said you have to make a lot more to protect the server for real, and now it's easy? Confused me.

Sorry for being a little rude, but your post didn't really make sense.
Haha i agree :D
07/02/2010 23:29 _tao4229_#28
...
8 month bump,

Pretty ninja there
Page 2 of 2 1 2