Craft Leveling Exploit [Any Information on this?]

Page 2 of 2 1 2
10/13/2013 05:00 hongkong#16
Quote:
Originally Posted by XXXLBUCK View Post
Can be read as the source because it is written in an interpreted language that you do not want to convert to machine language by compiling FF14 that Lua.
It can be seen that the end point of JSON to get your information to the DB server easily if you analyze this .
The margin after I interpret it by looking for a GET API by hitting anyway that endpoint .
Let me be an id of 1000 character named Yoshihiro.
Gil is Kansuto if you can insert a query that update character where id = 1000 set gil = 99999999 to the server .
Dupe and cheat 's rampant as early as in a short period of time it causes .

It was hard to take place or has taken the time this kind of thing from FF11 was written in C + + and assembler
Hacking is easy because lowering the security for development efficiency FF14.

It's a LUA/JSON query trick, just tell the server you got this, and server does as it's told.
Now how to exactly do it :)
10/13/2013 19:08 LostMK#17
everything is there for a coder to figure out exactly how to set gil and exp values to completely hack the game and gain everything they want

people have already given themselves max gil this way
10/14/2013 02:46 subesan#18
SQL injection is possible because the connection to the server aren't encrypted correctly.

{"add_exp":"Value"}

something in that ballpark.

[Only registered and activated users can see links. Click Here To Register...]
10/14/2013 11:24 LostMK#19
so its already fixed/patched out? or what subesan? no more free gil?
10/14/2013 15:10 Deggers#20
Be aware that in XI people found a way to duplicate items in Nysle Isle (or w/e it was called). SE did nothing until they patched it then they perma banned everyone who had done it. Certainly was the case on Remora.
Page 2 of 2 1 2