how can i test if my server got that?
[Exploit] Summon any monster at any server without gm account
04/03/2020 17:36
loader8#31
04/04/2020 04:16
PortalDark#32
[Only registered and activated users can see links. Click Here To Register...]Quote:
@[Only registered and activated users can see links. Click Here To Register...] I suggest deleting the topic.
Reasoning is that while this is an exploit, this WILL force people to fix it
Making it public and the ways of doing so will encourage others to fix it on their server
04/28/2020 05:21
Frukio92#33
There are too many users who open the server without knowledge in the community. It is necessary to destroy them.
Here are the package structures:
If you replace the unique code with npc code, npc spawn in the region you set.
Here are the package structures:
Code:
## removed ##
04/28/2020 06:27
gigola123#34
Well I don’t think «*destroy them*» is the good term. Even people «*with knowledge*» didn’t know about this exploit, purpose of this post is to alert there is some exploits in vSro files, this one is just an example from many other which are dangerous also. (Go go my dear «*developper*» find some new exploits*)Quote:
If you replace the unique code with npc code, npc spawn in the region you set.
I don’t think sharing how to «*destroy*» server is a good way to do but helping them by giving just the opcode if some one find this exploit in futur, yes why not. That’s why I didn’t share the structure (well I did accidentally :’( ). But well I guess after 2 months everyone is protect now.. I hope for you guys
If you share a structure, share it like a structure please, you know some typed stuff blablabla because yours doesn’t look like the good one
04/28/2020 06:29
DeusAim#35
Awesome thanks man
04/29/2020 12:39
Frukio92#36
I have now tested and the structures are working.
04/29/2020 23:59
bende16#37
Can you give me the Region ID and region X-Y-Z you need to spawn in front of Jangan ?Quote:
04/30/2020 00:33
sarkoplata#38
use /addrallypoint...Quote:
[Only registered and activated users can see links. Click Here To Register...]
04/30/2020 02:54
develmax#39
the notice of uniques appears but i can't find them at the regionQuote:
[Only registered and activated users can see links. Click Here To Register...]
04/30/2020 03:06
bende16#40
How to turn off the Uniq notification.Quote:
[Only registered and activated users can see links. Click Here To Register...]
example mangyang ?
04/30/2020 04:24
gigola123#41
Well, with this packet I don't think it's possible, maybe doing some reverse on GameServer for load the monster as a normal monster when this packet is receive.Quote:
example mangyang ?
05/04/2020 13:37
hexcode#42
Is this packed 0x34BB only exist in VSRO server files or in other versions too? I do fast search in game server, shard manager and client of BlackRogue Files and didn't find anything.
Regards
Regards
05/04/2020 18:39
gigola123#43
0x34BB should only exist in vSro but there is probably an other opcode with other files, if I remember well the unique titan spawn exist in sro for a long time now, if you want I can give a check on BlackRogue.Quote:
Regards
05/04/2020 18:57
hexcode#44
Thanks, will be good to know is there any other unpatched exploit in BR files.It's nor urgent,take your time.Quote:
Regards
05/10/2020 06:49
gigola123#45
So after some research, you can change the monster type which appear but you've to change your GameServer, here offset to change:Quote:
example mangyang ?
HTML Code:
004192FD ::: MOV BYTE PTR DS:[EAX],3
Just change "3" at the end by what you want, here a list of all type:
00 General
01 Champion
02 Unknow ???
03 Unique
04 Giant
05 Titan
06 Elite Giant
07 Elite
08 Unique but without notification of spawn and kill ?
09 Unknow ???
10 General Party
Well unknow has some strange behavior, missing name + hp
[Only registered and activated users can see links. Click Here To Register...]
This modification will not impact other unique spawn, only unique spawn by /spawnunique_all command.