Alright, me and my buddy have been working on this a little, there are 2 primary problems you run into.
1. most of what we've been able to change is only superficial, only the client recognizes the changes.
and
2.The server NEVER gets tricked out of exact numbers.
Mostly what we've pulled off can be done with a process editor. With a process editor i was able to change my lvl, or so I thought... my lvl appeared different, but my exp said some ridiculous percent. For example, I was on lvl 70 and I set my lvl to 5, my exp appeared as 678675732%. Also, I was able to make it appear that I had 300 billion silvers. However, as soon as I try to deposit the money, the original value is reset and the system tells me that I don't have enough money.
Anyways, my point is, unless we can intercept and then edit/clone incoming packets from the server to trick your client into sending legitimate packets back to the server, we aren't going to accomplish a whole lot. Since the client's information is double checked by the server and vice versa, its doubtful that there would be a way to manipulate the code in such a manner. Maybe if there was some way to convince the server that it had sent these packets... maybe there is a hidden verification ping for each sent packet from the server...
Keep it real everyone, lots of great ideas bouncing around in here, ntm the team work. Great job chocoman4k, its quite a genius program, maybe if you could find a way to capture incoming packets from the server, we could progress a little farther with our research.
~Tha Nuke~
1. most of what we've been able to change is only superficial, only the client recognizes the changes.
and
2.The server NEVER gets tricked out of exact numbers.
Mostly what we've pulled off can be done with a process editor. With a process editor i was able to change my lvl, or so I thought... my lvl appeared different, but my exp said some ridiculous percent. For example, I was on lvl 70 and I set my lvl to 5, my exp appeared as 678675732%. Also, I was able to make it appear that I had 300 billion silvers. However, as soon as I try to deposit the money, the original value is reset and the system tells me that I don't have enough money.
Anyways, my point is, unless we can intercept and then edit/clone incoming packets from the server to trick your client into sending legitimate packets back to the server, we aren't going to accomplish a whole lot. Since the client's information is double checked by the server and vice versa, its doubtful that there would be a way to manipulate the code in such a manner. Maybe if there was some way to convince the server that it had sent these packets... maybe there is a hidden verification ping for each sent packet from the server...
Keep it real everyone, lots of great ideas bouncing around in here, ntm the team work. Great job chocoman4k, its quite a genius program, maybe if you could find a way to capture incoming packets from the server, we could progress a little farther with our research.
~Tha Nuke~