Please Read: ideas to exploit

02/07/2008 02:02 youchian#1
after playing a few MMO's for a few years, I've picked up some different ways of basic hacking. Now, most people think of a gold hack as impossible without some packet editing or whatever, but after giving it a thought I've come up with an idea. I used to play a game called KalOnline, and there was a way to manipulate a UCE to allow an NPC to bring up a window it usually doesn't. But since the data is already on the client that it has the window, there is always the possibility of bringing that window up. I was thinking, in small terms, maybe we could try to find a way to bring up the quest reward windows. I don't think any part of the quest reward window could be serverside, since the completion of a quest can trigger it. Normally most games you couldn't do this, but some of the better quest rewards you can pick between 2-4 items for a reward, ie. fb19 weapon (TWO MIRAGE STONES FOR 10K =D). anyways, if anyone's interested in investigating this with me send me a pm, no leachers -.- hate spam.
02/07/2008 02:43 botguy#2
usually wont work because when the quest reward window appears it still needs to tell the server whats going on the server checks that you did nothing so it wont confirm or give you anything, this works on flash games though
02/09/2008 02:50 LemoniscooL#3
anyways he is right, in Kal it was possible but only useful with jobchange or sth like that .. since almost ALL data for quests and npcs is stored client side in the config, but in pw (ive looked through all .pck files) there isnt anything that looks liek anything like that .. or i didnt find that .. if they are stored in these it MIGHT be possible anyways to open a window by a npc that it normally dosnt .. but i think its not possible to finish quests you didnt have finished since server checks for items you need or kills and these are stored in packets i think (if im wrong correct me ^^)
long story short meaning: its not possible i think but its a nice idea ^^

greetz

btw sry for any misstakes .. im tired and drunk xD
02/18/2008 14:05 HyperActive01#4
It is a good idea but, PW is mostly server sided ......
03/08/2008 04:04 kite007#5
PW is basically an Asian version of WoW so most of the data concerning players are server sided unless you could send a trojan to the server w/o detection you can do anything that you want.

i know this player managed to fool a GM to be a part of the GM assistant team (Immortals) and he uses the Immortal accnt to feed his friends with m0lds/fame/stuff and sell it for money and moldhunts most of the time since the immortal accnt is basically cannot be killed warp anywhere too..

maybe try to apply for an immortal accnt in your server too..
03/08/2008 20:42 Lord Frieza#6
I totally hate KalOnline. I played that like 3 years ago or something, got to about L40 or higher, logged on one day to see all my equipment missing, I was truly shocked and moved to Conquer online XD
03/08/2008 21:05 youchian#7
last geon hack (money hack) on that game was when someone sent a keylogged screenshot to the GMs :D not that im saying all GMs are stupid but it worked out and some ppl could access a GM account for almost a week