[Dev]Anti srgwdos ( srDos_2.exe )

04/01/2012 00:27 MeGaMaX#1
Hello guys

until the sr_dos_2.exe released

it was packed , not hard to unpack it and get the source code so trying to block it

i just want small help

i want every info about these opcodes..

1: 0x1000

2: 0xa100

3: 0x6106

4: 0x6101

5: 0x6005

6: 0xa101

7: 0x2002

8: 0x6102

i find only 2001 and 2002 but dont know for what them login or what else

so lets dev to block this tool

put here every thing you knew about these opcodes
04/01/2012 12:57 qoaway#2
easy to fix, when this program used on any server gateway server says : Duplicated IBUV CertParam Registration Request!, User Info (Session: (numtry), Account: (accountid))
read gateway server log, if(numtry > 1000) ban the account
or
get last log dates which starts with "Duplicated IBUV" if(datediff("ms",first_log_date,second_log_date) < 5000) // (5000 => 5sec) ban the account

just algorithm, haven't tried yet.but should work. also srgwdos doesnt work on blackrogue
04/02/2012 16:33 coajack258#3
even if user is blocked still lags your gateway server..

---done fix... auto delete account when Duplicated IBUV (account) < 200... phew!
04/02/2012 16:58 Wismo#4
Quote:
Originally Posted by coajack258 View Post
even if user is blocked still lags your gateway server..

---done fix... auto delete account when Duplicated IBUV (account) < 200... phew!
Release? :D
04/02/2012 17:19 coajack258#5
Sorry... I can't... But it is easy just make a program that reads the logs.

It just a 'IF', 'THEN', 'ELSE' function :D
04/02/2012 17:36 MeGaMaX#6
Quote:
Originally Posted by coajack258 View Post
even if user is blocked still lags your gateway server..

---done fix... auto delete account when Duplicated IBUV (account) < 200... phew!
Lol !!!

you can dos without registered account xD
04/02/2012 17:40 coajack258#7
Quote:
Originally Posted by androw3349 View Post
Lol !!!

you can dos without registered account xD
This is about the released srgwDOS... It uses existing account to work..
04/02/2012 19:51 Wayne3#8
Quote:
Originally Posted by coajack258 View Post
This is about the released srgwDOS... It uses existing account to work..
Nope, also works with unregistred accounts. The error message wont come up but the error count still grows until it crashes.
04/02/2012 21:09 MeGaMaX#9
Quote:
Originally Posted by Wayne3 View Post
Nope, also works with unregistred accounts. The error message wont come up but the error count still grows until it crashes.
that's what i said xD

that's my boy :handsdown:
04/02/2012 21:38 qoaway#10
Quote:
Originally Posted by androw3349 View Post
that's what i said xD

that's my boy :handsdown:
it never be hard to solve even if you have 2 root servers you can use 2 gateway servers its simple solve or just make program like sr connector, use timer for prevent fast connection and fast packet sending if someone connects / sends packets fastly you can block his ip on advanced firewall with shell commands