Old files - item duplication bug

01/12/2013 13:19 VEssence#1
as far as i know you can duplicate your items via using stall, stall network and pet
can someone explain that how to duplicate items for stackable and non stackable items ?
01/12/2013 13:29 GoneUp#2
Put a Arrow Stack (Amout:50) in a Exchange Window, open Stall Network. The items in the inventory are now unlocked again. Switch the Arrows for example with a Global Chatting Scroll (Amout:1). Close the Inv on both Clients, finish the exchange and teleport. Now you got a Global with Amout 50.

On the stall it is nearly the same, you close your own stall window client sided and switch the slots. Then you buy it with another char.

Never heard anything about a pet item duping bug, does anyone knows more?
01/12/2013 13:35 VEssence#3
Quote:
Originally Posted by GoneUp View Post
Put a Arrow Stack (Amout:50) in a Exchange Window, open Stall Network. The items in the inventory are now unlocked again. Switch the Arrows for example with a Global Chatting Scroll (Amout:1). Close the Inv on both Clients, finish the exchange and teleport. Now you got a Global with Amout 50.

On the stall it is nearly the same, you close your own stall window client sided and switch the slots. Then you buy it with another char.

Never heard anything about a pet item duping bug, does anyone knows more?
exchange + stall network didnt work at jsro
i tried that by injecting packets it failed also lets try for stall

fixed stallnetwork and item duplication with its stack
does someone know how to dupe items by pets?
01/12/2013 16:07 intercsaki#4
Jsro? Japanese sro? You seriously think that they let something this obvious and stupid happen with their server? :D
01/12/2013 17:39 Darkness™#5
Exchange and stall network works.
Stall dupe bug works.


duping trought pets only non-stack able items, but stall needed. ( also a pick pet )
01/12/2013 18:04 alexhun#6
Quote:
Originally Posted by VEssence View Post
exchange + stall network didnt work at jsro
i tried that by injecting packets it failed also lets try for stall

fixed stallnetwork and item duplication with its stack
does someone know how to dupe items by pets?
just make grab pets untradeable and its solved

Quote:
Originally Posted by Darkness™ View Post
Exchange and stall network works.
Stall dupe bug works.


duping trought pets only non-stack able items, but stall needed. ( also a pick pet )
also stackable works too with pet
01/12/2013 19:19 elitecaat#7
There are many more exploits that work now on SilkroadR,iSRO and much more.
01/12/2013 20:11 VEssence#8
Quote:
Originally Posted by alexhun View Post
just make grab pets untradeable and its solved



also stackable works too with pet
nope, we solved it with darkness now without making it untradeable

Quote:
Originally Posted by intercsaki View Post
Jsro? Japanese sro? You seriously think that they let something this obvious and stupid happen with their server? :D
i'm talking about old jsro files :P
that dont have db
01/13/2013 00:37 lesderid#9
#Reported: Not coding related.
01/13/2013 04:58 PortalDark#10
#moved to correct section
04/17/2013 21:09 Eckonet#11
In vsro is impossible?
04/17/2013 21:55 WickedNite#12
Quote:
Originally Posted by Eckonet View Post
In vsro is impossible?
Everything works on vsro aswell.
04/17/2013 22:02 Eckonet#13
Attempt to stall and exchange and does not work.
04/17/2013 22:24 IceAmStiel#14
Telling from the explanation of GoneUp.. I guess you're using an old database that has the procedure "_STRG_MOVEITEM_P2P".

Please remove the..
Code:
	DECLARE @Old_Item_Data INT
	SET @Old_Item_Data = 0
	SELECT @Old_Item_Data = Data FROM _Items WHERE ID64 = @ItemID_From
	IF (@Old_Item_Data IS NOT NULL AND @Old_Item_Data <> @Data)
	BEGIN
		UPDATE _Items SET Data = @Data WHERE ID64 = @ItemID_From
	END
..part and try to exploit it again.


Cause this would mean, Client holds Data (50), procedure grabs ItemID + wrong Data (1) of the Slot the Arrow were in, recognizes that Client Data (50) != Item Data (1) of Slot, updates Data (50) of Item (Global). Such updates require the player to teleport.

It's just a guess, I couldn't test it on a live server unfortunately :(