[Exploit-Discussion] Consignment Item Duplication [Dupes]

04/06/2016 22:30 ​Exo#1
Hey there,
Just as the title says, there's an exploit/bug whatever you wanna call it that apparently lets you dupe your items. Sadly, I don't know what kind of dupe, is it just desyncing so you can use that item to scam or you get a completely legit item. Information isn't completely available.

Tried injecting buys/registers/settlements with fake/invalid data and errors are working fine (some causing disconnections).

Here're some information that might help you if you decide to help in this investigation^^

Client references:

GameServer references:

Database calls:

On data request a function is being called with data found on address 00453F2B to select the items from database [on every call, so nothing is being saved in the gameserver memory as far as I checked, well ofc a dump of the data but each time a request is sent gameserver requests the data from the database].

Example of the gameserver call:

Bugs found so far:
On injecting a buy request (a legit one), the item is bought but, not shown at the inventory except after a teleport.

Been trying since yesterday to find that dupe with @[Only registered and activated users can see links. Click Here To Register...] since a lot of people confirmed its existence, but with no success yet.

If you have any question/information/rumors about this issue, your contribution is welcomed. The only solution people seem to have now is completely disabling consignment (that isn't cool). Consignment is a good option to have.
Thank you and happy hacking!

*Item Movement works while item is not registered yet [NPC selected].
04/06/2016 22:48 ​Goofie​#2
It's not with consignment tho, maybe there is one there as well but the DUPE I know about is in exchange and it's only a visual affect until buyer/seller teleported and the item will replace it's "icon" again.
04/06/2016 22:53 ​Exo#3
Quote:
Originally Posted by ​Goofie​ View Post
It's not with consignment tho, maybe there is one there as well but the DUPE I know about is in exchange and it's only a visual affect until buyer/seller teleported and the item will replace it's "icon" again.
Well, so far @[Only registered and activated users can see links. Click Here To Register...] , @[Only registered and activated users can see links. Click Here To Register...] , @[Only registered and activated users can see links. Click Here To Register...] confirmed it had something to do with consignment.
04/06/2016 22:54 ​Goofie​#4
Quote:
Originally Posted by ​Exo View Post
Well, so far @[Only registered and activated users can see links. Click Here To Register...] , @[Only registered and activated users can see links. Click Here To Register...] , @[Only registered and activated users can see links. Click Here To Register...] confirmed it had something to do with consignment.
Do not believe it unless I see it, the exchange dupe thingy I'm aware of and have known it for 1-2 years already.

Really easy to fix if there is such a thing, just force people to Teleport after using consignment.

The exchange dupe bug works by using F12 in the middle of the exchange, try that in consignment.

By the way, you shouldn't call this an "exploit", it's a visual bug.
04/06/2016 23:04 ​Exo#5
Quote:
Originally Posted by ​Goofie​ View Post
Do not believe it unless I see it, the exchange dupe thingy I'm aware of and have known it for 1-2 years already.

Really easy to fix if there is such a thing, just force people to Teleport after using consignment.

The exchange dupe bug works by using F12 in the middle of the exchange, try that in consignment.

By the way, you shouldn't call this an "exploit", it's a visual bug.
-Not sure why 3 individuals would lie about the same topic, the only reasonable lie would be denying its existence so they can keep it a secret but that's not the case here so it makes no sense.

-Keeping that as a last resort tho.

-Ye, ik about that one and it didn't work there.

-w/e xd
04/07/2016 00:07 Royalblade*#6
BTW ask Orchide, Skyrish or one of those people. Don't remember who it was that reported it to me first.

Saw screens as well from one of them when the shit was found out. Been around 20-30 months.
04/07/2016 07:00 MeGaMaX#7
When you buy the item gs get the price from _Inventory table, if it failed it will return false, if its not false, it gets the char gold by the query and then update it with group char gold data = 4
04/07/2016 15:02 $WeGs#8
Quote:
Originally Posted by MeGaMaX. View Post
When you buy the item gs get the price from _Inventory table, if it failed it will return false, if its not false, it gets the char gold by the query and then update it with group char gold data = 4
price from _Inventory ? :confused:
04/07/2016 21:23 B1Q#9
Quote:
Originally Posted by $WeGs View Post
price from _Inventory ? :confused:
he probably meant _RefScrapOfPackageItem
04/07/2016 23:05 ​Exo#10
Quote:
Originally Posted by hazemooking View Post
he probably meant _RefScrapOfPackageItem
Not sure if sarcasm or wut but nah, shit is stored mainly at _OpenMarket
04/08/2016 03:13 MeGaMaX#11
Carp it was late night, i meant the open market system get the price from the owner then do the query for it in _Inventory table to check if the item exist or not
04/08/2016 09:05 B1Q#12
Quote:
Originally Posted by ​Exo View Post
Not sure if sarcasm or wut but nah, shit is stored mainly at _OpenMarket
:)
04/09/2016 19:24 Deja45Vu#13
I think, probably its a bug in GS, when you copy item, it is only on the server side, gameserver didnt write it into database, so therefore item disappears. After relog/teleport. character data are loaded from database.

When someone do it, check logs of this item.(especially itemID? same)

If ItemID is same, it'll be problem to fix it in procedures