Duping Tutorial

08/17/2005 20:40 rwl123#1
Ive read alot on these forums and it looks like the mind set of the Conquer hackers is to only focus on packets, packets have the best reward if you can get past the encryption but, good luck with that. Duping is really easy and using memory editing progs is a lot easier and have a wider range of things you can do, duping, trade hacks, infinite xp skills, and others that i might write tuts for later.

There are alot of ways to dupe in conquer, you can dupe any time the server sends you a packet and you send it back. this tut is for the trade dupe first you have to have 2 characters and an item you want to dupe.

I played a loooong time ago and just started again and got bored so i might as well release this. This was the way we duped in the early start of conquer, if they have patched it then youll just have to NOP whatever protection they added.


To dupe youll need Ollydbg.exe
1) Start up conquer, log in
2) attach ollydbg to the conquer client
3) press run, olly always pauses newly attached processes
4) press View -> Memory (or ctrl+m)
5) Now find the address XXXXXX. This address is the code that when you place an item into the trade window
6) place a breakpoint on XXXXXX, now when you put the item into the trade window the game will pause.
7) go back to ollydbg and look at the right side window and change esi from 1 to 2
8) unpause ollydbg (F9) go back into conquer and your friend should see two of the same items in slot 1 and 2 of his trade window. the person using ollydbg will still only see 1 item. trade and now you just duped an item

If it has been patched which i doubt then just read up on ollydbg and find out how the NOP works.

*** Just removed the address's find them on your own its not hard ***
08/17/2005 21:34 kev.compooter#2
I dont even kno what this prog is but i searched it up on google, sorry im kinda a noob. Getting some thing related to viruses and trojans, correct me if im wrong.

Btw, im new lol so i guess if it works i click on the + sign next to your karma eh?
08/17/2005 21:37 Ultima#3
Quote:
Originally posted by rwl123@Aug 17 2005, 20:40
Ive read alot on these forums and it looks like the mind set of the Conquer hackers is to only focus on packets, packets have the best reward if you can get past the encryption but, good luck with that. Duping is really easy and using memory editing progs is a lot easier and have a wider range of things you can do, duping, trade hacks, infinite xp skills, and others that i might write tuts for later.

There are alot of ways to dupe in conquer, you can dupe any time the server sends you a packet and you send it back. this tut is for the trade dupe first you have to have 2 characters and an item you want to dupe.

I played a loooong time ago and just started again and got bored so i might as well release this. This was the way we duped in the early start of conquer, if they have patched it then youll just have to NOP whatever protection they added.


To dupe youll need Ollydbg.exe
1) Start up conquer, log in
2) attach ollydbg to the conquer client
3) press run, olly always pauses newly attached processes
4) press View -> Memory (or ctrl+m)
5) Now find the address XXXXXX. This address is the code that when you place an item into the trade window
6) place a breakpoint on XXXXXX, now when you put the item into the trade window the game will pause.
7) go back to ollydbg and look at the right side window and change esi from 1 to 2
8) unpause ollydbg (F9) go back into conquer and your friend should see two of the same items in slot 1 and 2 of his trade window. the person using ollydbg will still only see 1 item. trade and now you just duped an item

If it has been patched which i doubt then just read up on ollydbg and find out how the NOP works.

*** Just removed the address's find them on your own its not hard ***
first thing the packet encryption was cracked over a year ago so i don`t think you read a thing here and second i realy don`t think its posible to dupe like you describe it here cause the items and the amount are handled serverside only so you can`t change the amount and not only the amount also everything about items is serverside all you do is tell the server what item you want to trade and the server tells you if its posible... nothing more or less

thats also for xp skill and everything else but don`t stop here i realy want to see all your tutorials and if you tell us to find the memory adress ourself then you should at least make another tutorial how to find them cause alot here don`t know how to do it and this forum also exists to teach people how to do stuff

so we all wait ;)
08/17/2005 21:37 rwl123#4
[Only registered and activated users can see links. Click Here To Register...]

Ollydbg doesnt have anything to do with trojans or viruses it is just a program debugger that is a helpfull hacking tool
08/17/2005 21:40 kev.compooter#5
Alritey, thx m8< btw i was wondering if there are any good places where i can learn how to do macroing and etc. Ive read these forums for a few weeks now and iunno if this is the right place to post lol sorry mods if it is. Main reason i bring this up, is becuase whenever you guys post something up like this, i dont really understand anything thats happening. I wouldnt mind helping once i finished my hw and all so yea.. thx again
08/17/2005 21:55 rwl123#6
thats great if the packet encryption was cracked i never really looked at it but it looked like an 8bit xor. ive never done much with packets.
The dupe works the items are handled sever side, the dupe has nothing involved with anything client sided.
basically the server sends you a packet saying item x is in slot 1 in trade window
ollydbg pauses the game
change the esi value which is the trade window slots 1-6
unpause ollydbg
when ollydbg unpauses it sends back saying item x is in slot 1,2,3,4,5,6

if they patched this then most likely they gave each item a unique ID and if more than 1 item has that Id it d/c's you, in this case you have to use a NOP to get around it.


But you are right i didnt read anything on this site really, i apologize but if you have worked out the packets then duping should be simple and this is pretty much a longer way to do things

Only reason i wouldn't make the other tuts ,mainly the trade hack, is because those really do ruin the game. The trade hack pauses the game when you place an item into you vendor window and lets you switch what item your selling. ex. you put in a super 2 socketed neck for 10million then switch it for a met. In your vend window everyone will see the 2socketed necklace but when they buy it they will get a met.
08/17/2005 22:07 Ultima#7
Quote:
Originally posted by rwl123@Aug 17 2005, 21:55
thats great if the packet encryption was cracked i never really looked at it but it looked like an 8bit xor. ive never done much with packets.
The dupe works the items are handled sever side, the dupe has nothing involved with anything client sided.
basically the server sends you a packet saying item x is in slot 1 in trade window
ollydbg pauses the game
change the esi value which is the trade window slots 1-6
unpause ollydbg
when ollydbg unpauses it sends back saying item x is in slot 1,2,3,4,5,6

if they patched this then most likely they gave each item a unique ID and if more than 1 item has that Id it d/c's you, in this case you have to use a NOP to get around it.


But you are right i didnt read anything on this site really, i apologize but if you have worked out the packets then duping should be simple and this is pretty much a longer way to do things

Only reason i wouldn't make the other tuts ,mainly the trade hack, is because those really do ruin the game. The trade hack pauses the game when you place an item into you vendor window and lets you switch what item your selling. ex. you put in a super 2 socketed neck for 10million then switch it for a met. In your vend window everyone will see the 2socketed necklace but when they buy it they will get a met.
you realy don`t know how trades work do you?

it works like this player one sends trade request player twi accepts player one tells server i want the item with the id xyz in the trade window (note that you cant do anything with that item anymore till trade is over) both only have to hit accept you cant change items that are in the trade process anymore if you drop the item (thats posible) the trade becomes invalid and fails and i realy don`t think that the items ever had no unique id cause an id is the basic of a database

you have to understand that everything you explain means that its clientside but its serverside!!! you can`t change items like you want
08/17/2005 22:31 Bountey#8
hmm not sure if ur saying every item dosnt have a unique ID,
Cause yes they do,every Item has their own unique ID,thats how GMs tracks items,even if u met/db/soc this item,it still has same ID
And let me make this clear u can not dupe an item without acctually dropping it and re picking it,thats why its a good way making something so that lets say u hunt u would be able to controll what u will pick up,cause +1 items are not able to be seen until u hvae picked up this item,and by duping it would be a way to send packets to pick up an +1 item,u have to get the packet from when u kill monster that drops this great item.
i know its possible to dupe some way like this,by controlling what the monsters would drop,but it isnt really caleld Duping more like Creating.
Duping will pretty much not work ever and dosnt work EVER in this game,cause by duping the other item u duped should have the same ID wich is impossible
08/17/2005 22:41 Ultima#9
its a double negation never had no id so they ever had an id ;)
08/17/2005 22:52 chocoman4k#10
I've been messing with it for an hour, all I could do is change the item to be added to trade window. Couldn't add them twice though.
It seems to use some kind of ID which is encrypted with the help of synchronization packets 03F3/03F4 as the item ID's always change. Still unsure if it is an encrypted ID or an item index though.
Maybe fsjiang can help us with that as he already knows how syncronization packets work.
I'll help you reversing it as soon as I'm not that busy anymore :P

For the crackers:
Try bpx at 0044614E
Add-item-to-trade-window-packet is being generated and sent here.
08/17/2005 23:43 mind...#11
somehow I just have the idea he is promoting=/

is there any example you can give, like how to dupe a meteor?

perhaps dkall could look for a second at this thread?;)
08/18/2005 00:58 jMerliN#12
You're a moron.. whoever the fuck you are. That makes no sense whatsoever.. and you apparently have no experience doing anything involving cheating.. hacking.. even programming. You realize pausing the game's execution is going to do just that.. cause the game to pause. When the execution resumes the timer check will cause you to d/c because of "network congestion", and nothing will happen. The server needs to believe that a new item with a new ID is a new item.. that it created it and that it is unique. Stopping program execution for a few seconds .. and stopping it will stop the refreshing on the graphics meaning if you switch to the game the screen wont refresh.. will not cause this to happen. The one Matt.dk posted worked because the client locked an item in it's inventory then sent to the server another packet dropping an item which the server could not find in the player's inventory so it spawned a new one.. then when it realized it removed it, but if you picked up both quickly it would become permanent. Your method is impractical and completely bullshit. You're a complete dumbfuck.. that's basically something we should all agree on.
08/18/2005 02:55 ultimatedestroyer#13
Come on man, lets not result to swearing..
08/18/2005 03:04 kev.compooter#14
Quote:
Come on man, lets not result to swearing..

he's rite, cmon rwl123 was just trying to help..
08/18/2005 03:46 silv3r123#15
at least his trying to help by releasing a method