Packets to crash a server

01/30/2019 00:20 xiltos#1

Done, ty

01/30/2019 13:56 Danshiomg#2

Learn first what is a packet then you can move to packet editing .
Step 1 : Find exploit to crash
Step 2 : Find exploit to crash
Step 3 : Find more exploit to crash
:pogchamp:

02/06/2019 10:26 xiltos#3

02/06/2019 11:02 netHoxInc#4

Easy to do using the exchange-item interface, not even requiring packets and works on (nearly all) pservers. Probably even on offi who knows lol

02/08/2019 12:21 cookie69#5

what is a packet sir?? :wutface:

02/08/2019 18:07 xdflyff#6

a paper or cardboard container, typically one in which goods are sold.

02/08/2019 19:35 netHoxInc#7

Lol #request close

02/15/2019 11:35 Flyff-Iblis#8

If you want to dupe you can send the delete package ingame
you have to get the packet from a official flyff that still has the delete function working,
and then adjust it for the official Flyff server. (Dont bother with Pservers)

Keep in mind official flyff has another encryption for their packets, so using Pserver packets and transfering them to official flyff wont work right away.

Here is an example of an official Flyff delete packet:

Code:

FFFFFFFF210020021A000000494E47472E313032313934353635303638323735363932363833240000003236392E30463231464545454535414134313832413033413046374144394135443843310400000031313131A659000058A99B850000000000

You can delete your character if you adjust it to your server/char etc.
and keep duping with the released Char overwrite method (see epvpers releases)

You can also try to crash it by accessing different functions ingame that usually just work on certain times / channels.
Like Guild Siege Line Up completetion or accessing the MVP Price rewards (old v9 system) in order to crash it.

Some Examples here, just play around with the code:

Code:

FFFFFFFFD5012002

Code:

FFFFFFFFD6012002

Code:

FFFFFFFFD7012002

Code:

FFFFFFFFA1012002

Theres also a dupe exploit with the bidding for the Medium Guild House, works similar to the Angel Dupe Method (see epvp releases) with Perin removal.

Or try to stress crash it, by spamming certain things.
Dropping Items out of the Inventory (if possible)
High usage of Potions/Refreshers (Server can handle about 30-40k per Sec. if you go beyond that, you have a good chance to crash it if used for longer.)

These are just some primitive ways of making duping/crashing possible, if you look for a more comfortable way you have to invest some time and need some knowledge to find that, no one will just help u out with that as everyone wants to make profit out of it.
Also many stat exploits working on official flyff with Packet Editor, you can stack buffs easily and also use negative values.
Dont PM me for something, i do not help you more with those things.
Just dont do it, it ruins the game.

06/08/2019 15:43 Alred#9

how can i do the guild bidding dupe?

06/08/2019 19:41 cookie69#10

Quote:

Originally Posted by Alred

how can i do the guild bidding dupe?

I dont think you have enough skills to do it as you are asking the question :rolleyes:

But if you look to the flyff original souce (v15/v17..) and if the exploit is not fixed in the desired server then it could be possible to dupe perins/penya.

You will need to be a guild master and have a guild house and server must have implemented __GUILD_HOUSE_MIDDLE

Then you need to send a packet (I dont know what is that :confused: ) like below:

Code:

void CDPClient::SendGuildHouseTenderJoin( OBJID objGHId, int nTenderPerin, int nTenderPenya )
{
	BEFORESENDSOLE( ar, PACKETTYPE_GUILDHOUSE_TENDER_JOIN, DPID_UNKNOWN );
	ar << objGHId << nTenderPerin << nTenderPenya;
	SEND( ar, this, DPID_SERVERPLAYER );
}

And if you want to dupe perins, you need to send a negative nTenderPerin.
For example:
if nTenderPerin = 0x7FFFFFFF (this is the max int value for 32 bits) then it is a positive value but if you cast it to short then it becomes -1.
So that way you can create 1 perin instead of removing it from your inventory.

The exploit is in the server fucntion below.

Code:

pUser->RemoveItem( (BYTE)( pItemElem->m_dwObjId ), (short)nTenderPerin );

in this code, if you pass nTenderPerin = 0x7FFFFFFF then you will cerate 1 perin.
If you pass 0x7FFFFFFF - 9998 then you will create 9999 perins...

And the same works for penya too, but you are limited to only 0x7FFFFFFF penya (2,147,483,647‬).

Code:

pUser->AddGold( -nTenderPenya );

Code:

void CGuildHouseMng::OnGuildHouseTenderJoin( CUser* pUser, OBJID objGHId, int nTenderPerin, int nTenderPenya )
{
	if( IsValidObj( pUser ) == TRUE )
	{
		if( IsTenderAble( pUser, objGHId, nTenderPerin, nTenderPenya ) == FALSE )
		{
			return;
		}

		if( nTenderPerin > 0 )
		{
			CItemElem* pItemElem = (CItemElem*)pUser->m_Inventory.GetAtItemId( II_SYS_SYS_SCR_PERIN );
			if( IsUsableItem( pItemElem ) == TRUE && pItemElem->m_nItemNum >= nTenderPerin  )
			{
				LogItemInfo aLogItem;
				aLogItem.SendName = pUser->GetName();
				aLogItem.RecvName = "GUILDHOUSE_TENDER_PERIN";
				aLogItem.WorldId = pUser->GetWorld()->GetID();
				aLogItem.Gold = aLogItem.Gold2 = pUser->GetGold();
				aLogItem.Action = "G";
				g_DPSrvr.OnLogItem( aLogItem, pItemElem );
				pUser->RemoveItem( (BYTE)( pItemElem->m_dwObjId ), (short)nTenderPerin );
			}
			else
			{
				Error( "OnGuildHouseTenderJoin - Not Perin or Lack Perin. UserId : %07d", pUser->m_idPlayer );
				return;
			}
		}
		if( pUser->GetGold() >= nTenderPenya )
		{
			LogItemInfo aLogItem;
			aLogItem.SendName = pUser->GetName();
			aLogItem.RecvName = "GUILDHOUSE_TENDER_PENYA";
			aLogItem.WorldId = pUser->GetWorld()->GetID();
			aLogItem.Gold = pUser->GetGold();
			pUser->AddGold( -nTenderPenya );
			aLogItem.Gold2 = pUser->GetGold();
			aLogItem.Action = "G";
			_stprintf( aLogItem.szItemName, "%d", II_GOLD_SEED1 );
			g_DPSrvr.OnLogItem( aLogItem );
		}
		else
		{
			Error( "OnGuildHouseTenderJoin - Lack Tender Penya. UserId : %07d", pUser->m_idPlayer );
			return;
		}

		BEFORESENDDUAL( ar, PACKETTYPE_GUILDHOUSE_TENDER_JOIN, DPID_UNKNOWN, DPID_UNKNOWN );
		ar << pUser->m_idPlayer;
		GUILDHOUSE_TENDER GHT( objGHId, pUser->m_idGuild, nTenderPerin, nTenderPenya );
		GHT.Serialize( ar );
		SEND( ar, &g_dpDBClient, DPID_SERVERPLAYER );
	}
}

06/09/2019 03:52 Alred#11

thanks for the info ill try tho hahaha

06/11/2019 18:38 lordsill#12

#closed