Real Hacking CO2 Wild Kingdom Eagle Server

[Xiron]

Hate to burst your bubble (okay, I lied), but even if you DID manage to get in, you still face the problems of: a. You don't know where the character files are b. You (probably) don't know how the character files are formatted c. Your *** is grass when they notice that they have someone accessing their server in this manner d. And TQ's lawyers are lawnmowers e. It will probably not take them much longer to notice you in their system than it will take you to go "Woohoo, I'm in!"

[scottdavey]

Originally Posted by Xiron

Hate to burst your bubble (okay, I lied), but even if you DID manage to get in, you still face the problems of: a. You don't know where the character files are b. You (probably) don't know how the character files are formatted c. Your *** is grass when they notice that they have someone accessing their server in this manner d. And TQ's lawyers are lawnmowers e. It will probably not take them much longer to notice you in their system than it will take you to go "Woohoo, I'm in!"

Who cares about accessing data files, Everyone hates TQ = ctrl a & del

[devilsmum]

everyone hates TQ, but they are not as stupid as you make out. 700 employees and rising. One of the most successful games in china and many other big mmorpgs.

They are just money made. We are talking about the US side of TQ being complete idiots. But they will have tight security since conquer makes them so much money now.

[emmanication]

why not sql injection?

[TonyPlayer]

done

tipe in the ip on site 1

and server was down for 5mins.. NO IT WASNT MAINTAINCE

but i became scared and crash my pc down xD

[InfamousNoone]

I don't know if you've passed the password stage but why not use a simple password generation algorithm such as; Can't be assed to do the cmd prompt ***** right now, going out.

// just an example of how to do it with an 8-char max password

bool Connect(char* Password)
{
	// ...
	// ...
	// ...
}

// ----------------------------

bool connected = false;
char tryPassword[8];
char lastPassword[8];
memset(tryPassword, 0, 8);
memset(lastPassword, 255, 8);

while (!connected)
{
        if (memcmp(tryPassword, lastPassword, 8) == 0)
              break; // tried all valid passwords
	*((unsigned __int64)tryPassword)++;
	connect = Connect(tryPassword);
}

[Role_Model]

Originally Posted by Xiron

Hate to burst your bubble (okay, I lied), but even if you DID manage to get in, you still face the problems of: a. You don't know where the character files are b. You (probably) don't know how the character files are formatted c. Your *** is grass when they notice that they have someone accessing their server in this manner d. And TQ's lawyers are lawnmowers e. It will probably not take them much longer to notice you in their system than it will take you to go "Woohoo, I'm in!"

Well, this is FTP where talking about, File Transfer Protocol, sound simple as is...unless its in a language, or encrypted...and i dont feel like learning any language, or decrypting...at the moment i will just take down everything, **Format**...that would suck for Kutie-Janet...she has freaking everything Super 2Sock with All SDG, all -7, all +12 she is freaking fully maxed out...but idc...besides im your all talking to a 15yr old!

[iliveoncaffiene]

Rofl what a dumbass.
*Don't you all realize you're being fooled by a complete idiot? All he did is use something we can all use, command prompt.*

Login to your server and type "netstat -a" into command prompt, then find the IP which your connected to port 5816 on (Map server port). You now have game server IP [sarcasm]OMG THAT WAS HARD[/sarcasm]

All he did is realize that there's an FTP server running, which is pretty easy for most people to figure out. Yes, they have a banner for the FTP which is quite stupid, but serv-u isn't easily brute forced. You didn't find anything but another login, and it's doing EXACTLY what it should be doing, keeping you out.

You didn't hack anything script-kiddie. If you really want to meet someone who's been inside TQ's SQL servers, talk to me. I'll give you SQL SELECT access to my backup of the Dragon game server database (I'm not kidding). The previous hack was on their website, they left a gaping security hole in the player photo system: that, coupled with an admin/admin user authentication got us in with a PHP shell script that brought about the massive hacks on CO around last september/august (The DB drop on Dragon, yes).


P.S. Xiron:

Originally Posted by Xiron

a. You don't know where the character files are b. You (probably) don't know how the character files are formatted c. Your *** is grass when they notice that they have someone accessing their server in this manner d. And TQ's lawyers are lawnmowers e. It will probably not take them much longer to notice you in their system than it will take you to go "Woohoo, I'm in!"

a - It's SQL, no files
b - Again, SQL
c - They took about a week last time
d - No lawyers because you're not accessing it by illegal means
e - Look at 'C'

[warriorchamp]

......

Guys... ) I must laugh on you..
A guy comes with 4 posts and with his cmd knowledge and want to break in in the CO's serverPC. And now comes the interesting thing: everybody believes him)

He's not the only who tried to break in/hack the CO...nobody succeeds...

Btw... Posting this sh*t on Forum, CO will take care that nobody can access their servers without their permission in the future....

[Evil~nub]

Originally Posted by warriorchamp

......

Guys... ) I must laugh on you..
A guy comes with 4 posts and with his cmd knowledge and want to break in in the CO's serverPC. And now comes the interesting thing: everybody believes him)

He's not the only who tried to break in/hack the CO...nobody succeeds...

Btw... Posting this sh*t on Forum, CO will take care that nobody can access their servers without their permission in the future....

/agreed

[Kiyono]

search for a mysql 3 exploit (yea i know tq uses mysql 3 it's sad)

[Kiyono]

Originally Posted by iliveoncaffiene

Rofl what a dumbass.
*Don't you all realize you're being fooled by a complete idiot? All he did is use something we can all use, command prompt.*

Login to your server and type "netstat -a" into command prompt, then find the IP which your connected to port 5816 on (Map server port). You now have game server IP [sarcasm]OMG THAT WAS HARD[/sarcasm]

All he did is realize that there's an FTP server running, which is pretty easy for most people to figure out. Yes, they have a banner for the FTP which is quite stupid, but serv-u isn't easily brute forced. You didn't find anything but another login, and it's doing EXACTLY what it should be doing, keeping you out.

You didn't hack anything script-kiddie. If you really want to meet someone who's been inside TQ's SQL servers, talk to me. I'll give you SQL SELECT access to my backup of the Dragon game server database (I'm not kidding). The previous hack was on their website, they left a gaping security hole in the player photo system: that, coupled with an admin/admin user authentication got us in with a PHP shell script that brought about the massive hacks on CO around last september/august (The DB drop on Dragon, yes).


P.S. Xiron:

a - It's SQL, no files
b - Again, SQL
c - They took about a week last time
d - No lawyers because you're not accessing it by illegal means
e - Look at 'C'

if you realy have the backup could i see it? i've alway wondered about how their DB looks like

[dbzman1995]

Originally Posted by iliveoncaffiene

Rofl what a dumbass.
*Don't you all realize you're being fooled by a complete idiot? All he did is use something we can all use, command prompt.*

Login to your server and type "netstat -a" into command prompt, then find the IP which your connected to port 5816 on (Map server port). You now have game server IP [sarcasm]OMG THAT WAS HARD[/sarcasm]

All he did is realize that there's an FTP server running, which is pretty easy for most people to figure out. Yes, they have a banner for the FTP which is quite stupid, but serv-u isn't easily brute forced. You didn't find anything but another login, and it's doing EXACTLY what it should be doing, keeping you out.

You didn't hack anything script-kiddie. If you really want to meet someone who's been inside TQ's SQL servers, talk to me. I'll give you SQL SELECT access to my backup of the Dragon game server database (I'm not kidding). The previous hack was on their website, they left a gaping security hole in the player photo system: that, coupled with an admin/admin user authentication got us in with a PHP shell script that brought about the massive hacks on CO around last september/august (The DB drop on Dragon, yes).


P.S. Xiron:

a - It's SQL, no files
b - Again, SQL
c - They took about a week last time
d - No lawyers because you're not accessing it by illegal means
e - Look at 'C'

wow, teach me lol

wait, so you got into their server and ****** everything up and it wasn't illegal?

also, what hacks? I wasn't playing durring the time.. DB drops? Did you guys make it so mobs drop DBS every 100 kills or something? If so tell me what tq has their drop rate set on xD 1/18389275

[~Yuki~]

Dropprates are in the source not in the db (im pretty sure its so)