Register for your free account! | Forgot your password?

Go Back   elitepvpers > MMORPGs > Conquer Online 2
You last visited: Today at 14:54

  • Please register to post and access all features, it's quick, easy and FREE!

Advertisement



some kinda cps exploit!!!

Discussion on some kinda cps exploit!!! within the Conquer Online 2 forum part of the MMORPGs category.

Reply
 
Old 09/06/2008, 15:22   #16
 
Real~Death's Avatar
 
elite*gold: 0
Join Date: Jun 2007
Posts: 1,272
Received Thanks: 246
Quote:
Originally Posted by argnain View Post
nope he traded me only once that's y i trusted him

if u know this hack maybe u can explain it!!
I just seen ithappen to my GF's son.He traded a item to somone for CP,then the window closed(trade canceled),then I went over there to make sure that they wernt tring to pull off the cp/gold scam.tryed to traded 2 more times(cp was in the trade window) window kept clossing.then like the 3rd time trade went through--but no cp and lost the item

**** he only lost somthing worth 90 CP
I feal for you,bro sorry
Real~Death is offline  
Old 09/06/2008, 17:02   #17
 
Lateralus's Avatar
 
elite*gold: 0
Join Date: May 2005
Posts: 1,892
Received Thanks: 920
Quote:
Originally Posted by NovaCygni View Post
1) Theres a server side check for the CPs,
2) Editing the Conquer.exe file doesnt bypass this check, it allows Client sided edits to work, but as for Server side Not a chance
3) So far as I believe, theres no Public Proxys yet, and as for one that'll let you Send/Recieve Packets as strings well you havnt a chance in hell cause there NEVER gonna be public
1. I know there's a server-sided check. In the packet, there should be a "MoneyType" boolean or byte that determines whether you're buying for silvers or CPs.
2. There's also a client-side check. When you buy items, it brings the message up.
3. Yep, no public proxies, but there's no need to send packets as strings.
Lateralus is offline  
Old 09/06/2008, 17:22   #18
 
elite*gold: 0
Join Date: Jun 2007
Posts: 48
Received Thanks: 0
3. Yep, no public proxies, but there's no need to send packets as strings.[/QUOTE]

Actually today CID proxy is hoping to be release.
jedi20111 is offline  
Old 09/06/2008, 17:29   #19
 
elite*gold: 0
Join Date: Sep 2006
Posts: 856
Received Thanks: 471
Quote:
Originally Posted by Lateralus View Post
Yep, and I think TQ hasn't added their server-sided checks for CPs.
ive heard they had, we had a discussion on it and and i believe it is server sided
XxDarkKillaxX is offline  
Old 09/06/2008, 19:44   #20
 
elite*gold: 0
Join Date: Jan 2008
Posts: 303
Received Thanks: 156
Quote:
Originally Posted by Lateralus View Post
1. I know there's a server-sided check. In the packet, there should be a "MoneyType" boolean or byte that determines whether you're buying for silvers or CPs.
2. There's also a client-side check. When you buy items, it brings the message up.
3. Yep, no public proxies, but there's no need to send packets as strings.
I see where your going with this, but theres DEFIENTLY a server side check though, and even if your client doesnt bring the message up the server side checks still take place, for example "Has user clicked Ok or Cancel", its like sending the "Has Won Monthly PK Tourni" Packet without even doing the Tourni o.o But well thats just my opinion because until tested, it can only be that a Theory...

Also, theres a need to send packets as a string if thats how your proxy handles them
NovaCygni is offline  
Old 09/06/2008, 20:26   #21
 
elite*gold: 20
Join Date: Aug 2007
Posts: 1,749
Received Thanks: 2,199
The "buy-item-from-stall-for-CPs-packet" is exactly the same packet as the "buy-item-from-stall-for-Silvers-packet", so.. yea
IAmHawtness is offline  
Old 09/06/2008, 22:15   #22
 
elite*gold: 0
Join Date: Jan 2008
Posts: 303
Received Thanks: 156
Quote:
Originally Posted by IAmHawtness View Post
The "buy-item-from-stall-for-CPs-packet" is exactly the same packet as the "buy-item-from-stall-for-Silvers-packet", so.. yea
My understanding was it Does a check on a stall server side to see what the person was charging for there item IDxxxxxxx (* Cps/Silvers *) and THEN takes it (* Cps/Silver *) from purchaser and gives to stall ... It then Deletes the item from the Stall, Runs a check to make sure no item IDxxxxxxx (* the same item *) is still present on server, If its not (* Obviously in a staight purchase, it wont be*) then upon making the check itll create the item IDxxxxxx for the other person... (* If it is present it ends transaction *) Transaction complete....


Well now In danger of stating the obvious, the easyist way to exploit this transaction is if the person who owns the stall was say , not honest about the process, it would in theory be possible to block the remove item packet for the item, so when the check for if the items present happens, itll stop as the server thinks its cloning a item already in the server, so the person would pay, but not recieve the goods... but once again, just my opinion Now if this was put in the "Trade" scenerio...


Oh heres the best ASM book ive found so far, if your having a look into the exe and wanna have a good read ^^ Enjoy
Attached Files
File Type: pdf ArtOfDisassembly.pdf (2.09 MB, 20 views)
NovaCygni is offline  
Thanks
1 User
Old 09/06/2008, 23:04   #23
 
elite*gold: 0
Join Date: Oct 2006
Posts: 90
Received Thanks: 5
I heard its possible to change the CP and money on client side but when server checks it, money is realised as CPs (because of the box ID's) and CPs as money. It would take a complete A-Hole to do something like this spending the time searching and putting into effect but not everyone in the world is a nice person.
chrisbond is offline  
Old 09/07/2008, 02:15   #24
 
Lateralus's Avatar
 
elite*gold: 0
Join Date: May 2005
Posts: 1,892
Received Thanks: 920
Quote:
Originally Posted by chrisbond View Post
I heard its possible to change the CP and money on client side but when server checks it, money is realised as CPs (because of the box ID's) and CPs as money.
You're right about that. That's only by using a memory editor though.


Quote:
Originally Posted by IAmHawtness View Post
The "buy-item-from-stall-for-CPs-packet" is exactly the same packet as the "buy-item-from-stall-for-Silvers-packet", so.. yea



Quote:
Originally Posted by NovaCygni View Post
Oh heres the best ASM book ive found so far, if your having a look into the exe and wanna have a good read ^^ Enjoy
This is coding in ASM, not reverse engineering. Completely different things.
Lateralus is offline  
Old 09/07/2008, 13:24   #25
 
elite*gold: 0
Join Date: Jul 2008
Posts: 10
Received Thanks: 0
Quote:
Originally Posted by chrisbond View Post
I heard its possible to change the CP and money on client side but when server checks it, money is realised as CPs (because of the box ID's) and CPs as money. It would take a complete A-Hole to do something like this spending the time searching and putting into effect but not everyone in the world is a nice person.
that's what i actually thought but it's hard to dind the memory addresses!

anyone found it?
argnain is offline  
Old 09/07/2008, 20:13   #26
 
elite*gold: 0
Join Date: Mar 2008
Posts: 15
Received Thanks: 0
I think it all based in client refresh sometimes when i trade alot various items when i close window with items i didnt wana buy and open a new trade window the items are there so if this posible with items why not with cps the items i c are clientsidet but stil when u put ur items in and click ok then the server dont C ntg worng and u lose on it

Sry for my eanglish its not my native language hope u guys get the point
adrianek18 is offline  
Old 09/07/2008, 23:43   #27
 
elite*gold: 0
Join Date: Jul 2006
Posts: 47
Received Thanks: 4
Quote:
Originally Posted by NovaCygni View Post
My understanding was it Does a check on a stall server side to see what the person was charging for there item IDxxxxxxx (* Cps/Silvers *) and THEN takes it (* Cps/Silver *) from purchaser and gives to stall ... It then Deletes the item from the Stall, Runs a check to make sure no item IDxxxxxxx (* the same item *) is still present on server, If its not (* Obviously in a staight purchase, it wont be*) then upon making the check itll create the item IDxxxxxx for the other person... (* If it is present it ends transaction *) Transaction complete....


Well now In danger of stating the obvious, the easyist way to exploit this transaction is if the person who owns the stall was say , not honest about the process, it would in theory be possible to block the remove item packet for the item, so when the check for if the items present happens, itll stop as the server thinks its cloning a item already in the server, so the person would pay, but not recieve the goods... but once again, just my opinion Now if this was put in the "Trade" scenerio...


Oh heres the best ASM book ive found so far, if your having a look into the exe and wanna have a good read ^^ Enjoy
If one could do that, couldn't they also create a cloning program if it blocked the remove item packet and then sent a message to the server that it was removed?
CONights is offline  
Old 09/08/2008, 09:05   #28
 
elite*gold: 0
Join Date: Aug 2007
Posts: 295
Received Thanks: 89
Quote:
Originally Posted by CONights View Post
If one could do that, couldn't they also create a cloning program if it blocked the remove item packet and then sent a message to the server that it was removed?
Check the bold bit
Quote:
itll stop as the server thinks its cloning a item already in the server
And also....

Quote:
Runs a check to make sure no item IDxxxxxxx (* the same item *) is still present on server
Some-Guy is offline  
Thanks
1 User
Old 09/08/2008, 15:25   #29
 
elite*gold: 0
Join Date: Jan 2008
Posts: 303
Received Thanks: 156
Quote:
Originally Posted by Some-Guy View Post
Check the bold bit

And also....
lololololol But yeh im right though arnt I? Sure thats what was patched when *Coughs* Mayfaire had the cloning happening on it...

Quote:
Originally Posted by Lateralus View Post
in ASM, not reverse engineering. Completely different things.
You would want someone to attempt to reverse something using ASM when they dont even understand what the code there looking at a) does b) is structured c) Its limitations Thats either incredibly time-wasting, or incredibly stupid,,, probably equal amounts of both... but then strangely sounds like the sort of thing I wouldve done
NovaCygni is offline  
Old 09/08/2008, 21:46   #30
 
Lateralus's Avatar
 
elite*gold: 0
Join Date: May 2005
Posts: 1,892
Received Thanks: 920
Quote:
Originally Posted by NovaCygni View Post
You would want someone to attempt to reverse something using ASM when they dont even understand what the code there looking at a) does b) is structured c) Its limitations Thats either incredibly time-wasting, or incredibly stupid,,, probably equal amounts of both... but then strangely sounds like the sort of thing I wouldve done
Why jump into learning how to CODE in ASM when you can learn straight off how to REVERSE? You'd jump into a lot of concepts that you don't need in reversing by using that book (or at least they aren't needed to know in such great detail). Plus, those using the book most likely wouldn't be able to crack obfuscated software.

Now don't get me wrong, you could learn using the book. But if you're not coding in ASM, I'd suggest you go straight into reversing. It's not as hard as everyone thinks, and is a great way to understand concepts in other languages.

Actually, what I plan on doing is getting through this 40 video tutorial (I'm on lesson 19), then learning how to code in ASM, and going back through the tutorial once I understand some coding.

But believe me, I'm fairly good at reversing and I have no clue how to code in ASM.
Lateralus is offline  
Reply


Similar Threads Similar Threads
Brian, kinda need ur help.
02/19/2010 - Grand Chase Hacks, Bots, Cheats & Exploits - 3 Replies
sire, thanks a lot for the hacks, but it really not nice to hear that we are loosers in pvp. im totally freaked out of those speedhackers and sometimes, they had mphacks to. please kinda make one,, esp.speedhack. enx in advance
I'm new (kinda)
01/21/2010 - Say Hello - 2 Replies
had already since 2007 an account, but getting now a bit active :P so..., Hi ;-) it's nice to be here ^_^
What Kinda Blues These ?
10/26/2009 - Silkroad Online - 9 Replies
http://i36.tinypic.com/t7em1x.jpg Anyone know how we can get these blues ?
MAKIN +12 ITS BUG KINDA NEED HELP
04/02/2009 - CO2 Exploits, Hacks & Tools - 9 Replies
i found a bug that can make ur items into +12 how? 1st get free items +3 +4or higher and compose it in ur items those free items can be compose successively...it will not dissappear... reapeat it all over again untill boom ur items are all +12... THanks are Appreciated
kinda new here
07/23/2008 - Say Hello - 1 Replies
hello everyone,in jerran from phil.. just looking 4 bot in PW ph.. can u pls help me?



All times are GMT +1. The time now is 14:54.


Powered by vBulletin®
Copyright ©2000 - 2026, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2026 elitepvpers All Rights Reserved.