[Release] How to resolve attack on classic NPCServer

[zukoo]

In Brazil, some dirty administrators attack other servers instead of helping the growth of the eudemons community, perhaps that is why players are reduced in Brazil and other countries.

I reported this weakness a few years ago, however, I received no response or help.

So, I decided to come up with a provisional solution:

 Spoiler

You need to change the port of MSGServer.exe

1: To do this, download and install HxD or any other hexdecimal editor -

2. Edit MSGServer.exe by hexdecimal editor

3. Search for the MSGServer port, in this case the default is 5816, transforming it into hexdecimal, we will have 16B8
(Remember that hex reading is inverted, that is, you need to search for B816)





4. Convert port your new port from decimal to hexadecimal

5. Now replace and save

6. Additionally, you also need to change the default port in gameserver/config.ini

Now just connect your server and be happy!!
Some admins will be angry about helping others protect themselves, but we need to protect the spirits of Eudemons players online!

Remember to be grateful

[-Immortality-]

thank you my friend. you save my life

[zukoo]

Originally Posted by -Immortality-

thank you my friend. you save my life

No problem. but remember to click the thank you button

[DuaSelipar]

there are lots of B816.. which offset?

[zukoo]

I don't remember very well, but try the offset B9F2

[Demonology]

Thanks for looking out for what little of this community is left!

[biloka]

Sem Duvida esse e o Melhor post da area de Eudemons... Ipaguei 100,00 para fazerem pra mim uns meses atras, mas o mesmo nao quis me encinar nem pelo triplo desse valor, pois eu disse para o mesmo que iria postar o vide para que todos aqueles que queira abrir seu servifor e colocar suas ideias a publico, que tenha a mesma oportunidade de um veterano. mas ao dizer isso o mesmo negou em ajudar, mesmo que estaria sendo remunerado, nao pensou duas vezes em dizer nao... Entao mais uma vez PARABENS pelo melhor post desse categoria...

[marcomamdouh8899]

actually after you do all of this
they can simply go to task manager>performance>open resource monitor> network
tap process with network activity
check mark on soul.exe
it will reveal the new port

[iamfree55wkda]

then we need to change ports from client too? and where i can find ports in client.

[Dilff]

No matter what you change you can see which ports are being used vs what you know you already use.
So if you know nothing you use is using port 90 for example, but port 90 gets used once you open the client. then obviously the server is using port 90.
an alternate way of doing this is seperating VPS.
run acc/msg/npc on seperate machine than the DB is.
We cant see that the msp/npc/acc servers are connecting to another IP


edit: if you really want to get detailed you should look into port knocking.

[revinmage2]

Nothing you're doing is going to work. There are several backdoors in the client/server. Those who really understand these things can perform a denial-of-service attack, so you won't be able to keep the server running anymore. The people who released these sources in the past did so with many flaws and errors, and these cannot be fixed. Unfortunately, you haven’t helped much either. It seems the Brazilian community doesn’t look kindly on you. No offense.

[zukoo]

Originally Posted by revinmage2

Nothing you're doing is going to work. There are several backdoors in the client/server. Those who really understand these things can perform a denial-of-service attack, so you won't be able to keep the server running anymore. The people who released these sources in the past did so with many flaws and errors, and these cannot be fixed. Unfortunately, you haven’t helped much either. It seems the Brazilian community doesn’t look kindly on you. No offense.

Apparently, there's a major text interpretation issue. In the content I published, I make it clear that this is temporary, not definitive. Many of the administrators who attack other servers have little technical programming knowledge, which is why I didn't include this information in the poster, precisely because, surprisingly, many of them only realized this limitation after other administrators pointed it out here.

Furthermore, I commented on this flaw in a more recent post, where I describe the vulnerabilities involved, including this one.

Regarding the "Brazilian community," it's important to clarify: are we talking about the administrator community or the player community? If we're talking about administrators, I can safely say that I'm the only Brazilian who actively contributes to the community, whether here or on other forums. There are several tutorials I've authored available.

If the reference is to players, it's natural to have differing opinions. Some are satisfied, others not so much. Still, I can guarantee that my server is among the most complete and has the highest average player count online. The only Brazilian who can get over 100 players online simultaneously.

Finally, I don't understand why I'm paying attention to this, since your opinion, like yours, with all due respect, has no significant relevance.

[revinmage2]

Originally Posted by zukoo

Apparently, there's a major text interpretation issue. In the content I published, I make it clear that this is temporary, not definitive. Many of the administrators who attack other servers have little technical programming knowledge, which is why I didn't include this information in the poster, precisely because, surprisingly, many of them only realized this limitation after other administrators pointed it out here.

Furthermore, I commented on this flaw in a more recent post, where I describe the vulnerabilities involved, including this one.

Regarding the "Brazilian community," it's important to clarify: are we talking about the administrator community or the player community? If we're talking about administrators, I can safely say that I'm the only Brazilian who actively contributes to the community, whether here or on other forums. There are several tutorials I've authored available.

If the reference is to players, it's natural to have differing opinions. Some are satisfied, others not so much. Still, I can guarantee that my server is among the most complete and has the highest average player count online. The only Brazilian who can get over 100 players online simultaneously.

Finally, I don't understand why I'm paying attention to this, since your opinion, like yours, with all due respect, has no significant relevance.

Good luck with your discovery