[Release] Packet injector(Source)

[theross]

Funny release, but this sounds like blacklisting
You're forcing people to use your "product" to protect them from your exploit.
It's like hyperfilter ddossing servers for people to come there
or
it's like av-software releasing viruses for people to buy their AV
or
it's like a glass-manufacturer throwing rocks at people's windows

Anyway - this exploit has been known by some people privately. So releasing this increases the awareness of server owners.

By the way: anyone messed around with joymax and tried these OPCodes on the official servers?

[DaxterSoul]

Originally Posted by theross

By the way: anyone messed around with joymax and tried these OPCodes on the official servers?

Yea...

[​Goofie​]

Originally Posted by theross

Funny release, but this sounds like blacklisting
You're forcing people to use your "product" to protect them from your exploit.
It's like hyperfilter ddossing servers for people to come there
or
it's like av-software releasing viruses for people to buy their AV
or
it's like a glass-manufacturer throwing rocks at people's windows

Anyway - this exploit has been known by some people privately. So releasing this increases the awareness of server owners.

By the way: anyone messed around with joymax and tried these OPCodes on the official servers?

You can see it as that, I'm not forcing anyone to choose "My protection" there is plenty of people which already fixed these injected packets. There is releases in Ollydbg how to fix them.

I released it to public for learning purpose and for finding more injections.

Note:
Private servers is more protected then official Joymax servers. So yeah, many stuff still works there.

Also:
You can crash Official Joymax servers with flooding real packets, etc char movement or login screen opcode.

:Off topic:
900 post hype :|

[gimme5bucks]

maybe you would try to run an exploit support a zerk bug or smth like that , infinite zerk potions .. good topic & good luck

[BlastWarrior]

Can u explain how use it cuz i do command and nothing happen test on servers

[​Goofie​]

Originally Posted by BlastWarrior

Can u explain how use it cuz i do command and nothing happen test on servers

Add me on Skype and I will show you at Teamviewer.

[blapanda]

Originally Posted by theross

By the way: anyone messed around with joymax and tried these OPCodes on the official servers?

Yes, back then, "people" even messed with other opcodes.
Getting invisible and messing around with people... isn't that funny.

Joining a party and insta killing those, or people being in range and abusing unused skill parameters... that is funny! And no. No one is going to make that public.

[​Goofie​]

Originally Posted by blapanda

Yes, back then, "people" even messed with other opcodes.
Getting invisible and messing around with people... isn't that funny.

Joining a party and insta killing those, or people being in range and abusing unused skill parameters... that is funny! And no. No one is going to make that public.

See it on the bright side, now it's released and people will adapt.

[A new hope]

Originally Posted by blapanda

Yes, back then, "people" even messed with other opcodes.
Getting invisible and messing around with people... isn't that funny.

Joining a party and insta killing those, or people being in range and abusing unused skill parameters... that is funny! And no. No one is going to make that public.

Unused skill params? :O wow. that sounds fun.

i remember the party insta kill thing, someone used it on isro in ~2009 xD

[.Xen]

..

[sertantoto]

hi could you do a list of commands and what we can do please?

[gimme5bucks]

well it was working before , now they fix it , can you release another version that fits ? or it's fixed like for ever ?

[​Goofie​]

Originally Posted by sertantoto

hi could you do a list of commands and what we can do please?

Read the thread

[theross]

Originally Posted by blapanda

Yes, back then, "people" even messed with other opcodes.
Getting invisible and messing around with people... isn't that funny.

Joining a party and insta killing those, or people being in range and abusing unused skill parameters... that is funny! And no. No one is going to make that public.

I think neither of both is funny.
As long as you cheat any kind of interaction with other players, then it'S really low.
I'd find leveling the char with the invis exploit pretty interesting. you could level pretty fast and pretty secure like that.
Not playing SRo anyway, so I'm cool with it. Was just wondering if Joymax fixed this. If not, they'll fix it with the next server maintenance

Tried this on Silkroad Evolution - didn't work. no DC and no invis
(was the only server from which I had an account)

[​Goofie​]

UPDATE:

• 2015-02-11
• + Added invincible.
• + Added deadstate.
• + Added CharName injector.
• * Rephpd it abit :3

Thread updated:
Since I got some hate regarding that I "force" people to use my protection, I will release how to solve the released injections in a filter:

 Spoiler

Zerk hack

PHP Code:

;Agent
Client->Server Opcode(0x70a7)

if(_pck.Opcode == 0x70a7) {
    if(_pck.ReadUInt8() != 1) {
        /*
            Here is where you set what you want to do with the "injectors"
            ETC:
            DISCONNECT, CONTINUE, BAN.
        */
    }
} 


CharName injection

PHP Code:

;Register a boolean at the top of ur context
bool CharName_sent = false;

;Agent
Client->Server Opcode(0x7001)

if(_pck.Opcode == 0x7001 && (!this.CharName_sent)) {
    // Register
    this.CharName_sent = true;

    // CharName
    this.charname = _pck.ReadAscii();
} 


Avatar injection

PHP Code:

;Agent
Client->Server Opcode(0x34A9)

if(_pck.Opcode == 0x34A9) {
    // Avatar blue name
    string avatar_blue = _pck.ReadAscii().ToLower();

    if(!avatar_blue.Contains("avatar")) {
        /*
            Here is where you set what you want to do with the "injectors"
            ETC:
            DISCONNECT, CONTINUE, BAN.
        */ 
    }
} 


Region injection

PHP Code:

;Agent
Client->Server Opcode(0x7021)

Change it from "Client->Server" to "Server->Client"
Server-Client Opcode(0xB021) 


New Video:

Gallery 1

Download link: