Telnet & 8.1

[mongreldogg]

Hello guys.
Never known i would ask such a stupid question again here

Thought working with GS 8.1 telnet would be easy. But have some problems - GS actually disconnect me after any attempt of sending any data after establishing a connection. And to be very honest, i have never had a deal with rappelz remote commands execution.

Just wondered if there are some examples of packet structures to autorize GS telnet and send commands? Or does it actually has any difficult structures?

And i also heard that telnet functionality is disabled in 8.1 GS, please tell me its a lie. If it is...

[TheSuperKiller]

in fact it's a lie ; after almost one year using automated telnet commands 24\24 on my dedicated server , I never had any problems with it .

[marekrndr]

TelNet in 8.1 is still there, you just need to add this line -

S console.port:4500
S console._password:4571a22a4c05c3c3
S console.allow_ip:*.*.*.*

[mongreldogg]

yep already got it but thanks anyways.
please close

[malaysiawap]

Here is my simple telnet command for the GS using PHPTelnet Class.

Ref for another documentation:




installation

Download the PHPTelnet class and put it on your selected folder and copy the function below and put it into your index.php or your custom function.

function TelnetCommand($command){
require_once "PHPTelnet.php";

$telnet = new PHPTelnet();
// if the first argument to Connect is blank,
// PHPTelnet will connect to the local host via 127.0.0.1
$result = $telnet->Connect('127.0.0.1','','TELNETPASSWORD_HASH');
if ($result == 0) {
$telnet->DoCommand(''.$command.'', $result);
//$telnet->Disconnect();
}

}

how to use ?.

TelnetCommand('Telnet Command');

Example:

TelnetCommand('#add_state(2610,100, 360000, "username")');

TelnetCommand('#notice("Hello")');

[Toper12345]

Heeeelp, I entered Telnet 127.0.0.1 44452, but then I am asked for a password, where to get this password?

[ThunderNikk]

The password is "genius"

That's why the telnet console is so dangerous.

Everyone knows your password.

[thefear511]

Originally Posted by ThunderNikk

The password is "genius"

That's why the telnet console is so dangerous.

Everyone knows your password.

lol someone actually hacked my server this way, he even decrypted the auth password and got access to SQL.
p.s: he's a Reverse Engineering student so that's how he decrypted the auth pass as he told me.

[c1ph3r]

Originally Posted by thefear511

lol someone actually hacked my server this way, he even decrypted the auth password and got access to SQL.
p.s: he's a Reverse Engineering student so that's how he decrypted the auth pass as he told me.

It's possible to change that pw:

Hashed:
S console._password:4571a22a4c05c3c3

Don't know if this is still working:
S console.password:YourPW

[SilentWisdom]

In 9.4 the console password can not be set via opt to my testing, must be hexed.

[ThunderNikk]

Maybe it is a new des hash?

[SilentWisdom]

Originally Posted by ThunderNikk

Maybe it is a new des hash?

No the GS does not store a setting that recognizes the pass word.

[c1ph3r]

It's console._safetypw now but looks like new hash format

But I could be wrong. Perhaps somebody could test it with the old hashes. I only checked captain herlock with a hex editor on my mobile and can't test at the moment. I was talking to InkDevil and he said it isn't working with the old hashes. But for me it doesn't sound logic if they use 2 different encrypting methods for passwords in the opt files.

I used google to search for the parameter and found a post by ghost. He allready mentioned that parameter but didn't say something about new encryption.

Perhaps somebody is able to test it with old encryption. Otherwise I will check tomorrow.

[SilentWisdom]

Originally Posted by c1ph3r

It's console._safetypw now but looks like new hash format

Time to talk to Glandu2 then huh ha ha

[InkDevil]

Originally Posted by c1ph3r

It's console._safetypw now but looks like new hash format

But I could be wrong. Perhaps somebody could test it with the old hashes. I only checked captain herlock with a hex editor on my mobile and can't test at the moment. I was talking to InkDevil and he said it isn't working with the old hashes. But for me it doesn't sound logic if they use 2 different encrypting methods for passwords in the opt files.

I used google to search for the parameter and found a post by ghost. He allready mentioned that parameter but didn't say something about new encryption.

Perhaps somebody is able to test it with old encryption. Otherwise I will check tomorrow.

Checked it now again in several ways.
If you use the old encryption and change via console._safetypw, you have changed the password, but it denies access when trying to use your hashed pw.

So I'd also think it's a separate encryption.