[Exploit|Theory]Dupe items

[Doa-]

Originally Posted by Dooh

I have a few more possible methods in my head.
But none of them seem likely to work.

Well, time to "Think outside the box" i guess.

If you wanna talk more.. pm me your msn and we can maybe try together.. Im not the most pro at all the programming stuff but I have been playing shaiya for 3 years and I know a good bit about duping. 2 heads are better than 1 :P.

[Dooh]

Originally Posted by Doa-

If you wanna talk more.. pm me your msn and we can maybe try together.. Im not the most pro at all the programming stuff but I have been playing shaiya for 3 years and I know a good bit about duping. 2 heads are better than 1 :P.

I think we have talked about one of my theory's already :P
However you didn't think it was possible :P

Anyhow feel free to add my msn:

[SiggyMaker]

Originally Posted by Doa-

If you wanna talk more.. pm me your msn and we can maybe try together.. Im not the most pro at all the programming stuff but I have been playing shaiya for 3 years and I know a good bit about duping. 2 heads are better than 1 :P.

we know you know a lot about duping doa

[Doa-]

Originally Posted by SiggyMaker

we know you know a lot about duping doa

Erm, dont start flaming me on another forum now.

Im trying to dupe on OS anyway, so why do you care? seriously just gtfo or stop talking to me.

[SiggyMaker]

Haha ^^

[shaiyaseller]

they spawned gold bars by a database exploit. they could tell the database directly to add x amount of any item to your wh slot 1 or something. they could also do things like give GM abilities to an account, but that would be more easily trackable. they just spawned gold at the database level. but its not worth discussing anymore as database inputs were entirely changed in ep5.

[ijustwannaread]

Since there are still some interested and I'm feeling generous, the database exploit is still there. Your problem will be with the new database structure in EP5 and not being able to make a SQL statement that will accomplish anything. If you have time, you can maybe guess the new fields in the tables.

Your clues:
1) Run a private server.
2) Look for SQL statements within stored procedures.
3) Find the one that is sanitized poorly and exploit it.
4) Make money.

There are multiple versions of this exploit. One involves editing the client to accept a certain character as valid input while the other does not. Have fun, script kiddies

[taco87]

I dont know..

But there is still alot of Duping in Shaiya US
Don't ask me for Details, but i have seen one Guy duping Stuff right in front of my Eyes when i was running in Iris towards linked battlezone and accidently entered the wrong Path.

You know what i mean.. He stood there with a 2nd, naked, Toon which kept dissapearing and coming back 5-6 Times.

2 Days later that guy made an offer for an Item, 183 OPs
yay.

[shaiyaseller]

Originally Posted by ijustwannaread

Since there are still some interested and I'm feeling generous, the database exploit is still there. Your problem will be with the new database structure in EP5 and not being able to make a SQL statement that will accomplish anything. If you have time, you can maybe guess the new fields in the tables.

Your clues:
1) Run a private server.
2) Look for SQL statements within stored procedures.
3) Find the one that is sanitized poorly and exploit it.
4) Make money.

There are multiple versions of this exploit. One involves editing the client to accept a certain character as valid input while the other does not. Have fun, script kiddies

Damnit, i thought you wanted to keep that secret xD

[Ace-]

Curse it all, I saw the same, Taco. I saw someone "duping" items (wish I knew how to do the same) A few days later I noticed on TC he wanted to buy lvl 68 warr set for 90op each piece x.x. . .

ps: Don't post REAL WORKING dupe methods, freaking shaiya is lurking everywhere, use pm's or emails to help others

[RicardoSi]

Indeed they sneak into every forums to see the advances from hacker community xD.. anyways :P there was a time where you could just had a modified client which could let you use a GM tag ( (GM) or [GM] ) and make the client connect to the server making it think you were a GM . with that you could just have the GM power and do something like this /imake [item of your choice] just had to find the right sent/received packets and do some real time changes simple as Reverse Engineering :P

[shaiyaseller]

Originally Posted by RicardoSi

Indeed they sneak into every forums to see the advances from hacker community xD.. anyways :P there was a time where you could just had a modified client which could let you use a GM tag ( (GM) or [GM] ) and make the client connect to the server making it think you were a GM . with that you could just have the GM power and do something like this /imake [item of your choice] just had to find the right sent/received packets and do some real time changes simple as Reverse Engineering :P

you mean having a name with [GM] in it?

That's not possible. your name is just a string value in the database, your admin rights is an entirely different value that can't be 'edited' like you're talking about.

[RicardoSi]

That was an info i got from someone who claimed to done it. He told me something more.
Once connected to the server your rights are set according to your account, but there was a flaw in it. What u had to do is to analyze the packets u send and received from server . Ex.: sending this command /town u will send a packet containing the command server responds telling u that u have the right to do it and then client send another packet to server telling what to do. There was the catch ... the packet received telling you if u had the rights could be used with other command ... so when u send this command /imake [item] and copying the packet from above ( /town command ) and make client receive it instead of the true packet from server you could make client send a response to server make it believe you had the right to do it. It was a flaw which is not possible anymore ... the guy who tole me about this spawned and killed Kimu in my front at map 2 near the sealakels at ep3. Anyways ... the guy got banned or ip banned case i didnt see him since ep4
Editing the packets on the way to each side is a good start ... just need the patient to Analise all packet address and the knowledge
And again wasnt me who did this lol !

[shaiyaseller]

Originally Posted by RicardoSi

That was an info i got from someone who claimed to done it. He told me something more.
Once connected to the server your rights are set according to your account, but there was a flaw in it. What u had to do is to analyze the packets u send and received from server . Ex.: sending this command /town u will send a packet containing the command server responds telling u that u have the right to do it and then client send another packet to server telling what to do. There was the catch ... the packet received telling you if u had the rights could be used with other command ... so when u send this command /imake [item] and copying the packet from above ( /town command ) and make client receive it instead of the true packet from server you could make client send a response to server make it believe you had the right to do it. It was a flaw which is not possible anymore ... the guy who tole me about this spawned and killed Kimu in my front at map 2 near the sealakels at ep3. Anyways ... the guy got banned or ip banned case i didnt see him since ep4
Editing the packets on the way to each side is a good start ... just need the patient to Analise all packet address and the knowledge
And again wasnt me who did this lol !

I can believe that, packet injection was a lot more useful in older episodes lol... like, you could do anything xD

I've been told it was possible to use other class skills through packet injection.

[IdioticLaughter]

Honestly, I am completely clueless about how to use the database exploit. I am not exactly a computer genius. If anyone could PM me with either details on how to do it, a video, or maybe just somewhere where i could learn what i need to know to accomplish it i'd appreciate it.