Quote:
Originally Posted by Truth1010
I would love to see a little more input on this from Nubness [...]
|
Client sided protection was always something of vital importance to a private server's game play, and I can tell you that as of this day, October 22, 2014, there is only one server whose client is completely secure against any hack -
.
The most common method admins have been using against cheats is packing the game.exe. While that's a decent option that will prevent the lazy from digging further after the game detects a hack and crashes, it's fairly easy to get another game.exe, modify the IP address to the one of the server you're trying to be a bad boy in.
Later on, admins started changing the ports for the Login and the Game server services. While that's an even better option on top of packing the executable, and maybe not as easy to get past, it still can be bypassed by anyone who knows how to follow
.
A little bit about the version check:
RebeccaBlack's
has the option to bypass the client version check. Those who were curious to see what gets changed when you patch your game.exe with that option, it changes the version to FF FF FF FF, which is UInt32.MaxValue. I was told it causes an overflow on the server check, which is why it lets the client through.
So far, the only server (that I'm aware of) where this trick doesn't work is Shaiya Tactics.
While working on the
, the only way I could get past the version check was by finding it in their packed game.exe and applying the same one in mine.
Some time after that, Shaiya Tactics introduced another security patch, in which the new version was obfuscated inside their already packed executable. God bless Eric Heijnen and Oleh Yuschuk. Thanks to them it only took me around 10 minutes to get past the obfuscated version, thus rendering a Shaiya Tactics security patch useless for the second time.
As you can see, all it takes to get past client security is a little reverse engineering knowledge and a guy with a vendetta.
NOTE : Anything that is executed on the client side can be exploited, and I mean anything. The question is how long it's going to take, and whether it's worth the time spent.
P.S. This post was not meant to bash Shaiya Tactics whatsoever. I was merely expressing my admiration for them actually attempting to do more than most other servers ever did in matter of client security.
