[Release/ Discussion] New gateway/agentserver flood exploit.

Haze* · 05/15/2013, 15:34

Quote:

Originally Posted by Kevin1337*

lawl seems like you'r making fun of him

No, that would be inappropriate! How could I...

PS: Giving away free Dota2 gifts. 24 copies left, whoever wants one for free leave me a PM.

sarkoplata · 05/15/2013, 15:51

Quote:

Originally Posted by Haze*

No, that would be inappropriate! How could I...

PS: Giving away free Dota2 gifts. 24 copies left, whoever wants one for free leave me a PM.

Come to LoL noob

Haze* · 05/15/2013, 15:57

Quote:

Originally Posted by sarkoplata

Come to LoL noob

I ain't playing Dota2, I just happen to get shitloads of invites from Valve after I've signed up for the beta some time ago. I did play LoL with ma bro like a year ago, been kinda good at it :P Now I'm just playing SC2, working ma *** to get to master league.

鳳凰城 · 05/15/2013, 16:43

You don't say.jpg

~~WickedNite~~ · 05/15/2013, 18:37

Quote:

Originally Posted by Haze*

I ain't playing Dota2, I just happen to get shitloads of invites from Valve after I've signed up for the beta some time ago. I did play LoL with ma bro like a year ago, been kinda good at it :P Now I'm just playing SC2, working ma *** to get to master league.

HoN way better, but also having 20 dota2 invites

PortalDark · 05/15/2013, 18:47

ok, enough dota/lol/hon
this is SRO

Qynchou · 05/15/2013, 19:31

Mid or feed.

Jimmy* · 05/16/2013, 12:10

any way anyone fixed it or not yet !?

magicanoo · 05/21/2013, 17:42

Hmm,can someone tell what is the nature of packets sent?and their signature?

cheers

LemoniscooL · 10/06/2013, 20:45

that tool doesnt do any harm to any of my agentservers .. and aside of that the op code used (0x7777) isnt even defined inside the different agentservers i have .. i dont know what you guys want ^^
i mean .. there actually IS a new agentserver exploit but its not this tool and its also not opcode 0x7777

bxxb · 10/06/2013, 21:31

At last a proper disscussions to summon all i'm quite interested weres this go

LemoniscooL · 10/06/2013, 21:36

does this tool crash the agentserver for anyone? The guy who showed me this thread is saying its crashing his agentserver so i decompiled the source of this tool to see if there is something else being used than 0x7777 but its not

in case this tool can crash your agentserver or harm it in any other way, open it in ollydbg and search for PUSH 7777, if you found something (which is very unlikely) replace 7777 with any other value and save the changes, it should be fixed then but dont think youre save then .. i know there is another opcode thats crashing the agentserver instantly which will also work on your gameserver, and for the gameserver i know there are 3 other opcodes that will crash it with c++ error and in addition to that all of those opcodes can also make your gatewayserver go down... so there are a lot exploits out there atm...

~~Anonymous-6723~~ · 10/07/2013, 05:22

Quote:

Originally Posted by LemoniscooL

does this tool crash the agentserver for anyone? The guy who showed me this thread is saying its crashing his agentserver so i decompiled the source of this tool to see if there is something else being used than 0x7777 but its not

in case this tool can crash your agentserver or harm it in any other way, open it in ollydbg and search for PUSH 7777, if you found something (which is very unlikely) replace 7777 with any other value and save the changes, it should be fixed then but dont think youre save then .. i know there is another opcode thats crashing the agentserver instantly which will also work on your gameserver, and for the gameserver i know there are 3 other opcodes that will crash it with c++ error and in addition to that all of those opcodes can also make your gatewayserver go down... so there are a lot exploits out there atm...

How will you crash "my" gameserver if my port is closed =) ?

鳳凰城 · 10/07/2013, 15:45

By another model? XD

LemoniscooL · 10/08/2013, 10:56

Quote:

Originally Posted by Zed*

How will you crash "my" gameserver if my port is closed =) ?

i idnt mean that I will crash anyones gameserver, i just know that they exist (fixed them on my server thats why i know they exist)

but ive come up with another problem my agentserver is being spammed with wrong packets of opcode 6203 (which is used for the login) it doesnt do any harm in the beginning but after a while it leads to login problems (players cant login after they logged out because their account seems to be still connected)

the problem is i have bots allowed on my server so i cant simply change the opcode in client/server because it would make bots useless (as they couldnt login anymore) soo i want all programmers to help me figure out a way to block any packets that do not have the proper length etc like a filter or sth like that (if someone has any idea post here or write me a PM)