Jump to content

[Exploit + fix]Lets hack: Stack subclass skills ( Race condition exploit ).


Recommended Posts

Posted

wont work that way cause l2j uses a lock on subclass if i remember correctly. When something wants to change the class, it must wait in that lock for its turn.

damn >.<

anyway if i'll ever start l2 again i'll try ur way :P

Posted

no, because you do not kill the mob, someone from your party does

 

Add another simple check for party members maybe being currently in combat.

Posted

Anyway those conditions ( l2j was doing fixes that way in the past ) are not the right way to fix problems. A problem can lead to several exploits, blocking the exploit, wont fix the problem. But taking care of the problem itself, will fix all exploits related to them. When i went in some br interlude server some weeks ago, they had some protection ( l2jbrazil ) that you are not allowed to have equiped weapon when you change subclass. Obvious stupid is obvious :) Those checks can be bypassed, the solution is to lock the right function that handles the skill awarding in different cases.

Posted

Anyway those conditions ( l2j was doing fixes that way in the past ) are not the right way to fix problems. A problem can lead to several exploits, blocking the exploit, wont fix the problem. But taking care of the problem itself, will fix all exploits related to them. When i went in some br interlude server some weeks ago, they had some protection ( l2jbrazil ) that you are not allowed to have equiped weapon when you change subclass. Obvious stupid is obvious :) Those checks can be bypassed, the solution is to lock the right function that handles the skill awarding in different cases.

 

And who guarantees that your possible fix doesnt create (new) exploits as well? :D

  • 3 weeks later...
Posted

lol!

it's new. never shared before here!

BUT... a friend discovered this one 1 or 2 years before and we decided not telling it to anyone on web so it wouldnt be fixed by anyone!

but now......dmn you! :P

 

btw.sharing it is allright. but why how to fix it?

Posted

A way i propose is using a lock object that gets locked by both the two methods ( setActiveSubclass and levelUp ) so as they cant race together. Or even using the existing subclass lock they have ( i think ) in l2j. Just try to lock it when getting level up.

 

The idea behind going inside an exploit and figuring how it works is to help us discover more by understanding the mechanisms behind exploits. Btw did you guys find it by chance, just by experimenting with ingame actions ? :)

Posted

The idea behind going inside an exploit and figuring how it works is to help us discover more by understanding the mechanisms behind exploits. Btw did you guys find it by chance, just by experimenting with ingame actions ? :)

the main idea came to my friend and then we tried it and really worked!!! :D

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


  • Posts

    • Inventory restock: Premium business accounts are now available.   ✔ Wallester Business EU 🇪🇺|💳 Unlimited virtual cards, physical cards, 🏦 multi-currency IBAN, ₿ crypto & stablecoin deposits. ✔ Stripe Business UK 🇬🇧|💳 Instant virtual cards (Visa/Mastercard), high-conversion checkout, multi-currency payouts, ₿ crypto payments, no-code payment links. ✔ Mercury Business US 🇺🇸|🏦 US checking & savings, 💳 unlimited virtual cards, domestic & International wires, native stablecoin settlement. ✔ Payset Business EU 🇪🇺|🏦 Multiple IBANs, UK sort code, SEPA Instant, 💳 unlimited virtual cards, multi-currency accounts. ✔ Novo Business US 🇺🇸|🏦 Business checking account, ACH payments & invoicing, 💳 virtual & physical cards, novo boost.
    • Let me see if I understand correctly, older gentlemen, when a newcomer shows up to create modern things with the help of AI, doing what you charge them to do, you point the finger and laugh. I believe that's why everything is stagnant. The product isn't for programming experts, it's for newcomers. Don't buy from you if they can do it themselves using this base. You're going to deliver a similar product, maybe even worse than this one, so why are you complaining? PowerShell, as you well know, started with it, then came new platforms and new apps, new creation models, all with different languages; I chose the simplest one for my taste. This is about being organized and knowing how to choose the right words for each situation. It's not 100%, but it already gives a good impression. Nothing is 100%, so a topic written by AI, and all the code that you charge an absurd amount for to prohibit and sell hacks, could be open source so that everyone can create new practices, new models, new information for passing packets, prohibiting the use of cheats that cause server owners to break so much. Let's remember that the Admin doesn't always shut down the server; it's the players who find problems and take advantage by buying and reselling items, and they say that the GM shuts down the server every week, but that's a lie. What they do is duplicate items with packages and sell them, but perhaps this could give some future developers a starting point to create their own protection following the model in the initial documentation. Because none of you answer a question from a newbie, you think you're superior because you have knowledge, but with AI, people like that can have the same knowledge as you, but with less practice. And if they practice a lot, 10,000 hours, they can be as good as all of you older developers in the L2J field.
  • Topics

×
×
  • Create New...

Important Information

This community uses essential cookies to function properly. Non-essential cookies and third-party services are used only with your consent. Read our Privacy Policy and We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue..