-===New Exploit (Mini SQL Injection)===-

[S.T.A.L.K.E.R.]

 

so you mean sql injection via memory editing' date=' its method №5 right?

 

 

 

(1st post updated)[/quote']

 

 

 

1/2 , lol.... half method №5

[arielsat]

other way is a commands to use soulshots, potions ,scrolls , all things that need database

 

 

 

BR , from BG

[arielsat]

look what happend , then item server ( MSSQL server) down , what not working :-)

[pirulo]

i made a query to see another ppls passwords..

 

u need only account id (using l2logger) account name n right table..

 

 

 

Right commands : /dismiss ' date=' /invite , /allyinvite (targeting the victim u want to steal) , /friendelete

 

 

 

P.S I will NOT post it inpublic.[/quote']

 

 

 

oh really? u are the only person i see to decrypt MD5

 

 

 

w00T!!!!

[theone]

i made a query to see another ppls passwords..

 

u need only account id (using l2logger) account name n right table..

 

 

 

Right commands : /dismiss ' date=' /invite , /allyinvite (targeting the victim u want to steal) , /friendelete

 

 

 

P.S I will NOT post it inpublic.[/quote']

 

 

 

oh really? u are the only person i see to decrypt MD5

 

 

 

w00T!!!!

 

 

 

You don't have to decode MD5, just encode the desired password, and change it with an update query

[capeta]

how update a query to server??? 8) explain master!

[impero]

Hi.I ve tried in private server i play and it doesnt work' date=' but i think could be sintax error.So if i want be GM i have to write this in chat window:

 

 

 

/loc 'exec(lin_setBuilderAccount something,1)--

 

 

 

or the sintaxe is other? ex:

 

 

 

/loc 'exec(lin_setBuilderAccount 'something',1)--

 

 

 

/loc 'exec(lin_setBuilderAccount something,1)[/quote']

 

 

 

 

 

 

 

hi !

 

 

 

yes this guy has a point !

 

 

 

for example the account is : maxtor

 

 

 

take this example and spell the command for us ..so we can be sure that it was patched , because else we think that we are the reason ...cause we spelled it wrong !

 

 

 

 

 

pls

 

 

 

pls

 

 

 

pls

 

 

 

 

 

 

 

:)

[Francislaremote]

I think it was /loc 'exec(lin_setBuilderAccount 'something',1)--

 

But try all possiblities, it's not that long.

[BlackBerry]

Erm... If you set your account to admin-status, will you be visible in /gmlist ? That would not be so good...... :shock:

[RapGame]

nope if you set it to be invisible to gmlist.. the only place where you could get counght is Character table :P

[BlackBerry]

Do you mean the community-list, which you can get into by pressing alt+b ?

[Deathdemo]

The bbs system is disabled in most off server (almost everyone)

 

and @theone can't do that it's fixed decoding is the only solution

[capeta]

this is not patchable, is mysql security LOL... or u think mysql is a freeworld to u touch?! ^^ u can set this in mysql and before u all talking in exploitableaejiohdahfuiha man try make a deface first of all.

 

 

 

this is patetic! no SS only words LOL, bb love all.

[chinoska]

its working on some l2j servers

[D3athmasteR]

all servers have fixed it hello!!!that was a problem on OFFICIAL client and the stop selling the game for a moment then they fixed that and they started sell l2 c4