L2PICK.com — Lineage 2 Private Server List

Web Developers Guide Cross Site Scripting

Followers

Analyser_

Members

OfflineStatus
MembersGroup
99Posts
0Solutions
0Reputation
121,742Member No
0Days Won
29/11/2012Joined
Offline Status
Members Group
99 posts
0 Badges
0 Reputation
121,742 Member No
0 Days Won
29/11/2012 Joined

N/A 0 0 0

November 30, 201213 yr

Hello I found an intresting guide for the web developers you can take a look.

Link : http://www.sans.org/reading_room/whitepapers/securecode/web-developers-guide-cross-site-scripting_988

Matthew

Members

OfflineStatus
MembersGroup
3,842Posts
0Solutions
2Reputation
90,505Member No
2Days Won
26/03/2011Joined
Offline Status
Members Group
3.8k posts
3 Badges
2 Reputation
90,505 Member No
2 Days Won
26/03/2011 Joined

100% 6 0 0

November 30, 201213 yr

Problem with site.

Analyser_

Members

OfflineStatus
MembersGroup
99Posts
0Solutions
0Reputation
121,742Member No
0Days Won
29/11/2012Joined
Offline Status
Members Group
99 posts
0 Badges
0 Reputation
121,742 Member No
0 Days Won
29/11/2012 Joined

N/A 0 0 0

November 30, 201213 yr

Author

Problem with site.

Hello my friend it opens normall for me. You may need to install some plugins.

MrHotFire

Banned

OfflineStatus
BannedGroup
1,283Posts
0Solutions
0Reputation
119,293Member No
0Days Won
21/09/2012Joined
Offline Status
Banned Group
1.3k posts
0 Badges
0 Reputation
119,293 Member No
0 Days Won
21/09/2012 Joined

N/A 0 0 0

December 7, 201213 yr

Problem with site.

Working perfectly.

Create an account or sign in to comment

Followers

Go to topic listing

NPC Temples Pack with Effects (Interlude).7z

Well i checked the NPC IDs as you suggested.

The server-side NPC IDs match the entries in npcgrp.dat and npcname-e.dat exactly (40040–40049), with no duplicates or display-ID substitutions. the rabbit appearance was occurring in a client that didn't contain those custom NPC records. However, the client crash is a separate issue.
i tested NPC 40042 using LineageNPCs6Script.effectnpc_a and the Kain_van_Holter_m00 mesh.

💥When that NPC came into view, my standard Interlude client crashed.

After inspecting the pack, i noticed that :

1. LineageNpcs6.ukx, LineageNPCs6Script.u and LineageNPCs6Effect.u use a non-standard package header (Lineage2Ver11 followed by 0xD839), rather than the standard Interlude Lineage2Ver111 format.

The included L2Mid packages use Lineage2Ver821.
Several NPC entries reference additional packages that aren't included in the archive.
my environment is Lucera2 Interlude with a standard Interlude client.
if you could you please clarify:

1.Were the LineageNpcs6 files made for a protected or modified Interlude client?
2.Do they require a specific encryption key, DLL or client patch?
3.Are standard Interlude-compatible versions of these files available?
4.Are the missing model packages supposed to be included separately?

i would like to use the actual custom NPC models, rather than replacing them with retail models.
Thanks for your help!

By d1ctatorTV · 48 minutes ago48 min
WTS / WTB L2REBORN

⚔️ ADENAVIP — L2 GAME SHOP ⚔️
🔥 BUY & SELL ADENA ON L2REBORN! 🔥
Looking to buy or sell Adena? You've come to the right place!
💰 WE BUY & SELL:
Adena
In-game currency
Valuable items
Epic items & equipment
⚡ Fast transactions
🛡️ Safe and reliable deals
🤝 Friendly support
💎 Competitive prices
🌍 SERVER: L2REBORN
📩 CONTACT US ON DISCORD:
ADENAVIP
🔥 Your trusted partner in Lineage 2 trading!
BUY SMART. SELL FAST. PLAY STRONG! ⚔️

By addelka · 1 hour ago1 hr
Buy Chatgpt | Gemini | Any Premium Subscription at Klouditem

🛠️ The ultimate digital toolkit: Cursor AI for coding, Claude & ChatGPT for reasoning, and Canva Pro for graphics. Instant automated delivery!

By klouditem · 2 hours ago2 hr
Is L2J's gameserver security indefinitelly compromised ?

It's very easy to call everyone an AI slop vibe coder nowadays when they disagree with you. Let me educate you a bit on the history of Java emulation of Lineage 2 to make my point clearer.

L2J took a very bad turn around 2010.

Around that date, most of people people who were capable programmers that created L2J and L2JFree simply for fun, were starting to get replaced by people who were primarily server-owners or paid-developers who simply wanted either recognition or to steer the project towards personal agendas.

A lot of the L2JServer code got rewritten back then, by so called "senior developers" who decided to "move things to the Datapack" and other niche ideas. This "rewrite" of older code lead to the introduction of most exploits that work today and that AI keeps finding.

For example, around that time, Zoey76 who was leading L2JServer decided to rewrite the favourites module of the community board. That code was perfectly fine, and he rewrote it in a very bad way that introduced a memory leak that can be triggered by a malicious user that can lead to OOM on the server. A lot of packs who forked from L2JServer both private and public have this issue nowadays.

Generally the quality of the developers after 2010 went down because most of these people were qualified asslickers and not qualified developers.

The same rewrite era led to the introduction of a nasty adena dupe exploit that is currently working in many servers using re-bidding from a clan leader that changed a clan and then cancelling the bit. This was fixed, new developers regressed it.

And it's not just the era of L2JServer's 2010+ years. Later on Mobius took control of the scene and he has done a lot of such mistakes too. And it's not just open source. L2Scripts, check the 2020 leak, you can craft manor packets to plant baium rings instead of crops. aCis has messed up zone system, you can become invulnerable in multiple ways and nobody can kill you too. I can go on and on about how insecure ALL the packs are.

"But if you point an AI to the code it will tell you the security issues". Note quietly. AI is a reflection of your skills, if you dont know where to look, how to look, how the mechanics of the code work it wont find anything. There are people who use AI and people who CAN USE AI. It's different.

The reality is for someone who knows what he is doing and an AI agent, it's easy to "demote" the security of all these decent packs to "mediocre".

In some months I'm planning to open a server of my own. I'm terrified to the idea of not knowing all my security vulnerabilities and of a hacker who can come and TRASH it for fun ...

These are existing risks for all of us, that a lot of you dont seem to be taking under consideration ...

By aguy · 2 hours ago2 hr
Is L2J's gameserver security indefinitelly compromised ?

It couldn't have been explained better.
People who consider themselves senior developers because they know how to write text to an AI, whose QA is simply to jump in and see if it works without understanding the actual mechanics or what they entail, is frustrating.
Furthermore, treating developers as if they're nothing because AI can do the same things we do is simply ridiculous.
Imagine you have to create a recipe for a contest and you have zero cooking experience, and your opponent is a professional chef. Even using AI, the odds of winning are low. The same applies here.

By rexen · 3 hours ago3 hr

Web Developers Guide Cross Site Scripting

Featured Replies

Create an account or sign in to comment

Posts

NPC Temples Pack with Effects (Interlude).7z

WTS / WTB L2REBORN

Buy Chatgpt | Gemini | Any Premium Subscription at Klouditem

Is L2J's gameserver security indefinitelly compromised ?

Is L2J's gameserver security indefinitelly compromised ?

Topics

Lagacy L2REBORN

Black Chaotic Weapons

🤖 HeistBot

NPC Temples Pack with Effects (Interlude).7z

L2 Good Vs Evil !

Important Information

Account

Navigation

Search

Configure browser push notifications

Chrome (Android)

Chrome (Desktop)

Safari (iOS 16.4+)

Safari (macOS)

Edge (Android)

Edge (Desktop)

Firefox (Android)

Firefox (Desktop)