Jump to content

[Tool] LA2 Brute for TheGame.gr + Guide


Koyfo

Recommended Posts

Yep ειναι Infected...απο τσοντοσάιτ το βρηκες ρε κουφοντινα;; ;D

 

Στο θεμα μας τωρα, εγω σου λεω οτι ενα password του στυλ "αμπλαουμπλα98χ2" σε ενα Username "tinarg71" δεν παιζει να το βρεις με την καμια.

 

Οποτε

1)θα βρεις acc ενος κακομοιρη πιτσιρικα, που εγραψε username "mpampis" password "mpampis14" η κατι παρομοια.

2)Θα κανεις μηηηηηηηηηηηνες να βρεις ενα password της προκοπης βαση των στατιστικων....

3)Δεν λεω οτι δεν παιζει να βρεις τιποτα σοβαρο μεσα σε καποιο acc, υπαρχουν και ατομα ηλιθια που βαζουν οτι να ναι passwords...

 

Ζορικα τα πραγματα για αυτο το προγραμμα, δεν το εχω χρησιμοποιησει και εχω μερικες ερωτησεις.

 

1)Κανει αυτοματα login τσεκαροντας ενα ενα τα passwords που του εδωσες σε μια πιθανη λιστα;

2)Αν κανει αυτοματα login, τοτε καθε ποτε γινεται αυτο και με τι συχνοτητα;

 

Δεν ειναι και νεα μεθοδος η Brute force.... ;)

Link to comment
Share on other sites

Omws an o kakomoiris o pitsirikas exei ena wraio top C set kai liga kk adena, den se xalaei e? Brhka pass me 810k kai D armor (kapoia kommatia) gia rpg, kai den me xalase katholou :D

Oso gia to an den paizei tpt sobaro na breis, ftiaxe mia lista me ola ta pithana pass, baltin se ena pc me mpoliki mnhmh kai enan kalo CPU, kai mia 2k DSL, bale kai ena username pou eides sto net sou kai des... Stoixhma oti etsi mporeis na breis kai tou static :D (se liga 24wra pithanotata).

 

Oso gia tis erwtiseis:

 

1) Nai

2) Otan teleiwnei me to ena, paei sto allo, amesws...

 

H brute force mporei na mhn nea methodos, alla afou doulevei ti mas koftei? x.x

Link to comment
Share on other sites

Στο θεμα μας τωρα, εγω σου λεω οτι ενα password του στυλ "αμπλαουμπλα98χ2" σε ενα Username "tinarg71" δεν παιζει να το βρεις με την καμια.

 

Οποτε

1)θα βρεις acc ενος κακομοιρη πιτσιρικα, που εγραψε username "mpampis" password "mpampis14" η κατι παρομοια.

2)Θα κανεις μηηηηηηηηηηηνες να βρεις ενα password της προκοπης βαση των στατιστικων....

3)Δεν λεω οτι δεν παιζει να βρεις τιποτα σοβαρο μεσα σε καποιο acc, υπαρχουν και ατομα ηλιθια που βαζουν οτι να ναι passwords...

Ama dis sto net pou pezei kapios TG, sto peripou to pass tou? Dld posa grammata exei kai merika apo afta, den einai kai toso dyskolo na bris to pass me to porogramma afto:)

Exo akousi arketoi exoune bri pass apo acoutns kai malista merikoi palia tous acount pou eixane ksexasi to pass.

 

ps. to NOD32 kai emena mou bgazi oti kai kala exei trojan:(

Link to comment
Share on other sites

Mporei na moy exigisei kaneis ti akrivos kanei afto to programa?Bazeis esy

to username kapioy kai vriskei to pass toy?Ti akrivos?

 

Ama ksereis to username & kapoia stoixeia apo to password mporei na to vrei.

Link to comment
Share on other sites

  • 3 weeks later...
  • 1 month later...

sto pinakaki(gia to La2Brute milame) mu vgazei ~ Ïðîáóåì ëîãèí: 12345

? [uNKNOWN] íåèçâåñòíûé òèï ïàêåòà 0x00

~ Äàìï:

 

? [uNKNOWN] íåèçâåñòíûé òèï ïàêåòà 0x00

~ Äàìï:

 

? [uNKNOWN] íåèçâåñòíûé òèï ïàêåòà 0x00

~ Äàìï:

 

? [uNKNOWN] íåèçâåñòíûé òèï ïàêåòà 0x00

~ Äàìï:

 

? [uNKNOWN] íåèçâåñòíûé òèï ïàêåòà 0x00

~ Äàìï:

 

~ Ïåðåáîð çàâåðø¸í

oxi akribws afto...ta gramata ta kanei paste diaforatika

kati tetio 8a eprepe na m vgazei?

 

Link to comment
Share on other sites

Min dokimazeis kan.. to La2 Brute k kapio alo exploit program de doulevoun pleon ston TheGame

 

Nai eixa ksexasei to topic :P.

 

Topic Locked!

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.



  • Posts

    • Well, sorry not sorry for resurrecting old topic, but I believe it's ultimately stupid to implement license checks like Vilmis did 🙂   private static String url = "jdbc:mysql://185.80.128.233/" + getData("Zm9ydW1fZGI="); private static String username = getData("bXJjb3B5cmlnaHQ="); private static String password = getData("Y29weXJpZ2h0XzEyMw=="); con = GlobalDB.getInstance().getConnection(); PreparedStatement statement; statement = con.prepareStatement("SELECT field_6 from core_pfields_content WHERE member_id = ?"); statement.setInt(1, Config.FORUM_USER_ID); ResultSet rset = statement.executeQuery();   This awesome way of coding things leaves us with base64-encoded credentials and DB exposed and accessible globally 😉 Btw he checks his licensing data from some plugin generated table his forum uses. Vilmis took action and ensured that mrcopyright user would have only needed accesses and rights for this operation. But he forgot to ensure that his INFORMATION_SCHEMA database would not be exposed and readable... That leads us to fully readable server variables like version used (10.1.26-MariaDB-0+deb9u1 - pretty ancient DB and OS, I'd assume). From here you can go south and do some kinky stuff, if you want and have knowledge from that. But who cares, right?   Ooh, table core_pfields_content field_6 is IP address which is checked by FORUM_USER_ID. Yep, you can query all IP addresses there (124 of them right now) and also do whatever you want with them! The most fun part? Files source has been shared what, more than 2 years ago? Vilmis still uses very same credentials and never changed it after sources exposure. Altought, "sources" may be way too strong word here. If anyone still uses paid Orion version, I'd leave immediately, or at least fix this incompetent fool caused problems. It's obvious Vilmis don't care or maybe doesn't even know from the first place how to solve this problem (hint hint - tiny PHP Rest API microservice which would do absolutely the same but without exposing sensitive data? but for the third time today - WHO CARES! 😄 )
    • rename the l2.bin into l2.exe
    • L2LIVE.PRO- Dynamic Mid-rates Essence Seven Signs GRAND OPENING - July 5, 20:00 GMT+3 (EEST) TEST SERVER IS OPEN - COME AND CHECK IT OUT TODAY! Join our community and be part of it at: https://www.l2live.pro https://discord.gg/k3NMgR4Dmu   Server description * EXP/SP: Dynamic (x1- x100 based on your level, *before* Sayha and EXP buffs * Adena: x50 / Item Drop: x10 / Fishing EXP increased / Attribute EXP increased * Simplified gameplay to stay in the loop while not spending hours and hours farming * Starter Pack containing very useful items for beginners * MP replenishing potions with auto-consumption * No overpowered donations L2LIVE shop * All spellbook coupons, pet spellbook coupons and master books are sold via Game Assistant * Additionally you can buy SP pouches, enchanted talismans, pet training guides and various other consumables for Adena and L-Coin * More items such as cloaks, more talismans, agathions, belts, pendants, enchantment scrolls of various grades, evolution stones, etc will be added! Shop server as a shortcut, and all retail-like ways of earning items are still here! L-Coins * Drops with small change and in random amounts from Lv60+ monsters  * All raidbosses drop random amount of L-Coin Pouches generating up to 420 Lcoin per unit. **Grand Olympiad and Events** * Grand Olympiad is held week day * Format is 1v1, unlimited weekly fights  * Heroes are declared weekly at Sunday * There are three automated events - TvT, CTF and Deathmatch, running at evenings * Orc Fortress, Battle with Balok, Keber Hunter, Archievements Box, Daily Gift Calendar provisional events are active too Custom user commands * .offlineplay command, your character will keep playing till death or server restart * .offlineshop command, keeps your shop sitting until all items are purchased * .apon / .apoff - enable/disable HP/MP autoconsume And lots of other small improvements are waiting for you!   Join our community and be part of it at: https://www.l2live.pro https://discord.gg/k3NMgR4Dmu
  • Topics

×
×
  • Create New...