Jump to content

Recommended Posts

Posted (edited)

I think I've fixed it  :) https://bitbucket.org/l2shrine/extender-public/commits/b52a4a15ebcab4567312b262f9518d42f796691f

 

EDIT: I've fixed last second of skill reuse time https://bitbucket.org/l2shrine/extender-public/commits/fc75623fc1c9a85d7d183f53098d8a4e99e1f53d

 

So what next?  :)

Edited by eressea
Posted

Checked over a few of my exts to see if there's any other bugs and came across 2 more, exploits more than bugs really as both require l2phx or the like (not sure if you've fixed these yet or not didn't check)

 

AppearingPacket sent before EnterWorldPacket (causes all kinds of havoc including a few dupes)

MultisellChoosePacket doesn't check whether you were ever sent the multisell id which you're trying to buy from, so you can buy from multisells which aren't in any npcs (debug/test multisells are the usual target) as well as quest multisells which require quests to access

Posted (edited)

Checked over a few of my exts to see if there's any other bugs and came across 2 more, exploits more than bugs really as both require l2phx or the like (not sure if you've fixed these yet or not didn't check)

 

AppearingPacket sent before EnterWorldPacket (causes all kinds of havoc including a few dupes)

MultisellChoosePacket doesn't check whether you were ever sent the multisell id which you're trying to buy from, so you can buy from multisells which aren't in any npcs (debug/test multisells are the usual target) as well as quest multisells which require quests to access

 

Thanks for info, I've fixed both already :)

So are you sure there is no other dupe/exploit/hack/server crashing packet? For example if client sends enchantType > 3, server crashes (already fixed this one, but I'm not sure whether there isn't something similar somewhere).

 

There was for example skill enchant exploit (race condition), when you drop book and immediatelly send RequestExEnchantSkill (via l2ph), it sometimes proceeds with enchant and still keeps the book on the ground so you can pick it back. So I've added some delays (for example you can't enchant skill 2 seconds after you drop item to ground - nothing that would affect normal playing but stops players from exploiting this). It's not perfect (2 second lag of server and you can still use it) but I still don't know how to fix it better.

 

Someone told me about some item dupe involving sin eater, someone told me about some fishing exploit - do you have any info on these?

 

Thanks a lot!

Edited by eressea
Posted

I tried to fish exploit with mac, no luck at all.

 

It was way too unreliable (we didnt manage it once)

 

I dont remember the steps well, but one would spam the fishing skill while the other drop/pick items to try to dupe or something close to it (only sure about the fishing skill part). Even setting the delay to 0 didnt make it happen.

Posted (edited)

Thanks for info, I've fixed both already :)

So are you sure there is no other dupe/exploit/hack/server crashing packet? For example if client sends enchantType > 3, server crashes (already fixed this one, but I'm not sure whether there isn't something similar somewhere).

 

There was for example skill enchant exploit (race condition), when you drop book and immediatelly send RequestExEnchantSkill (via l2ph), it sometimes proceeds with enchant and still keeps the book on the ground so you can pick it back. So I've added some delays (for example you can't enchant skill 2 seconds after you drop item to ground - nothing that would affect normal playing but stops players from exploiting this). It's not perfect (2 second lag of server and you can still use it) but I still don't know how to fix it better.

 

Someone told me about some item dupe involving sin eater, someone told me about some fishing exploit - do you have any info on these?

 

Thanks a lot!

Don't know anything about those but pretty much any npc interaction is one giant race condition because the AI relies on the inventory being valid which relies on the cached returning in a timely manner, but if you induce server lag and spam pretty much any npc function which does OwnItemCount-AddItem-DeleteItem the AI will think the item hasn't been deleted until the cached returns saying it has so you can get repeat rewards from an npc this way, there's a few l2server systems which are vulnerable to this issue also and the easiest solution is to prevent any methods of inducing server lag by players, the main one is packet delay filtering as spamming use/drop/delete/anything with items will hang the server pretty hard and make those kinda dupes as simple as spam clicking an html link

 

A better fix for RequestExEnchantSkill dupe would be to use a cached function to delete the book first and do the actual enchant on the cached reply packet once it's 100% known that the book is deleted

Edited by Anarchy
Posted

A better fix for RequestExEnchantSkill dupe would be to use a cached function to delete the book first and do the actual enchant on the cached reply packet once it's 100% known that the book is deleted

 

I'll have a look at it, thanks again! :)

Posted

with fishing it was some kind of trade (or drop) with -1 (or +1) count value (of bait i think) while guy was fishing (?), some kind of overflow i guess

there was youtube video with proof of concept and they hot fixed it on rpg, but can't really remember anything more

 

sin eater had something to do with pet inventory, but also don't remember more (it was discovered way later than GF leak)

Posted (edited)

Yep, overflow flooding, thanks! Tho, even setting the fishing skill to 0 delay didnt make it happen when testing.

 

Sin Eater was related to enchanting http://www.elitepvpers.com/forum/lin2-exploits-hacks-bots-tools-macros/455783-l2-enchant-bug-gracia-final.html

Edited by ericvini
Posted (edited)

Yep, overflow flooding, thanks! Tho, even setting the fishing skill to 0 delay didnt make it happen when testing.

 

Sin Eater was related to enchanting http://www.elitepvpers.com/forum/lin2-exploits-hacks-bots-tools-macros/455783-l2-enchant-bug-gracia-final.html

 

Can't reproduce / find anything...

 

Btw I've added autoloot system (needs testing!) https://bitbucket.org/l2shrine/extender-public/commits/487de8a1a97963156009f20f951f1a3cc48175bc

 

EDIT: Autoloot seems working fine for solo player. When in party, it doesn't work at all, I'll have to fix it

Edited by eressea
Posted (edited)

Keep up the good job eressea you are making progress. I wish I could help you aswell but i'm not good at coding :(

 

Thanks! You can help by testing it and/or giving ideas what to fix/change/add next... :)

Edited by eressea
Posted

well first should come the basic... meaning fixing any bugs and exploits...  offline shop would be a plus... aswell :D I will install gracia this weekend and try and help you :)

Posted

well first should come the basic... meaning fixing any bugs and exploits...  offline shop would be a plus... aswell :D I will install gracia this weekend and try and help you :)

 

All well-known exploits should be fixed. Offline shop seems working fine :) Try and let me know :)

 

 

NPC.exe no open for extend, l2server is closed ? error to fix ? 

 

have remendo for protocolo vesion 83 ? testing 87? 

 

I'm not sure if I understand what you mean.

NPC doesn't connect to l2server?

I don't have client for protocol 87 but it should work somehow (I've remapped some packets etc.) but it needs testing.

Posted (edited)

All well-known exploits should be fixed. Offline shop seems working fine :) Try and let me know :)

 

 

 

I'm not sure if I understand what you mean.

NPC doesn't connect to l2server?

I don't have client for protocol 87 but it should work somehow (I've remapped some packets etc.) but it needs testing.

Do not worry with gta2, he did not know what you're talking about kk it is br, confused as I .

Edited by Jamba

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Posts

    • The bot video lasts 35 minutes and not everything is shown there, if everything was shown, the video could have lasted several hours. Also, the video quality is reduced so as not to take up much space.The last minutes of the video show bots attacking each other on the event. https://dropmefiles.com/1jMi2
    • We also forgot to say that the deal will be the way you want it, we are ready for almost any of your demands. And we ask the administration to review our post as soon as possible, because several hours have passed and it still hasn't passed moderation, thank you in advance!  
    • 💥Super offer GitHub Account  (5 years)💥 ⚠️ Available to order for only $20🔥
    • Good day to all! We present to your attention our source code h5, where several projects used and achieved very good results, both in terms of online and in general for the project. (Due to confidentiality, the list of projects, the test server and what the basis of the source code will be provided only to real buyers, where they can go and check them out)   The main feature is bots, which are very animated, one to one like real players. But, in addition to bots, the build has a lot of interesting and modern things. Below will be a video showing bots and a little about the server.   As we said, the build was used on several projects, so the first thing that is there is not a single backdoor on the server, all serious and critical errors have been fixed. Races and classes are closer to the official PTS platform.   And also the server can be used as a classic server, as well as a server with add-ons, because the server has added many new things, weapons, armor, jewelry, hats, cloaks, etc.   The server has a full working community board (alt+b), working locations, quests, geodata, mechanism, working ai, in general there are no problems and complaints. In alt+b, shops, various services, buffer, player statistics, clan statistics, mail, profession change, personal account, registration for events, etc. are available.   Additional services: Premium account, visual costumes, nickname change services (for yourself and your pet), nickname and title painting service, karma/PC cleaning, expand services, weapon/armor/jewelry sharpening service, level up and down service, nobles purchase service, beauty salon (new hairstyle change from higher chronicles and face change), additional window purchase service, clan reputation purchase service, weapon augmentation purchase service.   Internal services: auto potions (acp), referral system, repair services, automatic reward delivery after n. time, additional auction, and other working systems, also many available commands, such as: exact date of epic respawn, password change directly inside the game, offline buffer, auto att, registration for castle sieges directly by entering a command and other available commands.   The server has protection (both on the server side and on the client side) that protects against free software and also several other anti-bot systems that will not give the slightest chance to bot users. But if you want people to use software, you just turn it off.   Bots. As we said, one of the main features of our server is bots, they are one to one like real players, now a little about bots and below is a link to a video about how they work: Server bots are like real players, their AI is copied from the AI ??of real characters, and therefore they get what real players get and you can also do with them everything that can be done with real characters.   They write in chats, in all chats, trade, shout, pm, clan chat, general chat. They walk around the cities, level up, farm, kill each other in pvp and pc, put on weapons, armor, jewelry, sharpen weapons. According to their level, they will choose their professions, join clans, participate in different events, use alt+b services - I'm telling you, their AI is copied and adapted like a real player's AI, so they can do everything that a real player can.   Bot control: You can set a chat and words for bots, how often or rarely they will write in chats, you can control where and how the bots will level up, you can control what events they will be at, you can control what cities they will run in, you can control where they will stand, you can even call them to you and that's not all, they are completely in your hands and you can twist them as you want. The bot video lasts 35 minutes and not everything is shown there, if everything was shown, the video could have lasted several hours. Also, the video quality is reduced so as not to take up much space.   You can check the rest yourself on the test server and we will fully show you everything that bots are capable of and you will be surprised)   Now about the price and a little about our work and what is included in this price. We do not sell only the build, we sell the source code in its entirety, so that you can adapt something for yourself. The price of the source code: 15,000 euros. What is included in this price: 1. We do not have a license, you buy it once and you can use it for the rest of your life. 2. There is no online limit and there is also no limit on running bots, the server can support as much online and bots as your VDS is powerful. 3. Client-side protection. You will not pay extra for protection, the source code already has everything. 4. All builds that we have created for projects that bought the source from us (they have ready-made servers, with their own ready-made concepts, configs, different alt+b designs, for different rates x1, x10, x20, x50, x100, x1200, x5000, there are also servers for classics and servers with add-ons, they all have configured bots for their servers) all this will be included in this price. You will receive all the builds of these projects. 5. Once a year we update and improve the source, we will also improve the bots, make different paths for them, different farming places, and revive them more and more, to get them you will have to pay 20 euros to get the updates. 6. You will receive all the bot settings from our first projects to the last, the video shows little, our last configured bots are almost indistinguishable from real players and you will see this yourself on the test server or later. (Our last setup and development of bots lasted 11 months and these works and what bots can do cannot be described in words, you yourself must see them to feel this work and power) 7. We will teach you how to control both the server and training on setting up and controlling bots. 8. We will provide you with VDS for 3 months and if necessary we will help you as much as we can until the first launch of your project! 9. Our bots move, they don't stand in one place, they walk around the cities and use a teleport, after the teleport they move on to the farming place in random places. They communicate in the chat and if you hit them, they can hit you back. They are in almost every city and farming location, near many key NPCs, instance zone managers, etc. They are automatically updated and move around the cities and farming zones. They attack those who have a flag and those who is pk. These are simply unique bots that can help you in terms of your online and your project in general! 10. As we said, our latest bot development lasted 11 months and we made 92 new farm zones for bots, more than 150,000 new paths for all locations, different methods of dressing their equipment, different methods of their behavior and more than 40,000 universal words in the chat, in different languages, where no one can even doubt that these are bots! Our contact information Telegramm: https://t.me/jg_uc Discord: j.g.u.c_dev
  • Topics

×
×
  • Create New...