Jump to content

Recommended Posts

Posted (edited)

Pretty self explanatory. I was messing around with MFA and TOTP and I thought I would just write one of L2.

It has all the core functionality but feel free to extend it and make the HTMLs better. Maybe Stinky can come up with something awesome.

 

How it works?

  • By default it is disabled
  • Player logs in and presses .mfaon
  • At this point they need to use an authenticator app on their phone such as Google Authenticator
  • For the best UX the user will need to scan the QR code but if that's not possible they can also type the key manually (Not shown in the video)
  • After that they need to put the current code to enable the system
  • Once that's done, any other login, will require them to put the current code
  • You can simply disable it by pressing .mfaoff once logged in

 

L2jTesla is using Gradle so I don't have to manually add any jars. If you're not using Gradle or maven you need to find and add the following libraries:

  • commons-codec, name: commons-codec, version: 1.10
  • com.google.zxing, name: core, version: 3.4.0

  • com.google.zxing, name: javase, version: 3.4.0

 

Video showing the functionality:

 

Code: https://gist.github.com/Elfocrash/c6764432e30193fdc441d55209b4ad11

 

Elfo

Edited by Elfocrash
  • Like 1
  • Thanks 3
  • Upvote 2
  • Downvote 1
Posted

I personally do not understand why you constantly post things while you do not support them many times I have seen your customers ask you something and they are ignored What is your purpose to be here.

Posted
1 hour ago, L2Darkangel said:

I personally do not understand why you constantly post things while you do not support them many times I have seen your customers ask you something and they are ignored What is your purpose to be here.

what customers, u got shares for free ...

 

Posted
3 hours ago, Elfocrash said:

Pretty self explanatory. I was messing around with MFA and TOTP and I thought I would just write one of L2.

It has all the core functionality but feel free to extend it and make the HTMLs better. Maybe Stinky can come up with something awesome.

 

How it works?

  • By default it is disabled
  • Player logs in and presses .mfaon
  • At this point they need to use an authenticator app on their phone such as Google Authenticator
  • For the best UX the user will need to scan the QA code but if that's not possible they can also type the key manually (Not shown in the video)
  • After that they need to put the current code to enable the system
  • Once that's done, any other login, will require them to put the current code
  • You can simply disable it by pressing .mfaoff once logged in

 

L2jTesla is using Gradle so I don't have to manually add any jars. If you're not using Gradle or maven you need to find and add the following libraries:

  • commons-codec, name: commons-codec, version: 1.10
  • com.google.zxing, name: core, version: 3.4.0

  • com.google.zxing, name: javase, version: 3.4.0

 

Video showing the functionality:

 

Code: https://gist.github.com/Elfocrash/c6764432e30193fdc441d55209b4ad11

 

Elfo

this could be used for bot protection as well?

or its waste of time , could be bypassed easy ?

Posted
3 minutes ago, GsL said:

this could be used for bot protection as well?

or its waste of time , could be bypassed easy ?


I thought about that. The problem is that the user also knows the secret key, it’s part of the spec, so in theory they can generate the right passcode for a given moment in time.

1 hour ago, L2Darkangel said:

I personally do not understand why you constantly post things while you do not support them many times I have seen your customers ask you something and they are ignored What is your purpose to be here.

To innovate and give food for thought and ideas to people with more time than me

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


  • Posts

    • L2Elixir – Patch 4 Is Live!   We’re working non-stop, day and night, to deliver the best possible quality and bring back what made L2Elixir special. This project is built with passion, not shortcuts — for the old-school players who remember, and the new ones who want to experience it properly. Thank you for being part of the journey. Together, we’re making L2Elixir great again ❤️ The legends never fade.    ⚙️ General Enabled Class Change service (same class type only) ALT + B → Services → Character Development Enabled Shift + Click on Treasure Chests Players can now identify real chests (Adena, scroll drops) and use Key / Unlock Event deaths now cancel only debuffs, All self buffs are preserved, fixes issues with Root and similar effects Bladedancer class can now log in even when Max Clients (2) is reached. Since an active Bladedancer is not available for every damage dealer and some players tried to abuse this via VPN or a second PC, this feature was added to keep things fair. protections applies, requires testing!    🎒 Items Crystallizing enchanted items now gives the correct increased crystal amount (retail-like behavior) Removed Agathion Seal Bracelet: Rudolph from Santa rewards (Gracia Final item) Added Dualsword Craft Stamp into Milestone Exchange list    🧙 Skills Fixed Banish Undead lethal chance Hot Springs Malaria and similar effects now level up faster while being attacked
    • thats new SEO level tricks you know nothing of noob - bottom line: exposed.
    • Warning: This guy is a big scammer, trying to sell everything, advertising for servers etc. That's his mail address evgesha.nrnr@gmail.com , stay away!   @Atom @Celestine
    • Warning: This guy is a big scammer, trying to sell everything, advertising for servers etc. That's his mail address evgesha.nrnr@gmail.com , stay away! @Celestine @Atom
  • Topics

×
×
  • Create New...

AdBlock Extension Detected!

Our website is made possible by displaying online advertisements to our members.

Please disable AdBlock browser extension first, to be able to use our community.

I've Disabled AdBlock