Jump to content

Recommended Posts

Posted

I do this :

1. Load hlapex and script

2. Run L2

3. Login with my account sniffing and taking my PlayKey2

4. (i do this for see if it's fixed or not) i put my playkey2 in the script

5. i put my user and password and try to login.

There are 2 things that i don't understand :

1st is that when i put my playkey (eg. 231B0000) hlapex says that there's an error in the syntax;is normal? or i have to cancel the letter?

2nd problem is that when i put the playkey (also mine) and login with my account,i reach the server list and then i can't go to the character selection; it means that is fixed?

thanks a lot

 

Posted

Xmmmm maybe i didn't tell it clearly enough... (lol ok hlapex2008, it works even if you press CALL INIT, even if not, i didn't look at the script to see that it is executed normally on login :P)

 

1. LOAD hlapex

2. RUN l2.exe

3. GO TO scripts tab and LOAD the script (you must create it first, to do so, open one of these scripts there, delete the code in it, paste this code, save as... loginhack.pst or whatever)

4. AT account=1; EDIT the account=1; and add for example account=252; (1 should be the administrator's account, maybe not, try it first...)

5. LEAVE hlapex ALONE and go to client

6. LOGIN NORMALLY as you do with your account everytime... I suggest nor to use your main account, neither have the same IP as your main, as latest version of amped (damn Cypher x.x) tracks you down...

 

VOILA!!! You PWNED THEM (if it works, you will see some chars, or an empty account, if this account is empty.....)

If you:

 

1. Can't even pass the select server screen

2. See your char

3. Hlapex isn't loading

 

then:

 

1. Fixed, leave it for this server...

2. Maybe fixed, maybe you did something wrong...

3. Server's patch is protected against l2w/hlapex/etc...

 

Now let me explain some things...

 

(before this, @ miki: It will help you to estimate where to search (you will find your account's id, do you want to hack it? :P You will find an ID and say: This may be around here...) Put it in integer ~> hex to normal and you will find it.

 

It works like this (or i suppose so):

 

Login server simply gets you in your account. After you login and you want to get into GS, login sents again a packet so it says to the db server: Hey dude, load the account xxx, the user logged in successfully. Now, this scripts changes this pack, and says: Hey dude, load the account xxx, the user logged in successfully (but you logged in from anoter account :P But, nobody knows that, db don't have the power of human brain....)

 

Just some thoughts while looking the script/the login packs...

 

Also, the account=x; SAYS: Hey mr DB, load account which is NUMBERED as 15th in your db... It doesn't say: load killer's account. When you registered, you was for example the 454554 user who made an account there. Now in db, there are other 454553 rows, from other accounts. So, add a number, and see if that noob just created an account there and left the server or he did some cool things for you... SO YOU ADD A NUMBER NOT A NAME.

 

The third thing is...

 

This DOESN'T WORK to l2j, isn't it clear? ONLY official servers...

 

---------OFF TOPIC MODE /on-----------

 

@ Those who speak for revenge (GMs, admins, noobs that say that are gms/admins)

 

If i had donated (i would never do) and log in one day, and BOUM, wtf my char is NAKED??? I would never trust you again for donate (yes, i gave you my money, and that's the security you offer me???). Even if you could see that they were stolen, and you could gimme them back, i would leave... Personal opinion, NOTHING TO FLAME, just consider...

 

And as for the phraze that we are noobs who steal other people's work, (items on 1x servers etc), we aren't supposed to ask you before, YOU DO THAT, by offering such a low quality protection on your servers (lol 2 week after it was actually published, and it is still working???). Also, these <<players>>, shouldn't be so noobs to play on private servers... FBI, NCSOFT, hackers, exploits, some admins that want donations (weeeeee, do you think that a man with +25 can be got owned by a man with a +10??? If it was like this, there would be no donations, so the whole <<DONATIONS HERE>> tag is setted up, just a trick, to get money, not to have your server hosted etc.

If they want to have safety and l2 experience ~> www.lineage2.com

If they want exploits and etc. ~> www.xxxPRIVATESERVERxxx.com

 

Personal opinion.......................

Posted

thanks a lot killer,now i know that the server that i've tried are fixed :)

however i don't want to hack my account..is a sort of test in order to know if xploit is fixed or not :P

Posted

well i see that the maxbastards community needs topics like that.....i mean look at the views and the posts..so we could make a specific sector for l2 3rd party progs developping so that we could start making progz dedicated to l2 with the signatre of maxbastards.eu :)

Posted

hihihihi... Some exploits are for newbies admins we said, not good ones... The fix is just a command that needs to be executed in db (or just upgrade amped ~.~)

 

Anyway, still working on a bunch of servers (atm i have found 3).

 

Why was TG server protected against bots & hlapex from the patch, damnit??? x.x

Posted

You are wrong killer the admin of cosmos is me, and its not a db proccedure, its a dll that fixes the problem, the db proccedure is just a "fake" fix which will not work correctly and make the server crash

 

And yeah, TG has installed a new antibot system (la2guard) its one of the best antiexploit,antibot systems

Posted

I know it's a fake fix (and that you are the admin).

 

But as long as i know it works x.x Just for getting rid of some newbies who try 1 account and leave :P

 

Yes but if e-global hadn't sold it (with full support for installing it :P) static would be ~> O.o

Posted

if this was for l2j would you provide support on how this works?:P

 

I don't know how Static was provided by it, neither i have it from e-global, but for a server like TG its useful and might Static has bought it. www.la2guard.com

Posted

Of course not ^^ (without thinking about it a lot..)

 

 

But just because of lack of hardware (i setted up once, but... My pc was a hell) i like l2j.. fully customized (off is too, and better) (as you have more options than .xml files). And as it is legal (L2j)

Guest
This topic is now closed to further replies.



  • Posts

    • Since technical talk offends people, I believe I should return back to writting my Lineage 2 lore stories. Here's the next one:   Once upon a time, there was a boy and a small adorable wolf.    The boy really loved the wolf but as the wolf grow older and bigger, it became agressive and would bite the boy. One day the boy and the wolf decided to go to the city to buy potions. The road was long and hilly so the boy moved all his adena to the wolf bags to help his legs and reach the city easier.   When they reached the city, the boy tried to take the adena out of the wolf's bags. But the wolf would not ! He bit the boy and said "You will not get this adena back, this is my adena". The boy got angry. He decided to go to the pet master and ask for help.    "Pet master, pet master ! My wolf is big, bad and angry and it won't obey me. I want my adena back and it bites me. "   The pet master looked at the big angry wolf, then looked at the boy and said. "I have a solution for your problem young one. I have magic. Dark magic. I can turn your big bad elder wolf into a younger puppy for free, all you have to do is spell the magic chants. Nothing more, no wolf modifying wands, just your say".   The boy thought about it for a bit, and decided that he indeed wanted to turn things back. But when he was about to spell the magic words, guards arrived at the pet master.    The city guard captain said "Is this the big bad angry wolf that bites people and doesn't give back his adena ? We will kill this wolf !"    For a moment the boy hesitated but he said "This wolf is big bad and angry, but I love this wolf and I dont want it to die ! Please don't kill the big bad angry wolf." But the boy was not fast enough. The guards jumped the wolf and started slashing on him with their swords. The boy didn't know what to do, so in it its final moments right as the wolf was about to die, it spelled the magic words. "Pet master, make my wolf young and adorable again !"   But he was not fast enough. The wolf got slashed and killed by the guards just one moment before the boy could finish his last word.    But as the words came out of his mouth, with the wolf's dead body on the floor, a younger wolf manifested out of thin air. The magic was real. The guards got scared and run away. Now the boy was left with a dead old bad angry wolf and next to him an alive younger version.    The boys joy was even bigger when it opened the new wolfs bags and his adena was finally there. He took the adena and went back to buy potions in the city.   Twenty four hours later, the boy couldn't believe how his fortune would change ...   (No AI was used to write this story)
    • This is like 2017 MaxCheaters. i love it.
    • NEW SEASON GRAND OPENING FROM - 30 OCTOBER 2026, FRIDAY, 20:00 +2 GMT !
    • My bug report was a proper submission. I shouldn't have shown the exploit, I will accept that. Let's end it here. 
    • To Finish this, because it's need a explanation   1. “I come to your forum” — It's the L2JMobius forum, not mine. I'm a contributor, not the owner or the maintainer responsible for deciding which fixes get committed.   2. “Which is why I left” — That's not an accurate account of what happened. You may have left voluntarily once, but you were also banned from the Discord server three times after repeatedly returning and causing the same disruptions. Those are not the same thing.   3. “You personally reply and reject that it works” — I asked how a negative withdrawal could be performed and later requested a demonstration of the claimed exploit. At no point did I reject the patch or claim the vulnerability was impossible. Asking for evidence is not the same as rejecting someone's work.   4. “You leave it unpatched for days” — I don't make that decision. Whether and when a patch gets committed is entirely up to the project maintainer, not me.   5. “You challenge me to post a video” — Yes, I asked you to demonstrate the exploit. You interpreted that as a rejection of your work, which it wasn't. Requesting proof of a claimed exploit is a perfectly reasonable part of technical discussion.   6. “Asshole-ness is a mutually contracted disease” — You're responsible for your own behavior, just as I'm responsible for mine. Disagreeing with you or questioning your claims doesn't justify personal insults. If you believe I've treated you unfairly, address what I actually said rather than making my behavior an excuse for yours.   And one question remains unanswered: why did you publicly disclose the exploitationmethod before the fix was released, after previously saying you wanted to avoid harming the project?   The vulnerability was real, the fix was accepted, and the commit was published. I have no problem acknowledging any of that.   My disagreement has never been about whether the bug deserved to be fixed. It's about how you've handled the discussion and repeatedly misrepresented my role in it.     I have nothing against you personally. My issue is with the way you conduct yourself in these discussions.   And no, you're not obligated to prove anything to me. However, when you make a technical claim, the burden of proof is on you. You cannot reasonably expect others to accept your claims without sufficient evidence.   Questioning a claim is not the same as rejecting it, nor is it a personal attack.   This isn’t about fanaticism; it’s about pushing back against the completely senseless attacks constantly leveled at the project as a whole.   It’s always the same thing: they badmouth it, claiming the project is worthless—yet the very same people criticizing it are the first in line to download a leaked version.   Enough is enough. This discussion has dragged on far too long over something that ought to be straightforward; if you’re going to submit a bug report, you should at least do it properly.
  • Topics

×
×
  • Create New...

Important Information

This community uses essential cookies to function properly. Non-essential cookies and third-party services are used only with your consent. Read our Privacy Policy and We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue..