Jump to content

[Exploit] Transport Unlimited items - No Weight Limit


sawine

Recommended Posts

Hey ppl,

 

I did not see this exploit on the forum, its quite simple, i guess many ppl already know it.

 

First buy the maximum quantity you can hold of the item you want to take. (Ex: 2000 mana potions)

 

Now open your pet inventory, transfer a small amount of items (Ex: 1-100 mana potions)

 

The item should transfer normally, after that transfer 1000 items (or any quantity that will not exeed pet weight in one shot) (Ex: 1-1500 potions)

 

If it works, you will see items stacking and weight not moving. Also items wont disapear from inventory, but if you refresh window it goes back to normal.

 

So you only have to repeat these steps ( transfer 1-100, transfer 1000 or +, after when you rebuy your items, re-start over )

 

So now you can bring 50000 mana potions one shot to your 32 automated bots.

 

Hope I made it enouph simple and that i dont repost.

 

cya around.

Link to comment
Share on other sites

This is very useful with cp ;D at siege.I'm going to test it in l2j interlude and give feedback.

 

If you are lucky with ur server, sometimes when you click mount, it transfer all items without penality, but doesnt work everywhere.

Link to comment
Share on other sites

QQ for off lr sever that i play in.... dont work... and was good for mages cause weight limit is a mess..... and cp pots finish fast.... so more cp pots longer pvp....

well.... still have to count with buff from clan hall manager and my dc robe set+6 :D

Link to comment
Share on other sites

cool

 

All posts witch include "one-five" words are considered spam.

#1st warning. Read the rules.

And u dont have the post count to see the topic, why did u post?

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



  • Posts

    • Hello if anyone is looking for interlude server with free bot, no P2W and uniques features I can recommend freshly opened https://l2romans.com/features/, great server for chilling and having fun with friends casually. Everyone is welcomed
    • So excited to announce 3x Telegram Premium (6 months)   Join our official TG and participate to win!   Asocks.com - trusted proxy service providing mobile and residential proxies with a single price of $3 per 1GB   A huge locations pool and high speed will help complete all tasks    
    • Well, sorry not sorry for resurrecting old topic, but I believe it's ultimately stupid to implement license checks like Vilmis did 🙂   private static String url = "jdbc:mysql://185.80.128.233/" + getData("Zm9ydW1fZGI="); private static String username = getData("bXJjb3B5cmlnaHQ="); private static String password = getData("Y29weXJpZ2h0XzEyMw=="); con = GlobalDB.getInstance().getConnection(); PreparedStatement statement; statement = con.prepareStatement("SELECT field_6 from core_pfields_content WHERE member_id = ?"); statement.setInt(1, Config.FORUM_USER_ID); ResultSet rset = statement.executeQuery();   This awesome way of coding things leaves us with base64-encoded credentials and DB exposed and accessible globally 😉 Btw he checks his licensing data from some plugin generated table his forum uses. Vilmis took action and ensured that mrcopyright user would have only needed accesses and rights for this operation. But he forgot to ensure that his INFORMATION_SCHEMA database would not be exposed and readable... That leads us to fully readable server variables like version used (10.1.26-MariaDB-0+deb9u1 - pretty ancient DB and OS, I'd assume). From here you can go south and do some kinky stuff, if you want and have knowledge for that. But who cares, right?   Ooh, table core_pfields_content field_6 is IP address which is checked by FORUM_USER_ID. Yep, you can query all IP addresses there (124 of them right now) and also do whatever you want with them! 🙂  The most fun part? Files source has been shared what, more than 2 years ago?  Vilmis still uses very same credentials and never changed it after sources exposure - who cares. Although, "sources" may be way too strong word here. If anyone still use paid Orion versions, I'd suggest packing your shit and leaving immediately, or at least fix this incompetent fool caused problems. It's obvious Vilmis don't care or maybe doesn't even know from the first place how to solve this problem (hint hint - tiny PHP Rest API microservice which would do absolutely the same but without exposing sensitive data?). By doing that, he exposes his infrastructure and YOUR data, and he does that for more than 2 years now 🙂 Developer of century!    
  • Topics

×
×
  • Create New...