-
Posts
-
Classic move "its not a virus, all antiviruses are just wrong." The moment someone starts yelling "FIND THE MALICIOUS CODE" and mocking heuristic detection, its usually because there is something shady in there… or they have no clue what heuristic detection even is. If your files was clean, you wouldn’t be this defensive or getting personal. when half the AV vendors are throwing out names like Trojan.Win32.Kasidet, Trj/Chgt.AD, and Gen:Variant.Tedy.537463, maybe it’s not "heuristics", maybe its just a shady-ass .rar. If there is smoke you don't argue with the smoke detector, you check the kitchen. But hey, maybe they all got paid too, right? 🤷♂️ the argue comes down to trusting you (a nobody) versus AV vendors Popular threat label trojan.tedy Threat categories trojan Family labels tedy can i call you Teddy from now on? yes i can Teddy Dont forget it was not something generic or maybe suspicious it just got detected with its specific version. and not only Teddy's Teddy some others too Kaspersky says Kasidet trojan keylogger, spyware, classic nasty stuff. Bitdefender, GData, VIPRE? Tedy variant, an actual known malware family. Panda, QuickHeal, Sophos, Fortinet everyone sees something dirty in there. But sure, they’re all wrong, and you’re the cybersecurity messiah who cracked the code. You really expect people to believe that 10 independent vendors with zero incentive to conspire against your .rar just happened to flag your file as malware… by accident? Maybe try this next time: instead of uploading garbage and calling people “idiots” when they don’t trust it, just don’t upload malware. Problem solved. -
https://github.com/gawric/Guide-L2Unity/blob/main/Guide/Pakets/Blowfish/General description.md Perhaps you will find it useful piece of encryption and decryption code from Acis Interlude I transferred these methods to Unity c# and everything works fine https://ibb.co/DHhP0JYr I think the first 2 bytes are the packet size. Third byte packet id And then the information itself It's all there in l2j servers -
Hello everyone, I'm facing exactly the same issue mentioned in this topic. I've correctly implemented several new mounts in my Lineage 2 Interlude server, but whenever I use the ride/mount action, the client always displays the default strider animation (lineagemonster.strider_m00), even though in my npcgrp.dat everything is correctly referenced to my custom ride.u files (e.g., ride.wolfhound_m00). 90102 Rider.wing_hound_vehicle Riders.wing_hound_vehicle_m00 2 RidersTex.wing_hound_t00 RidersTex.wing_hound_t01 0 1 0 1.00000000 0 1 4 ItemSound.armor_metal_weak_1 ItemSound.armor_leather_3 ItemSound.armor_metal_weak_3 ItemSound.armor_metal_weak_5 3 MonSound12.w_hound_dmg_1 MonSound12.w_hound_dmg_2 MonSound12.w_hound_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41000 Rider.gray_horse Riders.gray_horse_m00 3 RidersTex.gray_horse.gray_horse_t00 RidersTex.gray_horse.gray_horse_t01 RidersTex.gray_horse.gray_horse_t02 0 1 0 1.05882394 0 1 4 MonSound.Hit_Shell_1 MonSound.Hit_normal_3 MonSound.Hit_Wood_3 MonSound.Hit_normal_12 3 MonSound.unicorn_b_dmg_1 MonSound.unicorn_b_dmg_2 MonSound.unicorn_b_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41001 Rider.tawny_maned_lion Riders.tawny_maned_lion_m00 3 RidersTex.tawny_maned_lion.tawny_maned_lion_t00 RidersTex.tawny_maned_lion.tawny_maned_lion_t01 RidersTex.tawny_maned_lion.tawny_maned_lion_t02 0 1 0 1.50000000 0 1 5 MonSound.Hit_normal_12 MonSound.Hit_Normal_1 MonSound.Hit_Shell_3 MonSound.Hit_Shell_4 MonSound.Hit_Wet_4 3 MonSound.strider_dmg_1 MonSound.strider_dmg_2 MonSound.strider_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41002 Rider.steam_sledge Riders.steam_sledge_m00 4 RidersTex.steam_sledge.steam_sledge_t00 RidersTex.steam_sledge.steam_sledge_t01 RidersTex.steam_sledge.steam_sledge_t02 RidersTex.steam_sledge.steam_sledge_t03 0 1 0 1.50000000 0 1 5 ItemSound.armor_metal_weak_3 ItemSound.armor_metal_weak_5 ItemSound.armor_metal_weak_10 ItemSound.armor_metal_alt_1 ItemSound.armor_metal_alt_6 3 MonSound.iron_golem_breathe MonSound.iron_golem_dmg_2 MonSound.iron_golem_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41003 Rider.br_z_bike Riders.br_z_bike_m00 1 RidersTex.npc.br_z_bike_t00 0 1 0 1.00000000 0 1 5 MonSound.Hit_wood_1 MonSound.Hit_Wood_2 MonSound.Hit_Wood_3 MonSound.Hit_Wood_4 MonSound.Hit_Wood_5 0 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41004 Rider.br_g_ant_princess Riders.g_ant_princess_m00 3 RidersTex.Npc.g_ant_princess_t00 RidersTex.Npc.g_ant_princess_t01 RidersTex.Npc.g_ant_princess_t02 0 1 0 1.39999998 0 1 4 MonSound.Hit_Normal_10 MonSound.Hit_Shell_2 MonSound.Hit_Wet_5 ItemSound.shield_bone_1 3 MonSound.queen_ant_dmg_1 MonSound.queen_ant_dmg_2 MonSound.queen_ant_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41005 Rider.br_g_black_bear Riders.g_black_bear 2 RidersTex.Npc.g_black_bear_t00 RidersTex.Npc.g_black_bear_t01 0 1 0 1.39999998 0 1 4 MonSound.Hit_Normal_11 MonSound.Hit_Normal_13 MonSound.Hit_Wet_5 ItemSound.shield_bone_3 3 MonSound11.Kerberos_dmg01 MonSound11.Kerberos_dmg02 MonSound11.Kerberos_dmg03 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41006 Rider.br_g_halloween_flying_broom Riders.g_halloween_flying_broom_m00 1 RidersTex.Npc.g_halloween_flying_broom 0 1 0 1.39999998 0 1 5 MonSound.Hit_wood_1 MonSound.Hit_Wood_2 MonSound.Hit_Wood_3 MonSound.Hit_Wood_4 MonSound.Hit_Wood_5 0 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41007 Rider.illusion_vehicle Riders.illusion_vehicle_m00 2 RidersTex.bird_vehicle.bird_vehicle_t00 RidersTex.bird_vehicle.bird_vehicle_t01 0 1 0 1.05882394 0 1 4 MonSound.Hit_normal_3 MonSound.Hit_Wet_1 MonSound.Hit_Bone_2 MonSound.Hit_normal_12 0 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41008 Rider.vehicle_lindvior Riders.vehicle_lindvior_m00 2 RidersTex.Vehicle_Lindvior.Vehicle_Lindvior_t00 RidersTex.Vehicle_Lindvior.Vehicle_Lindvior_t01 0 1 0 1.05882394 0 1 4 MonSound.Hit_Normal_1 MonSound.Hit_Wet_3 MonSound.Hit_Bone_8 MonSound.Hit_Wet_5 3 MonSound3.dragon_mage_dmg_1 MonSound3.dragon_mage_dmg_2 MonSound3.dragon_mage_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41009 Rider.craft_vehicle_dwarf Riders.craft_vehicle_dwarf_m00 2 RidersTex.craft_vehicle_dwarf.craft_vehicle_dwarf_t00 RidersTex.craft_vehicle_dwarf.craft_vehicle_dwarf_t01 0 1 0 1.05882394 0 1 4 MonSound.Hit_Normal_1 MonSound.Hit_Wood_2 MonSound.Hit_Wood_3 MonSound.Hit_Normal_7 0 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41010 Rider.eligor_vehicle Riders.eligor_vehicle_m00 2 RidersTex.eligor_vehicle.eligor_vehicle_t00 RidersTex.eligor_vehicle.eligor_vehicle_t01 0 1 0 1.00000000 0 1 4 MonSound.Hit_normal_3 MonSound.Hit_Wet_1 MonSound.Hit_Bone_2 MonSound.Hit_normal_12 3 MonSound16.kanilof_dmg_1 MonSound16.kanilof_dmg_2 MonSound16.kanilof_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41011 Rider.elder_pegasus_vehicle Riders.elder_pegasus_vehicle_m00 2 RidersTex.elder_pegasus_vehicle.elder_pegasus_event_vehicle_t00 RidersTex.elder_pegasus_vehicle.elder_pegasus_event_vehicle_t01 0 1 0 1.00000000 0 1 5 MonSound.Hit_Normal_1 MonSound.Hit_Normal_6 MonSound.Hit_Normal_7 MonSound.Hit_Normal_8 MonSound.Hit_normal_12 3 MonSound12.cobalt_horse_dmg_1 MonSound12.cobalt_horse_dmg_2 MonSound12.cobalt_horse_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41012 Rider.wing_hound_vehicle Riders.wing_hound_vehicle_m00 2 RidersTex.wing_hound_t00 RidersTex.wing_hound_t01 0 1 0 1.00000000 0 1 4 ItemSound.armor_metal_weak_1 ItemSound.armor_leather_3 ItemSound.armor_metal_weak_3 ItemSound.armor_metal_weak_5 3 MonSound12.w_hound_dmg_1 MonSound12.w_hound_dmg_2 MonSound12.w_hound_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 41013 Rider.sp_griffin_vehicle Riders.sp_griffin_vehicle_m00 3 RidersTex.griffin_vehicle.griffin_vehicle_t00 RidersTex.griffin_vehicle.griffin_vehicle_t01 RidersTex.griffin_vehicle.griffin_vehicle_t02 0 1 0 1.00000000 0 1 5 MonSound.Hit_Normal_1 MonSound.Hit_Normal_6 MonSound.Hit_Normal_7 MonSound.Hit_Normal_8 MonSound.Hit_normal_12 3 MonSound23.sp_griffin_dmg_1 MonSound23.sp_griffin_dmg_2 MonSound23.sp_griffin_dmg_3 0 1 0 LineageEffect.p_u002_a 0 50.00000000 250.00000000 70.00000000 0 1 I've examined the server-side code and realized the problem likely comes from the client only looking at the _rideType (which is 1 for STRIDER) and ignoring the _rideNpcId when determining which animation to load. @Banshee Garnet mentioned an "extended dll" - does this involve modifying the L2.dll or L2Client.dll so it checks the NpcId in addition to the rideType? Has anyone already made this modification and could share more details on how to proceed? Looking at l2royale.com, I can see they indeed have multiple functional mounts in their Interlude client. I'd like to understand which approach they used: Is it indeed a DLL modification? Which specific parts of the DLL need to be modified? Are there already patches or tools that allow adding this functionality? If anyone has successfully implemented multiple mounts in Interlude or knows the precise technical solution, I would be very grateful for any information or help. Thanks in advance! -
Hello, I’m working on decrypting the Init packet that the server sends to the client during login. This packet is treated specially and contains the Blowfish keys used to encrypt and decrypt subsequent packets. Although it isn’t encrypted irreversibly and should be reversible, I haven’t succeeded yet. My goal is to extract the Blowfish key to decrypt certain client packets without disrupting the normal session flow. I can inject a DLL to sniff the packets, and with that I plan to develop a module that extends the client’s functionality. For example, after logging in, this module would capture all the data the client receives (character data, etc.). Additionally, it could listen for real-time server events, enabling integrations with Discord SDKs or other systems, thereby expanding Lineage 2’s capabilities. Init packet(0x00) LoginServer. Currently in the java Cores I checked there is no decode function for this package, only encript. -
-
-
-
-
Topics
-
Recommended Posts