-
Posts
-
First of all, I never challenged you at any point. Second, congratulations—this is what you should have done from the start: shown how it worked, how to exploit it, etc. Now, let’s look at the facts: The flaw requires the person to be the OWNER of the castle. It requires the use of third-party programs or a modified client—and most private servers don’t even allow the use of modified clients, thanks to their anti-cheat systems. Are you honestly certain that a castle owner on a private server would risk losing their account just to pull off this exploit? They’d have to be a complete idiot. You’ve spent months going on about how you discovered a bug that has ZERO impact on the actual gameplay—congratulations. I’m not saying that flaws are bad or that they shouldn’t be fixed—in fact, the flaw *was* fixed. What I’m saying is that you’ve been harping on the same point for months, even though the issue had already been resolved in the closed branch. It’s the prerogative of those who maintain the code to fix things however they see fit, don’t you think? And learn this: when you report a bug, you MUST: 1- Report the bug (obviously) 2- Explain in detail how the bug occurs 3- Prove that the bug actually happens And instead of contributing to the project through the proper, public channels, you chose to turn this into a whole circus—I’d just like to understand why... It’s a good thing everyone in this thread will get to see who the "asshole" is. -
To use this exploit you have to: 1) Have access to the castle vault, aka you have to own a castle. 2) Send through Adrenaline Engine.BypassToServer(Bypass) as emommy said 3) In the crafted packet you will put a negative amount eg -100000000 What this does is it multiplies it by -1 so it becomes positive. 4) You won't see anything in your inventory, but if you open the castle vault through the Chamberlain you will see that the warehouse now has 10000000 adena. The negative became positive. 5) Withdraw the adena normally and you now have all the adena you need. I wouldn't bother explaining how to do it, but this idiot (Galagard) wanted to challenge me. And from what I can see, they haven't patched the exploit even if I reported it to them a week ago so it's obvious that people will start sharing it around. Maybe I should start positing here instead of the official channels. All public versions of L2JMobius for all chronicles are vulnerable and not patched yet. And thanks to this idiot (Galagard), everyone now knows. Baldurian. EDIT: Ok I just got informed that Mobius decided to accept the fix in the public repo. So I will now post a proof of the exploit as Galagard requested. Normally I don't do so, but my good friend Galagard who has his nose so far stuck up his asshole, insulted me, and challenged me to show proof: And to be fair to everyone, this is not an L2JMobius issue as the thread claims. It's L2JServer leftover, so if you have L2JServer derivative packs, you should patch too. -
Already fixed in subscriber version, but this bug report is classified as "Invalid" because since the author did not explain the method in detail, the validation flaw does indeed exist—but that alone does not prove it is possible to duplicate adena or any other item by exploiting said flaw. It looks like yet another AI hallucinating a vulnerability, then deducing that it could be used to exploit a different vulnerability. No have proofs in video or a detailed way to reproduce the potential failure Go find something else to do, Baldurian; you don’t even know how to exploit the flaw you reported yourself.
-
Interface sources for P196 (Secret of Empire 2 or aka Fafurion) for Main/Classic. This protocol is commonly used for classic interlude. You can use the xdat editors which support this protocol from my other shares. NWindow + Interface UC + L2Editor Compiler Download -
Interface sources for P166 (Secret of Empire 1) for Main/Classic. This protocol is commonly used for classic interlude. You can use the xdat editors which support this protocol from my other shares. NWindow + Interface UC + L2Editor Compiler Download
-
-
Topics
-
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now