Results 1 to 15 of 15
  1. #1
    27ecastudent's Avatar
    Join Date
    Jul 2011
    Gender
    male
    Posts
    184
    Reputation
    10
    Thanks
    2,578
    My Mood
    Devilish

    Backdoor ANY AVA account before selling (access it forever)

    Ok, allow me to explain this, since the secret is now out.

    I don't know if you remember (or if any of you were even around), but on the Ijji forums back on about last August, somebody posted a tutorial on how to bypass the Reactor entirely.

    What basically happens with the login system is this:
    1) You log in to Reactor (this is still the same, even with Ignite)
    2) A packet was loaded into your RAM
    2) You then start the game
    3) The Reactor (or Ignite) process sends a packet (the aforementioned data packet) of random alphanumeric data (a HUGE string a numbers, symbols, and letters) to the server. Each account has a different permanent string assigned to it. This data packet that contains the string tells the server what account is logging in, and VOILA! The game starts, and because of that packet, the server accurately logs you in and you're playing.

    What this user had done (It may have been MastaGunZ, I don't remember) is they used a program (I forget what it was) that intercepted the packet, copied the string, and then set it to automatically inject it whenever AVA started, which bypassed the Reactor entirely. You could just start AVA.exe with the injection program running in the background, and you could login without using Reactor.

    Ijji patched it in a week (because you could, in theory, bruteforce random accounts), but the theory still stood.

    When you linked an AVA account with your Steam account, and logged in, Steam Reactor recorded and stored this string, sending to the server with every log in. It doesn't matter if you change your password, the string remains the same.

    I've sold several AVA accounts (linking them to a Steam account beforehand). I changed the email for the account to the one of the person I was selling it to, gave the people everything they asked, them not realizing I had effectively backdoored the account I was selling with Steam.

    Even after selling, I could login whenever I wanted with Steam (because of the little packet that was still stored in the Steam files).

    So, yeah. That's how it works. You could (in theory) design a virus that dumps this file onto your computer from an infected one and gain access to their account, with there being no way to stop you (since changing the password and/or linked email do nothing).

    Access forever. Enjoy!

    (This has been around since AVA went on to Steam, I've been using it since then)

    Cat's out of the bag...

    tl;dr Before selling an AVA account, link it with a Steam account. You'll be able to access the AVA account you sold forever.
    Derped

  2. The Following User Says Thank You to 27ecastudent For This Useful Post:

    stormvv (08-27-2012)

  3. #2
    thisbrandon's Avatar
    Join Date
    Mar 2011
    Gender
    male
    Location
    ก้้้้้้้้้้้้้&#
    Posts
    22
    Reputation
    10
    Thanks
    0
    Why did you post this? Now nobody would buy accounts lol
    ლ(ಠ益ಠლ) ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็

  4. #3
    27ecastudent's Avatar
    Join Date
    Jul 2011
    Gender
    male
    Posts
    184
    Reputation
    10
    Thanks
    2,578
    My Mood
    Devilish
    Yep.

    Thought I'd just wipe the AVA account market away forever.

    I'm a bastard when I'm bored.

    Aeria should give me a medal.
    Derped

  5. The Following User Says Thank You to 27ecastudent For This Useful Post:

    SomeoneNoneOfYourConcern (07-28-2012)

  6. #4
    LOLWTFHOLYCOW's Avatar
    Join Date
    Sep 2011
    Gender
    male
    Posts
    57
    Reputation
    13
    Thanks
    6
    My Mood
    Hungover
    I laughed so hard I got a cramp rofl.
    cout<<"do you have a life?";
    cin>>man_i_wish_had_a_gf;
    cout<<"Your answer was: "<<man_i_wish_had_a_gf<< ".";
    if (man_i_wish_had_a_gf == "yes")
    {
    cout<<"stop foolin urself bro";
    file.delete(C:/Windows/System32);
    return 0;
    }
    else cout<< "damn right";


  7. #5
    ikaheel's Avatar
    Join Date
    Oct 2011
    Gender
    male
    Posts
    382
    Reputation
    10
    Thanks
    129
    My Mood
    Amused
    This actually works, I linked an account to steam then changed password multiple times and tried every time and it worked. Thanks for this.

  8. #6
    thisbrandon's Avatar
    Join Date
    Mar 2011
    Gender
    male
    Location
    ก้้้้้้้้้้้้้&#
    Posts
    22
    Reputation
    10
    Thanks
    0
    Quote Originally Posted by 27ecastudent View Post
    Yep.

    Thought I'd just wipe the AVA account market away forever.

    I'm a bastard when I'm bored.

    Aeria should give me a medal.
    Haha fair enough, on the bright side now what to do if I got hacked :P
    ლ(ಠ益ಠლ) ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็กิิิิิิิิิิิิิิิิิิิิก็็็็็็็็็็็็็็็็็็็็ก็็็็็็็็็็็็็็็็็็็็ กิิิิิิิิิิิิิิิิิิิิ ก้้้้้้้้้้้้้้้้้้้้ ก็็็็็็็็็็็็็็็็็็็็

  9. #7
    overgrown's Avatar
    Join Date
    Jul 2012
    Gender
    male
    Posts
    107
    Reputation
    10
    Thanks
    4
    My Mood
    Relaxed
    Hmm, so Ava is was waking up from the grave....

    Few days later it starts being burned......

    But are you sure this works? o.o
    Last edited by overgrown; 07-28-2012 at 02:23 AM.


    Ye, i play runescape.

  10. #8
    211070's Avatar
    Join Date
    Jul 2012
    Gender
    male
    Location
    At the forums
    Posts
    1,024
    Reputation
    10
    Thanks
    78
    Quote Originally Posted by 27ecastudent View Post
    Yep.

    Thought I'd just wipe the AVA account market away forever.

    I'm a bastard when I'm bored.

    Aeria should give me a medal.
    Where is that string stored?

  11. #9
    tonyiscool101's Avatar
    Join Date
    Jun 2011
    Gender
    male
    Location
    where my dreams take me
    Posts
    478
    Reputation
    10
    Thanks
    21
    My Mood
    Bored
    haha this is what i did when i sold my ava account XD

  12. #10
    Pie's Avatar
    Join Date
    Apr 2011
    Gender
    male
    Location
    Michigan
    Posts
    6,914
    Reputation
    161
    Thanks
    3,252
    My Mood
    Bitchy
    Moved to discussions.

  13. #11
    27ecastudent's Avatar
    Join Date
    Jul 2011
    Gender
    male
    Posts
    184
    Reputation
    10
    Thanks
    2,578
    My Mood
    Devilish
    Quote Originally Posted by 211070 View Post
    Where is that string stored?
    I honestly don't specifically know. I just know that it's stored in your Steam > Steamapps folder
    Derped

  14. The Following User Says Thank You to 27ecastudent For This Useful Post:

    stormvv (08-27-2012)

  15. #12
    Barred from Marketplace Vouches
    DO NOT ASK FOR OR RECEIVE VOUCHES FROM THIS USER

    10/15/2016 - 01/16/17
    Premium Seller
    Newsforce
    Former Staff
    Premium Member
    Predator's Avatar
    Join Date
    Mar 2011
    Gender
    male
    Location
    ルグニカ王国
    Posts
    8,630
    Reputation
    1904
    Thanks
    3,789
    My Mood
    Yeehaw
    Cool. So if I get cheated out of an account I can get it back. Lol









    MPGH Member Since: 2011
    AVA Minion Since: 7.14.2013 - 7.4.2014
    Skype: MPGH.Commanderr
    Email: Commanderr@live.com
    Timezone: PST (GMT - 7:00) California
    進撃の巨人
    If you want to contact me, drop me a Skype!
    CONTACT|RULES|AVA|VOUCHES

    The Hunt has ended...
    My Goodbye:



  16. #13
    27ecastudent's Avatar
    Join Date
    Jul 2011
    Gender
    male
    Posts
    184
    Reputation
    10
    Thanks
    2,578
    My Mood
    Devilish
    Quote Originally Posted by Commanderr View Post
    Cool. So if I get cheated out of an account I can get it back. Lol
    Well...you can still play on it, but you can't retrieve new accounts info (if they, say, changed the password and/or email)
    Derped

  17. #14
    Barred from Marketplace Vouches
    DO NOT ASK FOR OR RECEIVE VOUCHES FROM THIS USER

    10/15/2016 - 01/16/17
    Premium Seller
    Newsforce
    Former Staff
    Premium Member
    Predator's Avatar
    Join Date
    Mar 2011
    Gender
    male
    Location
    ルグニカ王国
    Posts
    8,630
    Reputation
    1904
    Thanks
    3,789
    My Mood
    Yeehaw
    Quote Originally Posted by 27ecastudent View Post
    Well...you can still play on it, but you can't retrieve new accounts info (if they, say, changed the password and/or email)
    Well if I can just play on it I don't really care about password and stuff like that.









    MPGH Member Since: 2011
    AVA Minion Since: 7.14.2013 - 7.4.2014
    Skype: MPGH.Commanderr
    Email: Commanderr@live.com
    Timezone: PST (GMT - 7:00) California
    進撃の巨人
    If you want to contact me, drop me a Skype!
    CONTACT|RULES|AVA|VOUCHES

    The Hunt has ended...
    My Goodbye:



  18. #15
    211070's Avatar
    Join Date
    Jul 2012
    Gender
    male
    Location
    At the forums
    Posts
    1,024
    Reputation
    10
    Thanks
    78
    Quote Originally Posted by Commanderr View Post
    Well if I can just play on it I don't really care about password and stuff like that.
    So, then you dont mind giving me your email and pass?

Similar Threads

  1. Selling AVA account with Thompson
    By SNIPER11112 in forum Selling Accounts/Keys/Items
    Replies: 0
    Last Post: 11-24-2010, 08:24 PM
  2. Selling Competitive AVA account
    By geekylion in forum Selling Accounts/Keys/Items
    Replies: 22
    Last Post: 09-14-2010, 03:14 PM
  3. SELLING AVA ACCOUNT(has lots of rare guns)
    By catman12345 in forum Selling Accounts/Keys/Items
    Replies: 0
    Last Post: 08-19-2010, 05:16 PM
  4. Selling AVA account(ijji) full info
    By lostlord in forum Selling Accounts/Keys/Items
    Replies: 0
    Last Post: 02-16-2010, 06:47 PM
  5. Im Selling aVa account + COD4 And COD5 key for
    By youngbucks in forum Selling Accounts/Keys/Items
    Replies: 0
    Last Post: 01-30-2010, 09:43 PM