I may have cracked nexon again by accident...

[supercarz1991]

I haven't tried with anything serious yet or even gone in game, but i did manage to discover HOW they are checking the rez files and it may be VERY easy to bypass and it's something that should remain unpatched

[Skaterforeva1]

You are the single reason that nexon has to do so much work. But its pretty epic. Congrats.

[supercarz1991]

i'll give everyone a hint...

md5 spoofing is very easy...

md5clone

[maniac16]

Wow Nice o:

[B4NDiT26]

Thanks for the hint.

[supercarz1991]

i you know how to use google, you'll figure it out from there

[B4NDiT26]

i you know how to use google, you'll figure it out from there

Yep^^

But I don't have time to edit .rez, it should work with an old .rez chams anyway, right?

[lilghost8631]

it's just a checksum correct? Seems easy enough, but the easiest bypass would be to hook the function that performs the checksum and force it to return the valid number. Or i suppose the checksum must be stored locally somewhere so find that hash and change it to yours?

[supercarz1991]

it's just a checksum correct? Seems easy enough, but the easiest bypass would be to hook the function that performs the checksum and force it to return the valid number. Or i suppose the checksum must be stored locally somewhere so find that hash and change it to yours?

the point of modding is to not have something you need to code to bypass. the point of modding is JUST modding the files with already created 3rd party tools. if you create something that hooks a function, your just making a hack correct? then just use a hack

[lilghost8631]

the point of modding is to not have something you need to code to bypass. the point of modding is JUST modding the files with already created 3rd party tools. if you create something that hooks a function, your just making a hack correct? then just use a hack

I know what modding is, I was just stating that a simple hook would be easier. However I do enjoy the challenge of modding.

[supercarz1991]

I know what modding is, I was just stating that a simple hook would be easier. However I do enjoy the challenge of modding.

hacking and hooking (with proper knowledge) is probably always easier. Frankly i think if they would have played their cards right, this could have been much funnier XD

imagine if they took the MD5's of the modded rez files for a month and any rez file that was different, insta ban

[lilghost8631]

hacking and hooking (with proper knowledge) is probably always easier. Frankly i think if they would have played their cards right, this could have been much funnier XD

imagine if they took the MD5's of the modded rez files for a month and any rez file that was different, insta ban

Without looking at it, I'm not sure what protocol you're referring to. I just assume it's an MD5 checksum on the files that's stored locally and thus any checksum could be put in place for the original value.

[supercarz1991]

Without looking at it, I'm not sure what protocol you're referring to. I just assume it's an MD5 checksum on the files that's stored locally and thus any checksum could be put in place for the original value.

its server sided. they have a Game folder on the server that gets scanned at the beginning of the game launch, at loading screen. the game folder on their side gets scanned, if any of our files are different

[lilghost8631]

its server sided. they have a Game folder on the server that gets scanned at the beginning of the game launch, at loading screen. the game folder on their side gets scanned, if any of our files are different

Not seeing a weak spot here without hooking or SQLi (very frowned upon).

----
I see you got the idea from this post:
https://www.mpgh.net/forum/211-combat...ml#post9108349

----
nvm just saw your post afterwards

[supercarz1991]

Not seeing a weak spot here without hooking or SQLi (very frowned upon).

----
I see you got the idea from this post:
https://www.mpgh.net/forum/211-combat...ml#post9108349

----
nvm just saw your post afterwards

it's easier to spoof it than it is to hook a function. If you were going to go that route though, no point in hooking sqli and doing all that crap. The game works on Send to Server commands. almost everything has an ID and parameters. Just figure out the ID and block the ID or manipulate the params. It's not that hard, that's how unlimited ammo works