[Discussion] So what functions still work?

So what functions still work?

Ever since figuring out a few dangerous things about the game I've lost interest in updating my private hack, but I'm a bit curious what's still possible.

Heal
Godmode
Teleporting OTHER players
Spawning Items on OTHER players
Changing Names

I never tried testing heal individually or teleporting myself, or changing my own name. But changing others' names, godmode, teleporting other players, spawning items for other players did not work on the Alpha 8 Update with previous code. Anyone able to confirm/deny they were able to fix or otherwise get these functions working?

Part of why I gave up on Reign of Kings is because I kind of corrupted my own account... I was working to see if I could corrupt player characters on a server, testing on myself. Unfortunately, after one of my tests, I was unable to play on ANY server, regardless of whether or not I had previously played on it. Login/logout to any server ANY number of times, my player is still corrupted. Cannot move, cannot talk, cannot command kill myself, etc. I have no idea wtf I did but I did this before on Alpha 7, and it persists into Alpha 8.

Another quirk, I have an issue where I login to a server and can only interact with objects for about 5 minutes. Then, I am unable to spawn items, or interact with any bags or chests or the throne. I can still collect resources and PvP with players. Killing myself does not fix the issue. Relogging does not fix the issue. Restarting the client works for only another 5 minutes. File integrity check confirms there is no file discrepancies. Of course I've tested this without injecting a hack as well. This MAY be related to the corruption, but I highly suspect this is not the case, and it's merely a bug with the game. Anyone else have these issues?

Godmode got a check so that isn't working anything else should work

Originally Posted by .Zer0

Godmode got a check so that isn't working anything else should work

I'm asking if others have found a way around that check. I probably shouldn't bother, of course there's a way around it that isn't too difficult. Just a measure of whether it's worth the effort.

I was wondering if anyone else was having an issue with the other commands. I myself have been UNABLE to get any of them to work the way I described. What most confuses me is spawning items for other players. Nothing changed, I can spawn things for myself, but the SAME function to spawn things on other players doesn't work. Weird. Name change as well, why wouldn't that work? Wondering if others have run into these problems.

I havent tried many of the old features since i got more interested in creating my own loader for my dll - but it seems way over my head :P

Has anyone actually looked into the integrity check? It seems it's matching the result of the local crc/hash + a random value against from what the server sends.

So one should be able to always give the right answer - right?

edit: actually it looks more like they don't check the files but the GameObjects being in use.

Originally Posted by fisheyed

I havent tried many of the old features since i got more interested in creating my own loader for my dll - but it seems way over my head :P

Has anyone actually looked into the integrity check? It seems it's matching the result of the local crc/hash + a random value against from what the server sends.

So one should be able to always give the right answer - right?

edit: actually it looks more like they don't check the files but the GameObjects being in use.

They only check files. No gameobjects at all. Its so easy to bypass its not even funny

Originally Posted by .Zer0

If im correct that was similar with some other functions that you need to call an event I think this was the case with teleporting.

Yes - at least before a#7/8 you'd need to initiate an event for teleporting others - don't know what it is like now.

- - - Updated - - -

Originally Posted by Kunii

They only check files. No gameobjects at all. Its so easy to bypass its not even funny

Yeah i mixed something up :P i'm prolly looking at the wrong code atm - im just at their PeasantBurner and i try to understand what their doing there:

They kind of work with 3 lists: 1. hanging requests which gets repopulated every cycle, 2. nonresponders that get added to banlist banned after 3 unsuccessfull attempts...

But i don't seem to get what their Keycycle and Verifiers are actually doing except producing random values - or better how this corelates with file integrity...

e: I think i found it - lets see if there isn't an additional correlation what i found now and the previously mentioned component.

e2: Now do i replce the hashlist in the assets or do i reverse the checks? :P

e3: I'm still thinking they possibly have 2 layers of detection:

1. when checking the hashes of allowed assemblies. They even check for injected assemblies by hooking the Appdomains .AssemblyLoad event and make the game crash on detection.

2. And possibly they add a basevalue of these checks to their peasantburner.

3. It also seems as if every player related event is matched against these basevalues. Keywords are: "Secretion", "Magic", "ActDetector" and "Optimized".

If im correct that was similar with some other functions that you need to call an event I think this was the case with teleporting.

I somehow have The feeling they also have another detection in but it's silent and will create a ban wave sometime later but I didn't look into it just a feeling

Zero, if they had another silent one in place, we'd know. There's only a few ways that doesn't break privacy intrusion laws that a Developer can check that.
A modded file a part of the game which you have to agree upon installing that checks files and the game state to see whether or not anything is being modified on the client side, such would be in relation to Blizzards Warden.

Or they would have server side checks which have to correlate to client side code. Such as HashIDs per each item/itemstack generated by either the client code or the Server code. Those are then checked by the server to see if they match what was generated. If they aren't then they are hacked items = ban result.

edit: now as things are concerned such as clearing everyone's items, or fly mode all etc, that has the potential to be harder to check if their server logs aren't set up appropriately.

Also, even though their god mode is out, you can still have god mode, you just have to think about it differently

Originally Posted by HotTopic1

Zero, if they had another silent one in place, we'd know. There's only a few ways that doesn't break privacy intrusion laws that a Developer can check that.
A modded file a part of the game which you have to agree upon installing that checks files and the game state to see whether or not anything is being modified on the client side, such would be in relation to Blizzards Warden.

Or they would have server side checks which have to correlate to client side code. Such as HashIDs per each item/itemstack generated by either the client code or the Server code. Those are then checked by the server to see if they match what was generated. If they aren't then they are hacked items = ban result.

edit: now as things are concerned such as clearing everyone's items, or fly mode all etc, that has the potential to be harder to check if their server logs aren't set up appropriately.

Also, even though their god mode is out, you can still have god mode, you just have to think about it differently

Yeah but i just tested their injection check positive. So if you inject without additionally circumventing the hashchecks by either reversing the logic - or add your signatures to their hashlist in the assets - they realize it.

Tested with private injector and EI with all methods available.

Please send me a message at what you are looking at fisheyed and I will check it when I get home. I just opened the code for the first time last night for about 5 to 10 minutes. I think I may have found a way to turn the Ballista into a turret. Lol.

Anyways yeah, let me know what you've found or are looking at. Thanks!

Originally Posted by HotTopic1

Please send me a message at what you are looking at fisheyed and I will check it when I get home. I just opened the code for the first time last night for about 5 to 10 minutes. I think I may have found a way to turn the Ballista into a turret. Lol.

Anyways yeah, let me know what you've found or are looking at. Thanks!

Take a look at the DLL thread. I listed some functionality there corresponding to integrity checks, injection check and how this may affect playing :P

This may seem random but could you add me on steam and maybe teach me how to hack? This may seem very nooby and stupid but I really wanna learn but I don't trust websites

DrDooby, it requires the knowledge of programming.

Google C# Development tutorials. That should get you started. Good luck!

Yeah true maybe I just expected more from codehatch then they actually did with The update

DiscussionSo what functions still work?

Similar Threads