I may have cracked nexon again by accident...

I haven't tried with anything serious yet or even gone in game, but i did manage to discover HOW they are checking the rez files and it may be VERY easy to bypass and it's something that should remain unpatched

You are the single reason that nexon has to do so much work. But its pretty epic. Congrats.

i'll give everyone a hint...

md5 spoofing is very easy...

md5clone

Wow Nice o:

Thanks for the hint.

i you know how to use google, you'll figure it out from there

Originally Posted by supercarz1991

i you know how to use google, you'll figure it out from there

Yep^^

But I don't have time to edit .rez, it should work with an old .rez chams anyway, right?

it's just a checksum correct? Seems easy enough, but the easiest bypass would be to hook the function that performs the checksum and force it to return the valid number. Or i suppose the checksum must be stored locally somewhere so find that hash and change it to yours?

Originally Posted by lilghost8631

it's just a checksum correct? Seems easy enough, but the easiest bypass would be to hook the function that performs the checksum and force it to return the valid number. Or i suppose the checksum must be stored locally somewhere so find that hash and change it to yours?

the point of modding is to not have something you need to code to bypass. the point of modding is JUST modding the files with already created 3rd party tools. if you create something that hooks a function, your just making a hack correct? then just use a hack

Originally Posted by supercarz1991

the point of modding is to not have something you need to code to bypass. the point of modding is JUST modding the files with already created 3rd party tools. if you create something that hooks a function, your just making a hack correct? then just use a hack

I know what modding is, I was just stating that a simple hook would be easier. However I do enjoy the challenge of modding.

Originally Posted by lilghost8631

I know what modding is, I was just stating that a simple hook would be easier. However I do enjoy the challenge of modding.

hacking and hooking (with proper knowledge) is probably always easier. Frankly i think if they would have played their cards right, this could have been much funnier XD

imagine if they took the MD5's of the modded rez files for a month and any rez file that was different, insta ban

Originally Posted by supercarz1991

hacking and hooking (with proper knowledge) is probably always easier. Frankly i think if they would have played their cards right, this could have been much funnier XD

imagine if they took the MD5's of the modded rez files for a month and any rez file that was different, insta ban

Without looking at it, I'm not sure what protocol you're referring to. I just assume it's an MD5 checksum on the files that's stored locally and thus any checksum could be put in place for the original value.

Originally Posted by lilghost8631

Without looking at it, I'm not sure what protocol you're referring to. I just assume it's an MD5 checksum on the files that's stored locally and thus any checksum could be put in place for the original value.

its server sided. they have a Game folder on the server that gets scanned at the beginning of the game launch, at loading screen. the game folder on their side gets scanned, if any of our files are different

Originally Posted by supercarz1991

its server sided. they have a Game folder on the server that gets scanned at the beginning of the game launch, at loading screen. the game folder on their side gets scanned, if any of our files are different

Not seeing a weak spot here without hooking or SQLi (very frowned upon).

----
I see you got the idea from this post:
http://www.mpgh.net/forum/211-combat...ml#post9108349

----
nvm just saw your post afterwards

Originally Posted by lilghost8631

Not seeing a weak spot here without hooking or SQLi (very frowned upon).

----
I see you got the idea from this post:
http://www.mpgh.net/forum/211-combat...ml#post9108349

----
nvm just saw your post afterwards

it's easier to spoof it than it is to hook a function. If you were going to go that route though, no point in hooking sqli and doing all that crap. The game works on Send to Server commands. almost everything has an ID and parameters. Just figure out the ID and block the ID or manipulate the params. It's not that hard, that's how unlimited ammo works

I may have cracked nexon again by accident...

Post a Reply

Similar Threads

Tags for this Thread