Diff Metin2 - SQL Injection (Messenger) for old Game version rev_2k89m. (Triadica.pl)

[Bambus3k™]

Hey,

 

this is easy fix in different files for SQL Injection from Messanger system.

So, this fix in diff file is for two bin, game and db.

 

First for db:

This difference file is created by Bambus3k

db
00082F15: 01 00

Secound for game:

This difference file is created by Bambus3k

game
002EB6F5: 01 00

What doing this diff?

He disable CLIENT_MULTI_STATEMENTS flag in function mysql_real_connect. So, now don't work multi query on Your p-server. I disable this option, bsc game or db don't use this. This is only great idea for "hackers".

 

What is multi query?

For example: (yellow= fist query is normal server query | orange = secound query who create hacker. | red = seperator, is disable across flag CLIENT_MULTI_STATEMENTS. )

 

DELETE FROM messenger_list%s WHERE account='%s' AND companion = '%s'; TRUNCATE item;

 

Now, sql don't see this separator ";" for new query and send sytax error to syserr.

I don't show how to use this exploit, bsc this is very dangerous for p-servers, but i think, all known it. (better users known)

 

Source:

 

 

.text:083336EF                 mov     dword ptr [esp+1Ch], 1000h ; int
.text:083336F7                 mov     dword ptr [esp+18h], 0 ; char
.text:083336FF                 mov     dword ptr [esp+14h], 0 ; int

 

 

Thanks & Best Regards Bamubs3k, from Balmora.pl aka Triadica.pl

btw, i know. My English its very bad.

[Matzar]

Spoko wstawka. Pytanie czy był sens aby to tutaj udostępniać?

[Terenzo.]

x

[mattiasforum]

Leci+

Ktos chyba pkt zbija

[harnaś]

Spoko wstawka. Pytanie czy był sens aby to tutaj udostępniać?

 

A co, chciałeś offac serwery przed startem antarisa? :> 

 

 

Dobrze, że ktoś pomyślał o osobach które korzystają jeszcze ze starego game i będą mogły się od tego uchronić

[Matzar]

A co, chciałeś offac serwery przed startem antarisa? :> 

 

 

Dobrze, że ktoś pomyślał o osobach które korzystają jeszcze ze starego game i będą mogły się od tego uchronić

Nie mam co robić tylko offać serwery. Rzeczywiśćie, harnaś.

[Daloris]

Dzięki ! Leci lajk

[Indrav2]

Dobra wstawka Na pewno wielu osobom to pomoże. Leci +

 

Tobie z pewnością :*

 

 

Like za wstawkę

 

 

[lazarus.1988]

now 34k+

[killerakoz]

plese for 40k diff

[Steico]

please 2089 dif

[Bambus3k™]

plese for 40k diff

So, please upload / reupload this game. I don't have it. My old p-server use game rev 2k89m, and my new p-server is on source files.

 

now 34k+

To wrzuć te wersje gejma.

[killerakoz]

So, please upload / reupload this game. I don't have it. My old p-server use game rev 2k89m, and my new p-server is on source files.

 

To wrzuć te wersje gejma.

Link:here

plese if you fix this gamefile you will have my respect... cause my server is going to close

[Endymion]

db

This difference file is created by The Interactive Disassembler


db_r33820_32_u
000925A5: 01 00

 

game

This difference file is created by The Interactive Disassembler


game_r34083_32
0040DFE5: 01 00

z deva pod te game 34costam

[DiabloXPL]

Wreszcie coś normalnego wrzucacie w tym dziale. Like

[Cigarette ^^]

Spoko wstawka. Pytanie czy był sens aby to tutaj udostępniać?

 

Bez komentarza. Na tym świecie jak widać żyją jeszcze normalni ludzie w porównaniu do was. 

[Matzar]

Bez komentarza. Na tym świecie jak widać żyją jeszcze normalni ludzie w porównaniu do was. 

?

[Bambus3k™]

Link:here[/size]

plese if you fix this gamefile you will have my respect... cause my server is going to close [/size]

 

Okay, i now come back to home. Your game is compressed/scripted etc.. So this function is hard to search, but a few minuts i create diff for you.

 

This difference file is created by Bambus3k

game_azuris
003EBA13: 01 00

[EnemyS]

Bez komentarza. Na tym świecie jak widać żyją jeszcze normalni ludzie w porównaniu do was. 

Serwer wam wyjebało gówna jebane XDDDDDDDDDDDDDDDDDDDDDDDDDDDD

[killerakoz]

plese if you fix this gamefile you will have my respect... cause my server is going to close [/size]

 

Okay, i now come back to home. Your game is compressed/scripted etc.. So this function is hard to search, but a few minuts i create diff for you.

 

This difference file is created by Bambus3k

game_azuris
003EBA13: 01 00

omg omg omg thanksssss!! you save my server! you are the besttt

[Pegas©]

Dobra wstawka.

Dzięki.

[Steico]

First for db:
This difference file is created by Bambus3k

db
00082F15: 01 00Secound for game:
This difference file is created by Bambus3k

game
002EB6F5: 01 00