Two New Exploits
#5

Quote:
Originally Posted by V415
Посмотреть сообщение
100% positive, we've had people try everything in the book with us, we managed to get them blocked at the network level rather than the local box and it's blocking them now but this is what we see in the logs:

I've removed the guys last 2 octets but this is an example of the log data when they try to connect as an existing player.

Line 16299: [06/11/2013 01:41:04] (1) Invalid client connecting from 41.96.x.x
Line 16315: [06/11/2013 01:41:04] Invalid client connecting from 41.96.x.x
Line 16318: [06/11/2013 01:41:04] [join] Harry_Poter has joined the server (1:41.96.x.x)
Line 16357: [06/11/2013 01:41:16] Incoming connection: 41.96.x.x:50008
Line 16361: [06/11/2013 01:41:17] [join] Harry_Poter has joined the server (6:41.96.x.x)
Line 16504: [06/11/2013 01:42:57] Incoming connection: 41.96.x.x:50028
Line 16506: [06/11/2013 01:42:58] [join] Harry_Poter has joined the server (6:41.96.x.x)
You can add an array to check if the player slot is used in your script. If someone try to connect with an used player ID, ban him.

Quote:
Originally Posted by cessil
Посмотреть сообщение
#1 you should post more information like crash dumps

#2 has happened on another server, if I remember correctly they were bypassing the login dialog, it can be fixed by not using the default virtual world for the game and only setting their virtual world after they've logged in
Can they spawn even if I return 0 in OnPlayerRequestSpawn?
BTW you can always use that secret native to check for bots. GetPlayerVersion returns invalid version name too for them, while IsPlayerNPC returns false.
Reply


Messages In This Thread
Two New Exploits - by V415 - 06.11.2013, 05:36
Re: Two New Exploits - by Infinity - 06.11.2013, 06:57
Re: Two New Exploits - by V415 - 06.11.2013, 08:45
Re: Two New Exploits - by cessil - 06.11.2013, 23:08
Re: Two New Exploits - by leong124 - 07.11.2013, 01:16

Forum Jump:


Users browsing this thread: 4 Guest(s)