[Security Update] About hidden GM accounts

Page 1 of 2 12 LastLast
Results 1 to 15 of 19
  1. #1
    Noob Prot is offline
    True MemberRank
    Jan 2007 Join Date
    Gurgaon, IndiaLocation
    515Posts

    idea [Security Update] About hidden GM accounts


    RaGEZONE Recommends

    RaGEZONE Recommends

    Just wanted to let people know that there are few GM accounts hard-coded into zoneserver. i.e. even when the accounts are not in GMInfo.ini, they will work as a GM account & players can simply register those accounts and use all GM powers.

    To find out those GM accounts, Just use a hex editor to open zoneserver.exe and search for a3gm1

    You will be able to see some more GM accounts. Simply edit it and rename it to any other word and/or register those accounts yourself so that people can not misuse it.

    I checked the same in 202 , 205 , 219 server files and all of these includes the IDs in their ZS. (120 files were not having these entries in ZS)

    The GM ids are not the only security glitch in our files, there are many more to check.. I request people to share the info if they get to know about them. As this forum gave you too many ideas and information, atleast return something to it!
    Read Rules before posting.

    A3 Section Rules
    War Inc Section Rules
    Ran Online Section Rules

    Please Don't PM me offers. I will never work for money. If you want help, ask using the forums.

    Regards,
    Prot


  2. #2
    Ultimate Member a3gamemaster is offline
    MemberRank
    Jul 2011 Join Date
    Gujrat [India]Location
    182Posts

    Re: [Security Update] About hidden GM accounts

    thankx bro.
    Posted via Mobile Device

  3. #3
    Goodbye chrissdegrece is offline
    True MemberRank
    Oct 2009 Join Date
    GreeceLocation
    1,017Posts

    Re: [Security Update] About hidden GM accounts

    nice timing, hahahaha how u got that? random search in 25MB file?

  4. #4
    Member kb1991 is offline
    MemberRank
    May 2011 Join Date
    PrickLocation
    39Posts

    Re: [Security Update] About hidden GM accounts

    Nice post Prot ! :D

  5. #5
    Noob Prot is offline
    True MemberRank
    Jan 2007 Join Date
    Gurgaon, IndiaLocation
    515Posts

    Re: [Security Update] About hidden GM accounts

    nope.. theres a story behind this.. few ppl know that story! :P
    Read Rules before posting.

    A3 Section Rules
    War Inc Section Rules
    Ran Online Section Rules

    Please Don't PM me offers. I will never work for money. If you want help, ask using the forums.

    Regards,
    Prot

  6. #6
    Goodbye chrissdegrece is offline
    True MemberRank
    Oct 2009 Join Date
    GreeceLocation
    1,017Posts

    Re: [Security Update] About hidden GM accounts

    hehehe, nice prot

  7. #7
    Shortcut to Hell lovbudy is offline
    True MemberRank
    Feb 2010 Join Date
    Navi Mumbai (NeLocation
    299Posts

    Re: [Security Update] About hidden GM accounts

    Just Discusses and The post was On Ragezone
    Nice one!!!
    Ragezone and A3 562 Server Guide.Please Read this Before Posting
    I would Like to change world but they wont give me source Code
    "Ragezone is a place to come to learn and share your knowledge.
    If you are not here for those reasons,
    Then you are here for the wrong ones" -Lovbudy

  8. #8
    Programmer cyberinferno is online now
    True MemberRank
    Jun 2009 Join Date
    BangaloreLocation
    414Posts

    Re: [Security Update] About hidden GM accounts

    Quote Originally Posted by protisback View Post
    nope.. theres a story behind this.. few ppl know that story! :P
    I am one of them :)
    Please help me in my dream MMORPG emulator https://github.com/cyberinferno/inferno-emu-v2

  9. #9
    Member kb1991 is offline
    MemberRank
    May 2011 Join Date
    PrickLocation
    39Posts

    Re: [Security Update] About hidden GM accounts

    Quote Originally Posted by protisback View Post
    nope.. theres a story behind this.. few ppl know that story! :P
    i am second :p

  10. #10
    Goodbye chrissdegrece is offline
    True MemberRank
    Oct 2009 Join Date
    GreeceLocation
    1,017Posts

    Re: [Security Update] About hidden GM accounts

    rofl whole forum

  11. #11
    Noob Prot is offline
    True MemberRank
    Jan 2007 Join Date
    Gurgaon, IndiaLocation
    515Posts

    Re: [Security Update] About hidden GM accounts

    requesting moderator to close the thread.. no more discussion required in this issue!
    Read Rules before posting.

    A3 Section Rules
    War Inc Section Rules
    Ran Online Section Rules

    Please Don't PM me offers. I will never work for money. If you want help, ask using the forums.

    Regards,
    Prot

  12. #12
    Ŋ cvrdheeraj is offline
    True MemberRank
    Jul 2006 Join Date
    IndiaLocation
    1,203Posts

    Re: [Security Update] About hidden GM accounts

    You remind me of all the good old hacks :)

    Promote RaGECRAFT.. http://www.ragecraft.co.nr

  13. #13
    Account Inactive ash.blackdevil is offline
    InactiveRank
    Apr 2010 Join Date
    75Posts

    Re: [Security Update] About hidden GM accounts

    Thanks very much protisback

  14. #14
    Shortcut to Hell lovbudy is offline
    True MemberRank
    Feb 2010 Join Date
    Navi Mumbai (NeLocation
    299Posts

    ! Re: [Security Update] About hidden GM accounts

    Quote Originally Posted by cvrdheeraj View Post
    You remind me of all the good old hacks :)
    You mean there are more vulnerable bugs that can make a server Issue's?
    Ragezone and A3 562 Server Guide.Please Read this Before Posting
    I would Like to change world but they wont give me source Code
    "Ragezone is a place to come to learn and share your knowledge.
    If you are not here for those reasons,
    Then you are here for the wrong ones" -Lovbudy

  15. #15
    Goodbye chrissdegrece is offline
    True MemberRank
    Oct 2009 Join Date
    GreeceLocation
    1,017Posts

    Re: [Security Update] About hidden GM accounts

    This GM thing is not a bug, it's obviously designed that way. And ZS code clearly checks for these accounts when a gm command is issued.

    I haven't dug deep in zs code but my guess is that it serves a purpose which at the moment isn't clear.




Page 1 of 2 12 LastLast

Advertisement