Welcome!

Join our community of MMO enthusiasts and game developers! By registering, you'll gain access to discussions on the latest developments in MMO server files and collaborate with like-minded individuals. Join us today and unlock the potential of MMO server development!

Join Today!

1.6.5 debug backdoor for normal players?

Initiate Mage
Joined
Oct 17, 2021
Messages
3
Reaction score
1
Hey all,

Title says it all really.
I've removed debug from ptemplate
opened debug and used commands myself didnt work.
Yet a normal player managed to bypass it all and abused the hell out of it.
I know it lies in gs but no idea what i'm looking for.
Thanks
Unleashed.
 
  • Like
Reactions: Ayv
Newbie Spellweaver
Joined
Jan 20, 2015
Messages
71
Reaction score
20
Some basic backdoor debugging has been found
Backdoor Debug: d 1 39055 90252 11884 69178
DebugPassword: d 1 95764 54824 62348 98742
d 1 1 Logout character
d 1 0 Quit Game
Please check the world.log file for cmd debugs that have been used by the user on the client, including both fatal debug errors and incorrect debug errors.
Advice: It's best not to use file server 165 and 174 for production business. If you don't have the knowledge of reverse engineering and rewriting, of course you won't be able to fix debugging from players.
P/S: Developers always connect directly to your server in various forms. Therefore: This file should not be used in production
 
Newbie Spellweaver
Joined
May 11, 2009
Messages
48
Reaction score
43
Removendo DEBUG BACKDOOR LIB PWServer 1.6.5:

A little bit of lib origina164.gs I ended up finding a backdoor that frees access to debug for the player, and in a way in case debug is already active on the server

the command allows you to observe all packets sent from the client directly to GS via chat.

the backdoor is about sending a command through the console to ensure access to debug.

the function applied in lua "DebugPassword (95764,54824,62348,98742) “is used in the same way, the difference is that there is a built-in password within the lib itself called”Use master debug password"

To make use of the backdoor just open the console inside the game and give the command
Backdoor Debug Mode → d 1 39055 90252 11884 69178

In case you want to activate debug through the password inside the skills file.Moon

DebugPassword → d 1 95764 54824 62348 98742

It is worth remembering that the Command "d 1 1" is a PlayerLogout called through gplayer_controller::CommandHandler.

d 1 1 → Logout to character screen
d 1 0 → Quit Game

I will leave an easy fix below just skipping the part of the code where it executes the backdoor command, along is disabled the debugpassword command returning error message

(Fatal error: incorrect request), and still logging to the world file.log as it is already done in the code itself.

In case anyone wants to suggest a code or a better fix, feel free :)


Open the file original164.gs the 010 Editor

Press Ctrl + G to find offset: 579BA (search by Byte )

0x000579BA: 8B 45 10 8B 48 02 => E9 E4 00 00 00 90


Expand
Change these 6 bytes into hexa, save and play the file to your machine's lib folder.

Author: teeo from the Brazilian resource suportegm
(Google translation)
 
Back
Top