ToyFork(A new maplestory source)

[papiado]

rollback error

 

[Horizon]

I stopped reading when you said Moogra helped.

 

[Moogra]

exploit
useitemhandler.java

if (itemId == 2022118) {
            c.getPlayer().dropMessage(1, "Please keep this item for scrolling purposes (: Gives you 100% scroll rate.");
            c.getSession().write(MaplePacketCreator.enableActions()); // rofl just incase
            return;
        } else if (itemId == 2022065) {
            NPCScriptManager.getInstance().start(c, 9010000, "JobChanger", null);

change useitemhandler.java

/*
This file is part of the OdinMS Maple Story Server
Copyright (C) 2008 Patrick Huy <patrick.huy@frz.cc>
Matthias Butz <matze@odinms.de>
Jan Christian Meyer <vimes@odinms.de>

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License version 3
as published by the Free Software Foundation. You may not use, modify
or distribute this program under any other version of the
GNU Affero General Public License.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License
along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */

/*
 * UseItemHandler.java
 *
 * Created on 27. November 2007, 16:51
 */
package net.sf.odinms.net.channel.handler;

import net.sf.odinms.client.IItem;
import net.sf.odinms.client.MapleClient;
import net.sf.odinms.client.MapleInventoryType;
import net.sf.odinms.net.AbstractMaplePacketHandler;
import net.sf.odinms.server.MapleInventoryManipulator;
import net.sf.odinms.server.MapleItemInformationProvider;
import net.sf.odinms.tools.MaplePacketCreator;
import net.sf.odinms.scripting.npc.NPCScriptManager;
import net.sf.odinms.tools.data.input.SeekableLittleEndianAccessor;

/**
 *
 * @author Matze
 */
public class UseItemHandler extends AbstractMaplePacketHandler {

    public void handlePacket(SeekableLittleEndianAccessor slea, MapleClient c) {
        
        if (!c.getPlayer().isAlive()) {
            c.getSession().write(MaplePacketCreator.enableActions());
            return;
        }
        MapleItemInformationProvider ii = MapleItemInformationProvider.getInstance();
        slea.readInt(); // i have no idea :) (o.o)
        byte slot = (byte) slea.readShort();
        int itemId = slea.readInt(); //as if we cared... ;)
        IItem toUse = c.getPlayer().getInventory(MapleInventoryType.USE).getItem(slot);
        if (toUse != null && toUse.getQuantity() > 0) {
            if (toUse.getItemId() != itemId) {
                return;
            }
            if (ii.isTownScroll(itemId)) {
                if (ii.getItemEffect(toUse.getItemId()).applyTo(c.getPlayer())) {
                    MapleInventoryManipulator.removeFromSlot(c, MapleInventoryType.USE, slot, (short) 1, false);
                }
                c.getSession().write(MaplePacketCreator.enableActions());
                return;
            }

            MapleInventoryManipulator.removeFromSlot(c, MapleInventoryType.USE, slot, (short) 1, false);
            ii.getItemEffect(toUse.getItemId()).applyTo(c.getPlayer());
        }
    }
}

and that is exploit how?
tell me now.

 

[TheLastDream]

Fail source no point of releasing this crappy source.
Mods should close this.
The source is load of exploits.

 

[papiado]

original is /*
This file is part of the OdinMS Maple Story Server
Copyright (C) 2008 Patrick Huy <patrick.huy@frz.cc>
Matthias Butz <matze@odinms.de>
Jan Christian Meyer <vimes@odinms.de>

This program is free software: you can redistribute it and/or modify
it under the terms of the GNU Affero General Public License version 3
as published by the Free Software Foundation. You may not use, modify
or distribute this program under any other version of the
GNU Affero General Public License.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU Affero General Public License for more details.

You should have received a copy of the GNU Affero General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/

/*
* UseItemHandler.java
*
* Created on 27. November 2007, 16:51
*/
package net.sf.odinms.net.channel.handler;

import net.sf.odinms.client.IItem;
import net.sf.odinms.client.MapleClient;
import net.sf.odinms.client.MapleInventoryType;
import net.sf.odinms.net.AbstractMaplePacketHandler;
import net.sf.odinms.server.MapleInventoryManipulator;
import net.sf.odinms.server.MapleItemInformationProvider;
import net.sf.odinms.tools.MaplePacketCreator;
import net.sf.odinms.scripting.npc.NPCScriptManager;
import net.sf.odinms.tools.data.input.SeekableLittleEndianAccessor;

/**
*
* @author Matze
*/
public class UseItemHandler extends AbstractMaplePacketHandler {

public void handlePacket(SeekableLittleEndianAccessor slea, MapleClient c) {

if (!c.getPlayer().isAlive()) {
c.getSession().write(MaplePacketCreator.enableActions());
return;
}
MapleItemInformationProvider ii = MapleItemInformationProvider.getInstance();
slea.readInt(); // i have no idea (o.o)
byte slot = (byte) slea.readShort();
int itemId = slea.readInt(); //as if we cared...
IItem toUse = c.getPlayer().getInventory(MapleInventoryType.USE).getItem(slot);
if (itemId == 2022118) {
c.getPlayer().dropMessage(1, "Please keep this item for scrolling purposes Gives you 100% scroll rate.");
c.getSession().write(MaplePacketCreator.enableActions()); // rofl just incase
return;
} else if (itemId == 2022065) {
NPCScriptManager.getInstance().start(c, 9010000, "JobChanger", null);
} else if (toUse != null && toUse.getQuantity() > 0) {
if (toUse.getItemId() != itemId) {
return;
}
if (ii.isTownScroll(itemId)) {
if (ii.getItemEffect(toUse.getItemId()).applyTo(c.getPlayer())) {
MapleInventoryManipulator.removeFromSlot(c, MapleInventoryType.USE, slot, (short) 1, false);
}
c.getSession().write(MaplePacketCreator.enableActions());
return;
}

MapleInventoryManipulator.removeFromSlot(c, MapleInventoryType.USE, slot, (short) 1, false);
ii.getItemEffect(toUse.getItemId()).applyTo(c.getPlayer());
}
}
}

 

[Moogra]

papiado, are you ever going to tell me why that's an exploit?
how about I do this
#include<iostream> int main() {cout << "THIS IS A VIRUS"; return 0;}

does that make it a virus?

 

[papiado]

papiado, are you ever going to tell me why that's an exploit?
how about I do this
#include<iostream> int main() {cout << "THIS IS A VIRUS"; return 0;}

does that make it a virus?

f (itemId == 2022118) {
c.getPlayer().dropMessage(1, "Please keep this item for scrolling purposes Gives you 100% scroll rate.");
c.getSession().write(MaplePacketCreator.enableActi ons()); // rofl just incase
return;
} else if (itemId == 2022065) {
NPCScriptManager.getInstance().start(c, 9010000, "JobChanger", null);

 

[Moogra]

yeah but why is that an exploit?

 

[X-Tasis]

That's not an exploit papiado, it's just a prank, it does nothing.

And the job part, is the Xotic-Job-Back System.. or something related to that name.

Blue, Alliances were never damaged, there are not missed packets, the NPC was not done properly to make Alliances instead.

Fixed Quests? what quests?

I may add that all the credits to this source goes to Moogra, since we know he did all.

Also, in the first post you says: "Removed bug, removed this other bug, and this another one bug", specifies pl0x.

And BTW, conflicting files in SVN, are not reason to delete a whole SVN and make another one.

 

[nadav64]

som1 wanna tell me what an exploit is plz i wanr here for like a year so just Ducking tell me

 

[Horizon]

som1 wanna tell me what an exploit is plz i wanr here for like a year so just Ducking tell me

A security hole in the source added intentionally by the developer.

 

[papiado]

cash shop get rollback

 

[nadav64]

can u give me an example of an exploit

 

[X-Tasis]

Wiki talks.

An exploit (from the same word in the French language, meaning "achievement", or "accomplishment") is a piece of software, a chunk of data, or sequence of commands that take advantage of a bug, glitch or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic (usually computerized). This frequently includes such things as violently gaining control of a computer system or allowing privilege escalation or a denial of service attack.

 

[ijohnny]

Cani have a DL Link to this source? D: My comp no supporty svn!!! and i think this source is great :\

 

[Legacy]

@johnny, it's not that great. Needs alot of cleaning up.

 

[dragonbIood]

Legacy aren't you on that v73 server dev team?

 

[hokira]

Does the .jar have to be named xotic.jar, odinms.jar or toyfork.jar ?!

 

[Legacy]

xotic.jar.

DragonBIood:
Yes, but I quit. I'm going to start my own 73 team.
I'm working with a couple of good developers, so yes. I quit to make a v73 and a v62.

 

[hokira]

When I launch start_server.bat I get this

Aug 15, 2009 3:01:43 PM net.sf.odinms.net.login.LoginServer main
SEVERE: Error initializing loginserver
java.lang.RuntimeException: Could not connect to world server.
        at net.sf.odinms.net.login.LoginServer.run(LoginServer.java:201)
        at net.sf.odinms.net.login.LoginServer.main(LoginServer.java:247)
Caused by: java.lang.NumberFormatException: null
        at java.lang.Integer.parseInt(Unknown Source)
        at java.lang.Integer.parseInt(Unknown Source)
        at net.sf.odinms.net.login.LoginServer.run(LoginServer.java:192)
        ... 1 more
Exception in thread "main" java.lang.RuntimeException: java.lang.NumberFormatExc
eption: null
        at net.sf.odinms.net.channel.ChannelServer.run(ChannelServer.java:217)
        at net.sf.odinms.net.channel.ChannelServer.main(ChannelServer.java:599)
Caused by: java.lang.NumberFormatException: null
        at java.lang.Integer.parseInt(Unknown Source)
        at java.lang.Integer.parseInt(Unknown Source)
        at net.sf.odinms.net.channel.ChannelServer.run(ChannelServer.java:191)
        ... 1 more