About Gunz Server Crash by an Attacker

**cheaterastic** · 16-12-12

Please help.
There is attacker on my Server. He is just crashing my server, he can do it.

I really need help.

On my MAsyncProxy_2012-12-11-1.dmp or DMP file log,
there is an Error SQL that I've found out.

Code:

ErrSQL( {CALL spCheckDuplicateCharName (''ErrSQL( {CALL spCheckDuplicateCharName (''%s%s')} ), ErrCode( -1 )
ErrSQL( %s ), ErrCode( %d )
')} ), ErrCode( -1 )

I think this is because of spCheckDuplicateCharName
How to fix please?

here if my old thread:
http://forum.ragezone.com/f311/fix-k...server-895109/

old post:

Spoiler:

Please HELP!

**MentaL**

**Gunblade** · 16-12-12

Originally Posted by cheaterastic

Please help.
There is attacker on my Server. He is just crashing my server, he can do it.

I really need help.

On my MAsyncProxy_2012-12-11-1.dmp or DMP file log,
there is an Error SQL that I've found out.

Code:

ErrSQL( {CALL spCheckDuplicateCharName (''ErrSQL( {CALL spCheckDuplicateCharName (''%s%s')} ), ErrCode( -1 )
ErrSQL( %s ), ErrCode( %d )
')} ), ErrCode( -1 )

I think this is because of spCheckDuplicateCharName
How to fix please?

here if my old thread:
http://forum.ragezone.com/f311/fix-k...server-895109/

old post:

Spoiler:

Please HELP!

Open the crash DMP file and check which line makes it go nuts.

**GzFKoron** · 17-12-12

Sometimes it can actually be just a server crash, and not an attack lol.

**cheaterastic** · 17-12-12

Originally Posted by Gunblade

Open the crash DMP file and check which line makes it go nuts.

I've already said that inside the DMP file, the ErrSQL only and it is:

Code:

ErrSQL( {CALL spCheckDuplicateCharName (''ErrSQL( {CALL spCheckDuplicateCharName (''%s%s')} ), ErrCode( -1 )
ErrSQL( %s ), ErrCode( %d )
')} ), ErrCode( -1 )

And I am so sorry that I don't really know how to solve it, I also compared all spCheckDuplicateCharName from releases of Gunz Source full C++ but they have both the same lines of spCheckDuplicateCharName conflicting.

Originally Posted by AuroraUK

Sometimes it can actually be just a server crash, and not an attack lol.

No, It is a real server attack which the attacker is crashing my Server, image below (open the spoiler), and I think he is able to crash my server by login-ing to the game and crashing the server like a command, and non staff can do it, non of my staff, he can also do an Name Hack like creating a character with color name or ^ and he can also make a character containing of spaces or spacebar char.

Spoiler:

**Wish Q** · 17-12-12

maybe its a exploit or something because i see this line.

(''%s%s')} ), ErrCode( -1 )
ErrSQL( %s ), ErrCode( %d )

l

**thajj** · 17-12-12

It could also be something with your source, and that when a player or user triggers a certain event it will crash your server.

**cheaterastic** · 17-12-12

Originally Posted by thajj

It could also be something with your source, and that when a player or user triggers a certain event it will crash your server.

Sorry but, it's really a hack, or a command by an hacker, he is the only one who can crash my server, he is from Israel, a jewish man.

He can only crash my server by doing login-ing to game and executing a command, and 2nd, he can't do a server crash by a second, he can only crash my server about 10 seconds because he needs to login before to crash.

Why I say it's a hack? because he have a hack name like ^, or a color name, and it is like a 2008 hack, and he is able to do it. He can also create a character which has a spacebar char or spaces.
Whenever he do a server crash, I always do a fast login-ing my account to the game and trying to whisper his charname, and I am able to whisper his charname, and after another second or 2 seconds, the server is crashing again. He really needs to login 1st before to crash or to execute the command.

I am using the Gregon13's new released, Modified Source (CTF + Anti-Lead + DamageCounter + Fixes)

I don't know how to solve this problem, even though it's an exploit. I have no idea.

**ngskRabbit** · 17-12-12

Post your MatchServer logs and binary (MatchServer.exe). Probably we can analysis from it.

**Wish Q** · 17-12-12

sahar042 likes to exploit servers.

**Mark** · 17-12-12

Here's a fix:

MMatchDBMgr.cpp

Change the highlighted line:

Code:

void MMatchDBMgr::Log(const char *pFormat,...)
{
    va_list args;
    char msg[1024];


    va_start(args, pFormat);
    vsprintf(msg, pFormat, args);


    mlog(msg);


    va_end(args);
}

To this line:

Code:

    mlog("%s", msg);

MDebug.cpp

Change the highlighted line:

Code:

void __cdecl MLog(const char *pFormat,...)
{
//    char *temp=szLoghistory[nTail];


    char temp[16*1024];    // 16k


    va_list args;


    va_start(args,pFormat);
    vsprintf(temp,pFormat,args);
    va_end(args);


    if(g_nLogMethod&MLOGSTYLE_FILE)
    {
        FILE *pFile;
        pFile = fopen( logfilename, "a" );
        if( !pFile ) pFile=fopen(logfilename,"w");
        if( pFile==NULL ) return;
        fprintf(pFile,temp);
        fclose(pFile);
    }
        ...
}

To this line:

Code:

        fprintf(pFile, "%s", temp);

MMatchServer.cpp

Change the highlighted line:

Code:

void MMatchServer::Log(unsigned int nLogLevel, const char* szLog)
{
#ifdef _DEBUG
    if((nLogLevel & LOG_DEBUG) == LOG_DEBUG)
    {
        OutputDebugString(szLog);
        OutputDebugString("\n");
    }
#endif


    CTime theTime = CTime::GetCurrentTime();
    CString szTime = theTime.Format( "[%c] " );


    if((nLogLevel & LOG_FILE) == LOG_FILE)
    {
        char szTemp[1024];
        strcpy(szTemp, szTime);
        strcat(szTemp, szLog);
        strcat(szTemp, "\n");
        mlog(szTemp);
    }
}

To this line:

Code:

        mlog("%s", szTemp);

I think that should fix most crashes similar to this one.

**cheaterastic** · 18-12-12

Spoiler:

Thanks Mark, I will try it, and if it work, I would really like it.

I've also used the Wizkidje released, titled: SQL exploit fix , but still the hacker/crasher crashed my server 13 times again with the same command or something the same cheat. I've only built the matchserver.

My new MatchServer log crash by hacker/crasher.

Code:

[12/17/12 17:50:00] Match Server Created (Port:6000)

Dueltournament Service Open(2012-12-17 Hour17, Min50) 
Daily Survival Ranking Request [month12 day17 hour17 min50]
success to update CustomIP
[12/17/12 17:50:09] Start agent Register (CommUID 0:20) IP:xxx.xxx.xxx.xxx, TCPPort:7777, UDPPort:5100
 
[12/17/12 17:50:09] Agent Added (UID:020)
[12/17/12 17:50:09] Agent Registered (CommUID 0:20) IP:xxx.xxx.xxx.xxx, TCPPort:7777, UDPPort:5100
 

[12/17/12 17:50:11]  MMatchDBMgr::ExceptionHandler
CrashDump Entered 1
CrashDump Entered 2
Crash ( 17:50:11 )
Build Dec 17 2012 19:49:03

dwTotalMemKB = 2096584 KB
dwAvailMemKB = 441956 KB
dwVirtualMemKB = 2097024 KB

[Exception]
Address	:	004dcaf2
ExpCode	:	c0000005
Flags	:	00000000
#Param	:	00000002
other	:	00000000

[Context]
GS : 00000000  FS : 0000003b  ES : 00000023  DS : 00000023
EDI: 024db16c  ESI: fffffffd  EBX: 00000073  EDX: 03772f7e
ECX: 7ffffffe  EAX: 53727245  EBP: 024daee4  EIP: 004dcaf2
CS : 0000001b  Flg: 00010202  ESP: 024dae58  SS : 00000023

[Stack]
0375cf88 00562800 00000001 00162168 024daf48 7c829dad 00161378 00000007 
00000000 7c829c87 00000000 00000000 00000000 00000000 00000000 00000000 
00000057 00000003 53727245 ffffffff 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 
00000000 00000000 00000000 024daf00 000080af 024dac64 00000000 024db070 
7c8280e0 7c82c3a0 ffffffff 7c82c399 7c82c4dd 00000001 024daf24 024dafac 
00160000 00000000 7ffdbc00 00000228 00000045 000149ff 024dae78 40100080 
024db070 7c8280e0 7c829dd0 ffffffff 00000000 7c829c87 024dafc4 77e64a53 
000000b7 ffffffff 00000003 00000080 00000018 00000000 024dafac 00000042 
00000000 024daf90 00000000 00000000 00000000 00000000 0000000c 00000002 
7c810101 7ffdbc00 000000e4 00000000 00000001 021a00ec 00162170 00000003 
00000000 00162170 00000003 024dafe8 77e41a8e 00000408 7c827599 77e6b3fb 
00000408 024daff0 024daff8 00000008 00000004 ffffffff 00000000 ffffffff 
00000003 00000408 004e55b3 00000003 00000408 0052a639 00000002 00000000 
0000000c 00000000 00000001 40000000 00000004 00000002 00000000 0052a639 
024db080 004e5962 014a1fa0 004e56c8 00000003 004e56b9 0052a639 00000002 

CrashDump Leaving
CrashDump Leaved

**PenguinGuy** · 18-12-12

Just know that if there are greater than 10 (? 5? I don't remember XD) exceptions, MatchServer will disconnect itself. Look it up in MMatchDBMgr::ExceptionHandler.

**Momar** · 18-12-12

Originally Posted by PenguinGuy

Just know that if there are greater than 10 (? 5? I don't remember XD) exceptions, MatchServer will disconnect itself. Look it up in MMatchDBMgr::ExceptionHandler.

Do he needs to comment out some inside Exception Lines from MMatchDBMgr::ExceptionHandler ?
Same with this Guide: SQL exploit fix ?

**sahar042** · 18-12-12

Originally Posted by Momar

Do he needs to comment out some inside Exception Lines from MMatchDBMgr::ExceptionHandler ?
Same with this Guide: SQL exploit fix ?

Have alot of more exploits dude. This isn't the only one exploit have more 1000 exploits in the source i think...

**cheaterastic** · 18-12-12

Originally Posted by sahar042

Have alot of more exploits dude. This isn't the only one exploit have more 1000 exploits in the source i think...

How these exploits execute to the game and to the server? what are the bad packets or exploits from Gregon13's new released?

**flyffhelper** · 18-12-12

Originally Posted by sahar042

Have alot of more exploits dude. This isn't the only one exploit have more 1000 exploits in the source i think...

there are a couple of exploits sahar mentioned 1000 exploits but you have to figure them self out.
but most of them are already patched.

**sahar042** · 18-12-12

Originally Posted by Wish Q

sahar042 likes to exploit servers.

And to help them*

**Wish Q** · 18-12-12

Originally Posted by sahar042

And to help them*

oh thats nice i didn't know that.

About Gunz Server Crash by an Attacker

Thread Tools

Search Thread

About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Re: About Gunz Server Crash by an Attacker

Advertisement