Whoever played around with the GS.CONF on this REALLY did a number on it. By my own guesses I'd say the person responsible was 12 Y/O seeing as they made it so you could fly almost everywhere (almost all 'instances'), and made "nothrow" almost everywhere.
If anyone has a REAL -&- VIRGIN gs.conf for 153 I'd appreciate it!
Yeah same
gs.confOriginally Posted by 343
Should be it, atleast this is what I have for 1.5.3
Has no flying in instances etc. So should be good.
Edit: Well it might not be a 100% stock one...as you said the released one is super botched. But im pretty sure 80% of my config is correct anyway.
Thank you for your effort but yea, even the one you uploaded seems pretty royally fucked. Example: is29 (Frostcover City) "nothrow". Example: is38 (Phoenix Valley) is *missing* NOFLY. Example: is50 (Realm of Reflection) is also missing NOFLY.
Looks like I'll have to figure out if and how to restore this manually! Which sucks because now I'm going to have to DL the official client again ROFL...
yeah.... well you can fix most old maps with a gs.conf from 1.5.1, its just the new maps that need to changed.
We'd need an actual clean 1.5.3 release for that though. not one with a pre-borked gs.conf, clsconfig, etc.
That's where my main concern is too. I'm not too concerned about all the instances that have been around since 13x or even 14x since we do seem to have those, but I question what the "new" instances from 15x are SUPPOSED to be (since those GS flags can be pretty powerful, such as not allowing flying, or mounts, or dropping items, or embracing etc etc etc)... I am saying, if those are as heavily modified as they are, it's pretty safe to say the new/15x instances are likely touched too! MAYBE I would have believed they were whatever they're supposed to be if the whole file was not COMPLETELY WRECKED lol !!!!!!!!!!
Every game has a way into it some how, theres never a game with one, they use backdoors incase they get locked out they can use that door and gain access
Like I have said before, "digital security" is a JOKE (sorry to anyone who has actually wasted their life going into that field [since it's just a NEVER ending game of cat and mouse]!) but, even PHYSICAL security has it's limitations! Ever heard "where there's a will, there's a way"? Well it's the truth, it just depends on how bad you want it, and how much time you have. You could lock something in the most secure vault with 50ft thick concrete walls and 500 armed guards, but if someone wants it - THEY WILL FIND A WAY... "Digital Security" is EVEN MORE of a joke because we're talking about security over WIRES and ELECTRICAL SIGNALS...
Be real people, "security" is a never ending game of cat and mouse! There's no such thing as "secure"! If you want your PC/Server/Phone/Game to ACTUALLY be secure - don't ever plug in that CAT5/6 or heck, don't even press the power button! (I swear I've said that before)... As, the ONLY *TRUE* way to be secure, is to not be not connected or not powered up!
Sure, we don't leave our windows and doors unlocked AND wide open, we take measures to prevent BLATANT holes or vulnerabilities, but to think there will never be ANY - is naive !
yes 1.5.3 has exploit. and yes Bola knows it. but no one cares.
i dont got why have server network error/missing matrix stuff or just wrong password if in table.xml the password/adress etc is ok, used sql from this pack,
reg page used salt stuff [0x.md5(username+password)] and in phpmyadmin passwd is binary(16) so same like in other version where salt worked, i guess i missed something but what?
then changed to varchar[64] in mysql and base54encode (ex. base64encode(md5($u.$p)) ) in php/table.xml still say password/name error
Last edited by shadowvzs; 16-04-17 at 06:48 AM.
Just block everything with a firewall rule except for game port 29000 (or whatever you use for the glink service) and you should be pretty safe. Don't be stupid by running a public server without any firewall or anything, that's common sense. That's where come the real "exploit" if I could say.I doubt there is any backdoor or any shit like that packed with the files. That would mean that the guys who did that must have an access to the source files and recompiled it with some shit inside but it's highly doubtful.
Anyway the server files released here are crap. I'm trying to do some blind fix to restore the original state of the files. But I think there must be some hex edit in gs also that I couldn't find without a clean server package to compare...
I tell "good luck" for anyone trying to do a public server with those files. Unless they don't care about bugs or nasty surprise inside the files.
I wont tell any technical details about it but trust me there is backdoor in ALL wanmei games files.
About source... it's floating around and I wont tell anything else about it.
Sent from my SM-N910F using Tapatalk
Proof or it never happens.
Since the first PW files released I think a lot of servers would be down by this if it was realy true don't you think?
About sources, I don't think anyone has it or maybe incomplete or totaly outdated.
exploit is on 29000, even if close all ports this exploit can freeze entire server.
and about a backdoor... nah, Brazil official server already send many DMCAs to many servers, they probably wont spend time with law help if they have a backdoor to shutdown those.
I'm sure it's nothing related to an exploit of any kind. Just a plain DDOS. Stop trying to scare people with false accusation. The servers binaries are safe and the real crap here is the ton of modified content and the fact that there is no official 1.5.3 cpackage released anywhere but only private.
I'm inside a private group since the first release of 1.4.4 (genesis expansion) with some great people that made great servers by the past (Vendetta, Devastation and other) and I rather trust them than any random dude here. So go troll away with your fake screenshot or whatever you could show just to scare fragile minded people here. Thanks.
Reply With Quote