Account Password and safe service password

[joeynsam42330]

Hello

I was wanting to know how i can i retrieve a lost account password and a lost safe service password if a player forgets it. Thanks for your help

[MentaL]

[[D@nte]]

Bruteforce it...

Set a new one and send it to the attachet mail address for storepw if i'm right iweb has an function to reset it

[joeynsam42330]

on pwadmin i have to put in old pw before i can change it

[joeynsam42330]

On pwAdmin i have to enter the old password to change it

[[D@nte]]

Bruteforce it...

Set a new one and send it to the attachet mail address for storepw if i'm right iweb has an function to reset it

---------- Post added at 10:45 AM ---------- Previous post was at 10:42 AM ----------

wow this bugged forum is amazing dbl post with 60 min delay -.-

hi, generate and inject the pw by hand to the db?

[[D@nte]]

wow this bugged forum is amazing dbl post with 60 min delay -.-

hi, generate and inject the pw by hand to the db?

[joeynsam42330]

i cant see anything in the db im using hrace009 server

ty

[joeynsam42330]

i cant see anything in the db im using hrace009 server

ty

---------- Post added at 03:11 PM ---------- Previous post was at 02:57 PM ----------

I cant see anything in my db i use winscp and im using hrace009 release

---------- Post added at 03:12 PM ---------- Previous post was at 03:11 PM ----------

I cant see any characters in my db im using winscp and hrace009 release

[joeynsam42330]

I cant see any characters in my db im using winscp and hrace009 release

[[D@nte]]

LOL

Great idea to try viewing an MSSQL/MYSQL DB with WinSCP

[joeynsam42330]

Is there tool i can use to view it sorry im just learning

---------- Post added at 05:40 PM ---------- Previous post was at 04:54 PM ----------

ok i got into database but how can i get the password to look like :%ÞÚüƒ¦JÐÞ©µ is it under function if so what is it ive tried everything


thanks guys

[[D@nte]]

Cgz you are using a PW release with a fucked up Accountdb, due to the fact that your db saves the PWs as varbinary instead of varchar you'll have either use the storedprocedures to set a new passwort or rewrite you register script to give you the ability to change already registered accounts.

[joeynsam42330]

IS there a way to change the db so it saves the pw correctly or replace the db so it saves the password correctly.

[demonniak]

hello , you can force the account password

http://forum.ragezone.com/f694/littl...2/#post6317980

script by romulan =)

thanx you romulan ;)

[Romulan]

Cgz you are using a PW release with a fucked up Accountdb, due to the fact that your db saves the PWs as varbinary instead of varchar you'll have either use the storedprocedures to set a new passwort or rewrite you register script to give you the ability to change already registered accounts.

Btw all releases use varbinary instead of varchar

[joeynsam42330]

hello , you can force the account password

http://forum.ragezone.com/f694/littl...2/#post6317980

script by romulan =)

thanx you romulan ;)

where do i put these scripts to make it work srry im new to this

[[D@nte]]

Btw all releases use varbinary instead of varchar

If they all do they are all fucked up!

VARBINARY is no suitable container to store any hex represented values!

Anyways our users db do not use varbinary anymore i'll ask Anubis IF he is willed to release the updated stored procedures etc.
But in any case this is only useful if you want to set up a new users db or have time & knowledge coz it is a shit load of work to convert all passwd from the varbinary to the correct varchar format.

[das7002]

If they all do they are all fucked up!

VARBINARY is no suitable container to store any hex represented values!

Anyways our users db do not use varbinary anymore i'll ask Anubis IF he is willed to release the updated stored procedures etc.
But in any case this is only useful if you want to set up a new users db or have time & knowledge coz it is a shit load of work to convert all passwd from the varbinary to the correct varchar format.

/facepalm

You do realize what hex is don't you? Hex is a representation of binary data in an easy for humans to read format... Hell you could even get MySQL to return the hex for you with hex(select `password` from `users` where `id` = '32') tada!

[tbnanubis]

/facepalm

You do realize what hex is don't you? Hex is a representation of binary data in an easy for humans to read format... Hell you could even get MySQL to return the hex for you with hex(select `password` from `users` where `id` = '32') tada!

stored in a string in all releases and using the "varbin2hexsubstr" function.
its very bad portable and dumpable, you run into charset issues very easily with this "idontknowanameforthisshit" which was initially produced by a typo the first guy who made the mysql support did.

they are many ways to adjust that stuff to be readable AND portable, it contains 1 little change to acquireuserpasswd, some little adjustments to register and password scripts and 1! query to update the user table.

[Romulan]

they are many ways to adjust that stuff to be readable AND portable, it contains 1 little change to acquireuserpasswd, some little adjustments to register and password scripts and 1! query to update the user table.

Ok maybe you can share that stuff for the mysql's noobs? ^^

[tbnanubis]

Ok maybe you can share that stuff for the mysql's noobs? ^^

i shared the adjustments to register scripts already somewhere here.. about the conversion query... well i executed it and without a "crap" db for testing it will be difficult to build that query again xD

it was something like "UPDATE users SET passwd=varbin3hexsubstr(passwd,16,0)"

just check how the call in "acquireuserpasswd" is and use the same. if you mess it up, you can execute "update users set passwd=passwd2" if your accounts were generated by the "adduser" function.

remember to change your acquireuserpasswd after that conversion!

---------- Post added at 04:04 AM ---------- Previous post was at 04:01 AM ----------

here is the changed procedure:

CREATE DEFINER = `pw`@`%` PROCEDURE `acquireuserpasswd`(in name1 VARCHAR(64), out uid1 INTEGER, out passwd1 VARCHAR(64))
BEGIN
DECLARE passwdtemp VARCHAR(64);
START TRANSACTION;
SELECT id, passwd INTO uid1, passwd1 FROM users WHERE name = name1;
COMMIT;
END;

be careful, the definer has to be the user your gameserver connects with.

IN ANY CASE: MAKE BACKUPS!