How To Fix This Hack On v2240

Printable View

25-10-09
Enterz

How To Fix This Hack On v2240

http://rapidshare.com/files/29687395...YL2_GMHack.zip

Plz Teach Me How To Fix It.:?::?:
25-10-09
Tyfix

Re: How To Fix This Hack On v2240

Well 1 easy way is to relocate the GM position in memory.

Granted it wont stop anyone that are targeting your server to modify the hack but it will stop all server purpose hacks meaning they would have to make a special version for your server. (or make it support your server by a couple checks in the hack)

As for chat as has been discussed elsewhere just disable GM chatting all together. (type 9)
25-10-09
ernesto2

Re: How To Fix This Hack On v2240

pliz create guide pliz
26-10-09
Enterz

Re: How To Fix This Hack On v2240

Oh Well..I Have Fix It But Some One Reupdate That Hack..So They Can Use Back..

For Who Love RYL Plz Teach Me How To Fix It..

Save Our Server...RYL Rock!!
26-10-09
Tyfix

Re: How To Fix This Hack On v2240

There isn't a way to fix it if the ones targeting the server really want to they can get around it no matter what you do. Is the sad truth about the security on the official server/client architecture.
26-10-09
Enterz

Re: How To Fix This Hack On v2240

can u give guide example to fix it..like remove gm text.how?..
26-10-09
Tyfix

Re: How To Fix This Hack On v2240

Well it depends where you have some free code space in your gameserver, one way would be to change the chat command from 09 to 00 for instance which would make the chat come out as local chat instead of global gm message.

You would still need some code space to manipulate the register before its sent on to chatserver.

The offset for the incoming chat packet (subcmd compare) is here (2240 GameServer): 0047B283

so the changes could look something like this:

0047B283 JMP 0050A416
0047B288 NOP
0047B289 NOP
0047B28A NOP
0047B28B NOP
0047B28C MOVZX EDX,BYTE PTR DS:[EAX+47B600]

..

0050A416 CMP EAX,0E
0050A419 JA 0047B4EC
0050A41F CMP EAX,9
0050A422 JNZ SHORT 0050A426
0050A424 XOR EAX,EAX
0050A426 JMP 0047B28C
0050A42B INT3
0050A42C INT3

---

Same edit just with hex search/replace 2 edits:

Find:
83 F8 0E 0F 87 60 02 00 00 0F B6 90 00 B6 47 00
Replace with:
E9 8E F1 08 00 90 90 90 90 0F B6 90 00 B6 47 00

Find:
83 C1 19 0F AF C1 59 C3 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC
Replace with:
83 C1 19 0F AF C1 59 C3 83 F8 0E 0F 87 CD 10 F7 FF 83 F8 09 75 02 33 C0 E9 61 0E F7 FF CC
27-10-09
Enterz

Re: How To Fix This Hack On v2240

TryFix This Must Change At Gameserver Or Client?..Littel Confius..
27-10-09
Tyfix

Re: How To Fix This Hack On v2240

Let me quote myself.

Quote:

Originally Posted by Tyfix

Well it depends where you have some free code space in your gameserver

Quote:

Originally Posted by Tyfix

The offset for the incoming chat packet (subcmd compare) is here (2240 GameServer): 0047B283
27-10-09
EliteAk47

Re: How To Fix This Hack On v2240

you have to know how to live with the hackers..
because that you have no specific solution to block that hack.
its the last knockout to that game :\
27-10-09
Tyfix

Re: How To Fix This Hack On v2240

not exactly true.. Can block it by just disabling anything gm related actually. Granted means your real GM's can do shit but.
27-10-09
EliteAk47

Re: How To Fix This Hack On v2240

RYL without a game modering is no game..
so like i said it the last knockout until the server files source code will released by emmm...
anyway post a Guide how to do disable it..
that would be a little breathing
28-10-09
Enterz

Re: How To Fix This Hack On v2240

Thx So Much TyFix..U Are Great!!! Asome!!! Thx For Your Guide...
29-10-09
Enterz

Re: How To Fix This Hack On v2240

OMG!! Both Change..Not Shout Talk..

TyFix How To Remove GM Oren Text Only?..
30-10-09
babitelor

Re: How To Fix This Hack On v2240

you're funny xD
31-10-09
Tyfix

Re: How To Fix This Hack On v2240

Quote:

Originally Posted by Enterz

OMG!! Both Change..Not Shout Talk..

TyFix How To Remove GM Oren Text Only?..

hmm thats curious, shout is not type 09.

To be honest i didn't test any of this just threw out an example of how it might be done but if it affects shout as well you'll have to find some other way i guess. Would have to debug it to be sure which i wont be doing atm, maybe later.
31-10-09
Enterz

Re: How To Fix This Hack On v2240

i hope u can help. :D;...
01-11-09
ernesto2

Re: How To Fix This Hack On v2240

RYL2 checksum as finding 2240?
that open folder to view our checksum?

---------- Post added at 07:03 AM ---------- Previous post was at 06:53 AM ----------

what is mi checksum?

Code:

[Ty-DET][Tm-2009-11-01 02:56:31][Ex-SP:0x0151A188/DP:0x00B7B008/IP:189.220.145.220/ Connect Success.][Rt-CIOCPNet::Connect][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\IOCP\IOCPNet.cpp][LN-165] [Ty-DET][Tm-2009-11-01 02:56:31][Ex-SP:0x0151A188/DP:0x00B7B008/IP:189.220.145.220/SOCKET:0x00000218/Connection Open - Process connected][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-156] [Ty-DET][Tm-2009-11-01 02:56:39][Ex-SP:0x0151A21C/DP:0x0151B418/IP:189.220.145.220/ Connect Success.][Rt-CIOCPNet::Connect][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\IOCP\IOCPNet.cpp][LN-165] [Ty-DET][Tm-2009-11-01 02:56:39][Ex-SP:0x0151A21C/DP:0x0151B418/IP:189.220.145.220/SOCKET:0x00000230/Connection Open - Process connected][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-156] [Ty-DET][Tm-2009-11-01 02:56:39][Ex-SP:0x0151A188/DP:0x00B7B008/IP:189.220.145.220/ InternalCloseSocket - SessionClose Called : 0][Rt-CSession::CloseSession][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-301] [Ty-DET][Tm-2009-11-01 02:56:39][Ex-SP:0x0151A188/DP:0x00B7B008/IP:189.220.145.220/ InternalCloseSocket - Statistics : [m_hSocket:0x00000218][ CONNECTED][DiffTime(Sec):8.000000][m_dwTotalReceived: 900][m_dwTotalSendPending: 20][m_dwTotalSendCompleted: 20][m_dwSendPending:0][m_dwRecvPending:1][m_nRefCount: 1][flags:0x01]][Rt-CSession::InternalCloseSocket][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-264] [Ty-DET][Tm-2009-11-01 02:56:39][Ex-SP:0x0151A188/DP:0x00B7B008/IP:189.220.145.220/SOCKET:0xFFFFFFFF/shutdown - Disconnected : dwReceivedBytes:0, ErrorCode:0][Rt-CSession::Dispatch][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-232] [Ty-DET][Tm-2009-11-01 02:56:39][Ex-SP:0x0151A188/DP:0x00B7B008/IP:189.220.145.220/SOCKET:0xFFFFFFFF/ Connection Closed - Process disconnect][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-176] [Ty-DET][Tm-2009-11-01 02:56:39][Ex-SP:0x0151A188/DP:0x00B7B008/IP:189.220.145.220/SOCKET:0xFFFFFFFF/Eliminate Session][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-139] [Ty-DET][Tm-2009-11-01 02:57:43][Ex-SP:0x0151A188/DP:0x003F4008/IP:189.220.145.220/ Accept Session Complete.][Rt-CListener::ProcessAccept][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Listener\Listener.cpp][LN-269] [Ty-DET][Tm-2009-11-01 02:57:43][Ex-SP:0x0151A188/DP:0x003F4008/IP:189.220.145.220/SOCKET:0x00000214/Connection Open - Process connected][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-156] [Ty-DET][Tm-2009-11-01 02:57:46][Ex-SP:0x0151A188/DP:0x003F4008/IP:189.220.145.220/SOCKET:0x00000214/CloseSocket - Failed Dispatch][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-167] [Ty-DET][Tm-2009-11-01 02:57:46][Ex-SP:0x0151A188/DP:0x003F4008/IP:189.220.145.220/ InternalCloseSocket - Statistics : [m_hSocket:0x00000214][ CONNECTED][DiffTime(Sec):3.000000][m_dwTotalReceived: 91][m_dwTotalSendPending: 18][m_dwTotalSendCompleted: 18][m_dwSendPending:0][m_dwRecvPending:1][m_nRefCount: 0][flags:0x01]][Rt-CSession::InternalCloseSocket][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-264] [Ty-DET][Tm-2009-11-01 02:57:46][Ex-SP:0x0151A188/DP:0x003F4008/IP:189.220.145.220/SOCKET:0xFFFFFFFF/shutdown - Disconnected : dwReceivedBytes:0, ErrorCode:0][Rt-CSession::Dispatch][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-232] [Ty-DET][Tm-2009-11-01 02:57:47][Ex-SP:0x0151A188/DP:0x003F4008/IP:189.220.145.220/SOCKET:0xFFFFFFFF/ Connection Closed - Process disconnect][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-176] [Ty-DET][Tm-2009-11-01 02:57:47][Ex-SP:0x0151A188/DP:0x003F4008/IP:189.220.145.220/SOCKET:0xFFFFFFFF/Eliminate Session][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-139] [Ty-SER][Tm-2009-11-01 02:57:54][Ex-this:0x00474340/finish server][Rt-CServerWindowFramework::ProcessMessage][FN-D:\SS\v.2240]\Server\RylServerProject\RylServerLibrary\Utility\ServerAppFrameWork\ServerWindowFramework.cpp][LN-368] [Ty-DET][Tm-2009-11-01 02:57:54][Ex-SP:0x0151A21C/DP:0x0151B418/IP:189.220.145.220/ InternalCloseSocket - SessionClose Called : 0][Rt-CSession::CloseSession][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-301] [Ty-DET][Tm-2009-11-01 02:57:54][Ex-SP:0x0151A21C/DP:0x0151B418/IP:189.220.145.220/ InternalCloseSocket - Statistics : [m_hSocket:0x00000230][ CONNECTED][DiffTime(Sec):75.000000][m_dwTotalReceived: 213][m_dwTotalSendPending: 20][m_dwTotalSendCompleted: 20][m_dwSendPending:0][m_dwRecvPending:1][m_nRefCount: 1][flags:0x01]][Rt-CSession::InternalCloseSocket][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-264] [Ty-DET][Tm-2009-11-01 02:57:54][Ex-SP:0x0151A21C/DP:0x0151B418/IP:189.220.145.220/SOCKET:0xFFFFFFFF/shutdown - Disconnected : dwReceivedBytes:0, ErrorCode:0][Rt-CSession::Dispatch][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-232] [Ty-DET][Tm-2009-11-01 02:57:54][Ex-SP:0x0151A21C/DP:0x0151B418/IP:189.220.145.220/SOCKET:0xFFFFFFFF/ Connection Closed - Process disconnect][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-176] [Ty-DET][Tm-2009-11-01 02:57:54][Ex-SP:0x0151A21C/DP:0x0151B418/IP:189.220.145.220/SOCKET:0xFFFFFFFF/Eliminate Session][Rt-CSession::Process][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\Session\Session.cpp][LN-139] [Ty-DET][Tm-2009-11-01 02:57:54][Ex-SP:0x00000000/lpOverlapped:0x00000000/bResult:T/Thread 0x00001D98 Completed][Rt-CIOWorker::Run][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\IOCP\IOWorker.cpp][LN-38] [Ty-DET][Tm-2009-11-01 02:57:54][Ex-SP:0x00000000/lpOverlapped:0x00000000/bResult:T/Thread 0x00002560 Completed][Rt-CIOWorker::Run][FN-D:\SS\v.2240]\Server\RylServerProject\BaseLibrary\Network\IOCP\IOWorker.cpp][LN-38] [Ty-NOR][·Î±×¸¦ ³¡³À´Ï´Ù.]
29-08-10
SaifulCrewZ

Re: How To Fix This Hack On v2240

BUMP*

Edit Use odbg110 ?
and how to edit ?
rylgameserver.exe or rylchatserver.exe ?
30-08-10
Tyfix

Re: How To Fix This Hack On v2240

Quote:

Originally Posted by SaifulCrewZ

BUMP*

Edit Use odbg110 ?
and how to edit ?
rylgameserver.exe or rylchatserver.exe ?

yes 1.10

Quote:

Originally Posted by Tyfix

Well it depends where you have some free code space in your gameserver
19-10-10
KaitoDaumoto

Re: How To Fix This Hack On v2240

maybe its right .. ill try to figure it :)
30-10-12
sudindino

Re: How To Fix This Hack On v2240

Quote:

Originally Posted by Tyfix

Well it depends where you have some free code space in your gameserver, one way would be to change the chat command from 09 to 00 for instance which would make the chat come out as local chat instead of global gm message.

You would still need some code space to manipulate the register before its sent on to chatserver.

The offset for the incoming chat packet (subcmd compare) is here (2240 GameServer): 0047B283

so the changes could look something like this:

0047B283 JMP 0050A416
0047B288 NOP
0047B289 NOP
0047B28A NOP
0047B28B NOP
0047B28C MOVZX EDX,BYTE PTR DS:[EAX+47B600]

..

0050A416 CMP EAX,0E
0050A419 JA 0047B4EC
0050A41F CMP EAX,9
0050A422 JNZ SHORT 0050A426
0050A424 XOR EAX,EAX
0050A426 JMP 0047B28C
0050A42B INT3
0050A42C INT3

---

Same edit just with hex search/replace 2 edits:

Find:
83 F8 0E 0F 87 60 02 00 00 0F B6 90 00 B6 47 00
Replace with:
E9 8E F1 08 00 90 90 90 90 0F B6 90 00 B6 47 00

Find:
83 C1 19 0F AF C1 59 C3 CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC CC
Replace with:
83 C1 19 0F AF C1 59 C3 83 F8 0E 0F 87 CD 10 F7 FF 83 F8 09 75 02 33 C0 E9 61 0E F7 FF CC

is it work for all ryl 2 server version
07-11-12
sick&tired

Re: How To Fix This Hack On v2240

GM orange text pretty easy to detect on chat log. Search for [Type: 9].
14-11-12
maryjane25

Re: How To Fix This Hack On v2240

some tip:
you can fix the hack by packing your login.dat together with ur client, this way there cant use modifie client to by pass ur game guard abd use gmhack.

hope it help u guy :cool:

Sent from my GT-N7000 using Tapatalk 2
14-12-12
sudindino

Re: How To Fix This Hack On v2240

Quote:

Originally Posted by maryjane25

some tip:
you can fix the hack by packing your login.dat together with ur client, this way there cant use modifie client to by pass ur game guard abd use gmhack.

hope it help u guy :cool:

Sent from my GT-N7000 using Tapatalk 2

No u wrong it's still can be hack

any other way? :(:
19-12-12
novapech

Re: How To Fix This Hack On v2240

help me drop items
27-12-12
Terabit

Re: How To Fix This Hack On v2240

Quote:

Originally Posted by novapech

help me drop items

/dropitem novapechlazy [CODE ITEM] [QUANTITY]