Turtle WOW compiled server Turtle WOW

[Montery]

Work like this is huge now that Turtle WoW is going down.

 

[skoajdksjdh]

I am fixing a total of 3,051 new skills added in version 181.The spellFamilyFlags have been fully repaired and are now correctly recognized by the database.Only effectBonusCoefficient1, effectBonusCoefficient2, and effectBonusCoefficient3 still need to be finalized.I will send them to you as soon as possible.I suggest you use Lua to fix challenge modes such as Craftsman Challenges, Elite Challenges, or even add new ones.Alternatively, you can also add bots to the open world.I am still importing all the new items added in 181.Weapons have been imported so far, and armor and other items will take some more time.

hey is your work available somewhere? Id love to test it out

Can you send me torrent file? thanks, bec i can't found used download links [email protected]

someone make a torrent for the source code its not on github anymore got removed

If you want a quick way to "fix" the talents and spells I have attached a zip file that has the corrected spell_template table
Just unzip the sql file and place it in the sql\databse_updates folder and run the server, it should auto update the spells

As a note, this spell data is from client build 1707, the latest 1.17.2 client, so you may have issues if you using a build 1700-1706 client (bottom left corner of the login screen

Also a HUGE note. Some talents will crash the server, because they are missing references in the code. I am working through them one by one maing sure they work


In this repack you'll get crashes learning Elusiveness and Bestial Precision in the Beast Master tree for sure. When I have time I've been going through the talents and implementing code for non working talents or once that crash the server
This requires more than just database changes so they cannot be applied to this repack

I could put my repository up on github so that anyone could compile and possibly contribute, but I'm really not sure how much of a no-no it would be and I'd prefer not to break github rules (and to a lesser extent get on turtle-wow's bad side, in the event they survive the legal nuke they are facing)


Edit: The other option to remain clear in the eyes of github would be to do something like create a new fork of cmangos and implement all the customization that turtle-wow source has, but this is a pretty huge project as the structure of turtle wow is basically source code carried from mangos -> mangos zero -> nostalrius -> elysium -> who knows where -> turtle-wow. Plus you'd not want to port in source directly, anyway, but reverse engineer from the client and build everything by hand, which would entail importing the assets ripped from the client (easy) then testing everything individually, then writing logic and functions for things that do not work

I'll take a peek at just how bad it would be, after work, cause the end result of modern cmangos based code would be really nice

hey any idea why I cant put my talents up in the tree?

 

[ItsMirageIsVoid]

someone make a torrent for the source code its not on github anymore got removed

The source code is here:

To view the content, you need to sign in or register

What actually needs to happen is for someone to backup the 1.18 (should still be downloadable from their site) and 1.17.2 clients (not downloadable, but should come in the form of "twmoa_1172.zip" if you have it in your download folder somewhere) properly. Then it needs to be put into a torrent. I've gotten all the 1.18.1 plugins and addons zipped up alongside the client at least.

Maybe someone can packet sniff on TurtleWoW to figure out at least some of the additions for NPCs and quests to 1.18 too.

 

[faem]

I'm working on getting

To view the content, you need to sign in or register

building with a reproducible NixOS flake. I'll contrib it back if it works. I have a local vmangos dev flake that has a playerbot implementation that it might be possible to also merge in.

I understand most folks don't use NixOS but for Linux folks it should help with getting it compiling and maintaining it better than the Windows repack.

 

[pandac]

I'm working on getting

To view the content, you need to sign in or register

building with a reproducible NixOS flake. I'll contrib it back if it works. I have a local vmangos dev flake that has a playerbot implementation that it might be possible to also merge in.

I understand most folks don't use NixOS but for Linux folks it should help with getting it compiling and maintaining it better than the Windows repack.

Welcome to work on Turtle WoW with me!I'll contribute a large set of accurate item data for version 1.181.It's still being refined and improved!

hey is your work available somewhere? Id love to test it out


someone make a torrent for the source code its not on github anymore got removed


hey any idea why I cant put my talents up in the tree?

Skill trigger conditions and damage coefficients are still being fixed, as testing and comparison are required, and the process is rather slow.

 

[faem]

Welcome to work on Turtle WoW with me!I'll contribute a large set of accurate item data for version 1.181.It's still being refined and improved!


Skill trigger conditions and damage coefficients are still being fixed, as testing and comparison are required, and the process is rather slow.

I'd be happy to: are you also using the penqle/tortoise-wow repo or working from a non-public one?

 

[4mdj4d44]

Welcome to work on Turtle WoW with me!I'll contribute a large set of accurate item data for version 1.181.It's still being refined and improved!


Skill trigger conditions and damage coefficients are still being fixed, as testing and comparison are required, and the process is rather slow.

I would be happy to help in testing .

 

[pandac]

I'd be happy to: are you also using the penqle/tortoise-wow repo or working from a non-public one?

I'd be happy to: are you also using the penqle/tortoise-wow repo or working from a non-public one?

Yes, we're using the same repository. We can discuss and work through any issues together during the fixes ahead.

 

[ItsMirageIsVoid]

Yes, we're using the same repository. We can discuss and work through any issues together during the fixes ahead.

I'm glad somebody's already working on something to preserve this project. Hopefully the new zones introduced after 1.17.2 can eventually be ported into a release, because they added a lot of content together. Only issue is getting the quest data for 1.18.1 and so on.

 

[a7987983]

thank

 

[faem]

I'm working on getting

To view the content, you need to sign in or register

building with a reproducible NixOS flake. I'll contrib it back if it works. I have a local vmangos dev flake that has a playerbot implementation that it might be possible to also merge in.

I understand most folks don't use NixOS but for Linux folks it should help with getting it compiling and maintaining it better than the Windows repack.

As an update here: I have this compiling and in a somewhat playable state on NixOS.

I have it deploying into a MicroVM with Tailscale to isolate it from the host system, I would recommend doing the same as there might be security issues given this is from a dump directly from a security breach.

I kept running into coredump issues on mangos during client connection, which appear to have been related to Warden checking for "warden_modules" as a file-path, I couldn't find what should be in that folder. I learned that regardless of having a Mangosd.config that disables Warden checks, if you have Warden.ModuleDir ="warden_modules" and the mangosd process coredumps at Client login mentioning an Warden assert statement that is why. I modified the source-code and recompiled but continously hit deeper code path issues. Eventually, I solved it by setting Warden.ModuleDir = "" which appears to resolve the issue as a bandaid.

Aside from that, on character world login, I hit another coredump for ExtraTalent being non-existent. Forcing "_structure_characters.sql" to be applied resolved this for me. Correctly applying SQL in the right order from scratch every rebuild continues to be the bane of my existence. I eventually took the approach of fully dumping the database from the repack by running mysqld.exe in Steam's proton and then using that dump + the 20250401220800_world.sql previously supplied here + the "_structure_characters.sql". That appears to have made it stable enough to not coredump and log in for a few hours. I never hit the 15m realm restart issue mentioned.

If anyone could take a look at getting the dump's CMS + other websites and get them running in a Docker container I would be very grateful. Building them on Linux hasn't been successful for me due to the dependencies. I suspect it might be easier with the full 179gb dump.

As a gift to others on Linux this is the simplest way I got the repack running locally (and on a steamdeck):
0. Get the repack files
1. Add 4 non-steam games mysqld.exe, mangosd.exe, realmd.exe, WoW.exe (TWoW).
2. Add Proton Hotfix or Proton9 under Compatibility -> Force the use of a specific Steam Play compatibility tool
3. Ensure you do not have anything on port 3306 (ss -ntlp)
4. Start mysqld.exe, then realmd.exe, then mangosd.exe, ensure your WoW.exe realmlist set to localhost
5. Login with username: 123 pw: 123 or Username: A pw: a

If you need to make database edits, you can add Navicat's exe and connect to local_3306 or use a different client. root/mangos is the password. Enjoy.

 

[ItsMirageIsVoid]

It would probably be wise to patch the security holes/update the vmangos version since it's a hacked leak, but best do that when you know it can run. The leak mentions how it was done if I recall.

 

[faem]

It would probably be wise to patch the security holes/update the vmangos version since it's a hacked leak, but best do that when you know it can run. The leak mentions how it was done if I recall.

The README.txt is mostly criticism about taking donations and not taking security seriously. It doesn't have details on the initial access vector but I think given the rest of the dump I'm pretty the websites were on the same host (or at least the same subnet) as the servers. So it wouldn't be too far fetched to assume there was RCE or SQLi somewhere in the websites.

The README claims:

Source code has been modified and obfuscated, backdoor are endless.
No matter how much restructuing, logs parsing, it's too late. I'm woven in the fabric.
As well, I had full access to the forums for many months which allowed me to edit the main Turtle download link.
Do with that as you will.

Which given the nature of being able to change the download link, could very well mean there are backdoors from the leaker embedded in this somewhere or was used to deliver malware to TWoW users. I expect that the update client mechanism in the launcher deserves some more scrutiny as well. I'll leave that to someone else to investigate though.

We might be able to run a security scans using static analysis tools like semgrep against the codebase. If we get Docker containers working for each of the websites we could also do dynamic analysis and throw fuzzers at them so we can add security patches.

I looked briefly at the character db columns to see if I could import some characters for my friends to join. It differs from my vmangos server too greatly. In an ideal world, we would be able to remap or figure out a way to extend vmangos to support the TWoW patches since VMangos already does things to support older vanilla builds like 1.6 - 1.11. So why not create a 1.17.2 or 1.18.1?

EDIT: I got the forums working -- here are my notes

 

[kelerun]

is this for 1.17.2 or for the latest as well?

 

[Ond]

Hey guys,
A fork of VMangos with real playerbots working is available here :

To view the content, you need to sign in or register

Maybe we can add those real playerbots to the TurtleWoW core as it's a VMangos one.

 

[linkme]

Да, мы используем один и тот же репозиторий. Мы можем обсудить и совместно решить любые проблемы в процессе исправлений.

Я его не использую, думаю, что там много лишних правок, заточенных для одиночной игры и меняющих некоторые механики, scalling etc

Hey guys,
A fork of VMangos with real playerbots working is available here :

To view the content, you need to sign in or register

Maybe we can add those real playerbots to the TurtleWoW core as it's a VMangos one.

I added custom boys for testing, i show ike realization to porting some meckhanks,

But ike bots use db, and saves progress, i realize fully virtual bots - they live only in memory

My bots simple, i spawn 1k 2k 10k bots , and after reload they dissapers,

They can use any spells in spell book, use eluna lua scrips for tactics and rotation and fast testing, used ike walking logic

Can bg que / enter

Hey guys,
A fork of VMangos with real playerbots working is available here :

To view the content, you need to sign in or register

Maybe we can add those real playerbots to the TurtleWoW core as it's a VMangos one.

What really need to do :

Its full list: of not working thing, coz i don't known what need repair )

Yesterday looking at code for challenges, 70% of them might working good.

Can any one ask me who are up for date , client or server ? Who running forward?

 

[RolandTears]

Trying the 1.17.2 repack and I am able to get to the character select screen, but when I attempt to enter the realm I get an error saying interfacesframeXML is corrupt. Removing WTF, CACHE and INTERFACES and retrying ends with the same result. Any insights?

 

[linkme]

Trying the 1.17.2 repack and I am able to get to the character select screen, but when I attempt to enter the realm I get an error saying interfacesframeXML is corrupt. Removing WTF, CACHE and INTERFACES and retrying ends with the same result. Any insights?

Yes, its my first enter, u need to open patch.mpq found file , which cause error, and fix him)
Dont remember what exactly

 

[hollow04547]

Not sure what happened but the thread is not loading fully anymore. Missing a whole last page.

 

[cupidonihack]

the fix proposed do fix only base talents and not the newest.
a fix to the fix was proposed , a 1.18.x server mysql extract (CSV) exists and was posted with only the relevant items regarding this topic.

i found some suspect values in the spell template csv that connot being imported in my db because of type error.
i dont know if these values has been corrupted , they are in spellFamilyFlags collumn intended to be normally Bit masks from what i learned on the fly. in the csv source , as i expected big decimals i found some "burned" values that may results of opening the csv with editing software that converted it into float 2 decimal scientific format . it compressed so the value and doing so we lost data.

the concerned values are :
36523 Bubble Barrier 1.65E+12
36524 Bubble Barrier 1.65E+12
36525 Bubble Barrier 1.65E+12
36526 Bubble Barrier 1.65E+12
36531 Strider Presence 5.50E+11
36532 Packleader 5.50E+11
36533 Web 5.50E+11
36535 Roar of Fortitude 5.50E+11
36536 Savage Rend 1.65E+12
36537 Savage Rend 1.65E+12
36538 Savage Rend 1.65E+12
36539 Savage Rend 1.65E+12
36540 Savage Rend 1.65E+12
36541 Savage Rend 1.65E+12
36542 Death Roll 1.10E+12
36543 Death Roll 1.10E+12
36544 Death Roll 1.10E+12
36545 Death Roll 1.10E+12
36546 Death Roll 1.10E+12
36547 Death Roll 1.10E+12
36548 Death Roll 5.50E+11
36549 Death Roll 5.50E+11
36550 Death Roll 5.50E+11
36551 Death Roll 5.50E+11
36552 Death Roll 5.50E+11
36553 Death Roll 5.50E+11
36562 Packleader 5.50E+11
36916 Molten Blast 5.63E+14
36917 Molten Blast 5.63E+14
36918 Molten Blast 5.63E+14
36919 Molten Blast 5.63E+14
36920 Molten Blast 5.63E+14
36921 Molten Blast 5.63E+14
46321 [Deprecated] Baited Shot 2.20E+12
48049 Lacerate 2.75E+11
48050 Lacerate 2.75E+11
48306 Earthquake 1.13E+15
48307 Earthquake 1.13E+15
48308 Earthquake 1.13E+15
49557 Strike Together 1.10E+12
51300 Zeal 5.50E+11
51302 Hand of Reckoning 2.75E+11
51324 Mending Light 1.37E+11
51350 Holy Might 2.20E+12
51351 Holy Might 2.20E+12
51352 Holy Might 2.20E+12
51353 Holy Might 2.20E+12
51354 Holy Might 2.20E+12
51363 Spirit Link 7.04E+13
51386 Lightning Strike 4.40E+12
51387 Lightning Strike 4.40E+12
51395 [Depracated] Electrified 3.52E+13
51401 Barkskin (Feral) 2.75E+11
51428 Owlkin Frenzy 5.50E+11
51429 Owlkin Frenzy 5.50E+11
51433 Balance of All Things 1.10E+12
51434 Balance of All Things 1.10E+12
51435 Balance of All Things 1.10E+12
51451 Barkskin (Feral) 2.75E+11
51452 Barkskin (Feral) 2.75E+11
51489 Earthquake Aftershock 2.25E+15
51523 Earth Shield 2.81E+14
51524 Earth Shield 2.81E+14
51525 Earth Shield 1.10E+12
51526 Earth Shield 1.10E+12
51529 Water Shield 2.75E+11
51530 Water Shield 2.75E+11
51531 Water Shield 2.75E+11
51532 Water Shield 2.75E+11
51533 Water Shield 8.80E+12
51534 Water Shield 8.80E+12
51535 Water Shield 8.80E+12
51536 Water Shield 8.80E+12
51541 Flametongue Weapon Fire Damage Bonus 1.76E+13
51694 Spellstone 1.37E+11
51697 Felstone 1.37E+11
51700 Wrathstone 1.37E+11
51756 [Deprecated] REUSE ME 1.37E+11
51757 [Deprecated] REUSE ME 1.37E+11
51872 [Deprecated] REUSE ME 1.37E+11
51873 [Deprecated] REUSE ME 1.37E+11
51874 [Deprecated] REUSE ME 1.37E+11
51875 Mending Light 1.37E+11
51876 Mending Light 1.37E+11
51877 Mending Light 1.37E+11
51878 Mending Light 1.37E+11
51879 Mending Light 1.37E+11
51880 Mending Light 1.37E+11
51881 Mending Light 1.37E+11
51987 Resonance Cascade 2.75E+11
51988 Resonance Cascade 2.75E+11
51989 Resonance Cascade 2.75E+11
51990 Resonance Cascade 2.75E+11
52412 Stormstrike 2.20E+12
52419 Lightning Strike 4.40E+12
52420 Lightning Strike 4.40E+12
52421 Lightning Strike 4.40E+12
52422 Lightning Strike 4.40E+12
52550 Dark Harvest 2.75E+11
52551 Dark Harvest 2.75E+11
52552 Dark Harvest 2.75E+11
52710 Shadow of Death 2.75E+11
52711 Shadow of Death 2.75E+11
52714 Noxious Assault 5.50E+11
52715 Noxious Assault 5.50E+11
52716 Noxious Assault 5.50E+11
52717 Noxious Assault 5.50E+11
52751 Voidstone 1.37E+11
52878 Earthquake 1.13E+15
58232 Cacophony of Knowledge 2.75E+11

these values are only those who triggered import error but i fear other exists

------------------------------------few time later​

quick update after pushing the reasoning a bit further

the pattern still looks consistent overall, but i’d be a bit more cautious now about assuming everything was a clean single-bit value originally. most of them sit very close to a power of two, which suggests that was probably the case, but a few values drift enough that it’s not completely certain anymore

so the approach i’m leaning towards is:

when the value is very close to a power of two, snap to it
when it’s in between, pick the closest one but consider it “uncertain”
assume single-bit unless there is evidence of multi-bit usage (which we don’t really have here)

this should at least restore something structurally valid without introducing obvious inconsistencies

here is the full list of suggested replacements based on nearest power of two

1.37E+11 → 137438953472 (2^37)
2.75E+11 → 274877906944 (2^38)
5.50E+11 → 549755813888 (2^39)
1.10E+12 → 1099511627776 (2^40)
1.65E+12 → 1099511627776 (2^40) (could also be 2^41)
2.20E+12 → 2199023255552 (2^41)
4.40E+12 → 4398046511104 (2^42)
8.80E+12 → 8796093022208 (2^43)
1.76E+13 → 17592186044416 (2^44)
3.52E+13 → 35184372088832 (2^45)
7.04E+13 → 70368744177664 (2^46)
2.81E+14 → 281474976710656 (2^48)
5.63E+14 → 562949953421312 (2^49)
1.13E+15 → 1125899906842624 (2^50)
2.25E+15 → 2251799813685248 (2^51)

and below are the entries that might need a second look because they don’t fall cleanly on one side

36523 Bubble Barrier 1.65E+12
36524 Bubble Barrier 1.65E+12
36525 Bubble Barrier 1.65E+12
36526 Bubble Barrier 1.65E+12
36536 Savage Rend 1.65E+12
36537 Savage Rend 1.65E+12
36538 Savage Rend 1.65E+12
36539 Savage Rend 1.65E+12
36540 Savage Rend 1.65E+12
36541 Savage Rend 1.65E+12

those are all around 1.65E+12, which sits between 2^40 and 2^41

so either:

they were originally 2^40 and got rounded up
or 2^41 and got rounded down
or possibly different bits that collapsed to the same float

hard to tell without a clean source