New dupe exploit.

[kama3a]

[22 VII 21:25:20] CHANGE:Drop, item 268570132:Adena(399777240), L2PcInstance:Megi[268570131]
[22 VII 21:25:20] CREATE:Drop, item 268509912:Adena(1), L2PcInstance:Megi[268570131]

[22 VII 21:25:21] CHANGE:Drop, item 268570132:Adena(399777239), L2PcInstance:Megi[268570131]
[22 VII 21:25:21] CREATE:Drop, item 268509914:Adena(1), L2PcInstance:Megi[268570131]

[22 VII 21:25:22] CHANGE:Drop, item 268570132:Adena(399777238), L2PcInstance:Megi[268570131]
[22 VII 21:25:22] CREATE:Drop, item 268509916:Adena(1), L2PcInstance:Megi[268570131]

etc etc. etc...
he droping and droping adena use 1 gk...
[22 VII 21:27:47] CHANGE:Teleport , item 268570132:Adena(399764158), L2PcInstance:Megi[268570131], L2TeleporterInstance:Elisa(30848)[268463323]


and wtf ?
[22 VII 21:28:07] CHANGE:Drop, item 268495431:Event - Glittering Medal(177151), L2PcInstance:Megi[268570131]
after that

[22 VII 20:35:14] CHANGE:MailFee, item 268570132:Adena(399815800), L2PcInstance:Megi[268570131]
[22 VII 20:35:14] CHANGE:SendMail, item 268491759:Blue Eva(9999998), L2PcInstance:Megi[268570131]

this can be don with l2pxh ?
any ideas where to watch for this bug and how to be fixed ty

[janiii]

revisions?

[kama3a]

old revision
but updated to max. just skiped some usless mods like manor etc..

any ideas ...
all logs are empty.. just item log show that....

[MELERIX]

test with a clean revision, we can't give proper support for revisions with custom modifications.

[kama3a]

test with a clean revision, we can't give proper support for revisions with custom modifications.

-im updating everything to max from timeline
that mean files are 99 % same as last revision.(mods like manor or other are skiped)
-how to test with new revision
change of revision - not sure some 1 will play
change of revision -note sure exploit will be repeated.

only thing that i found in logs about exploit was posted.
dunno what will change if i put clean revision w/o mods.

atm most modes are from here and still not see some one to have problems.

im asking for some kind of idea how to find or monitor the exploiter for feature fix of this bug.
or where can be the problem - custom mode that i install or some backdoor in l2j security.
can be new l2phx or anything ...
options are alot... as i see
so helpful ideas are welcome
ty again
regards kama3a

[Gnacik]

But where you see bug ? Logs are correct, players just drop 1 adena to ground few times.

[22 VII 21:25:20] CHANGE:Drop, item 268570132:Adena(399777240), L2PcInstance:Megi[268570131]

Player have in inventory 399,777,240 adena object id 268570132 next line :

[22 VII 21:25:20] CREATE:Drop, item 268509912:Adena(1), L2PcInstance:Megi[268570131]

He drop 1 adena to ground, new object was created with object id 268509912

[22 VII 21:25:21] CHANGE:Drop, item 268570132:Adena(399777239), L2PcInstance:Megi[268570131]

Like in first quote, his adena in inv is objectid 268570132 and count is 399,777,239 He drop next 1 adena on ground count is 399,777,238 so i dont see any bugs and dupes here.

[kama3a]

yes he is new player who drop 1 adena few times
and same moment he get Glittering Medal(177151) - 100 % exploit
its hard to get 10 medals for 5 min but yes no exploit he get only 177k


any ideas what can cause the exploit to check ...

[janiii]

and same moment he get Glittering Medal(177151) - 100 % exploit
its hard to get 10 medals for 5 min but yes no exploit he get only 177k

it is not how much medals he got, but how much medals he has in his inventory before.

[kama3a]

i check droplist mobs can drop max 5 medals..
sql have restriction 1 public account only for SELECT
localhost - only for me ... with full priv.
and 1 other account restricted with IP.

im updating non stop from timeline ...
and i add some custom modes like
-max level 99
-pvp increase exp
-anti farm protect
-events
-pvp color nick
and few more that are minor ...

dont know how they can cause the problem for exploit ... files are 99 % same as last revision, just with some modification from me..

as i think that was modified packets to dupe, exploit or l2phx...
for that im asking for ideas what can cause that... and how i can protect.
logs are empty server didnt detect anything strange...

just that man make new acc and start droping big amount of currency.

regards kama3a

[janiii]

then just trac his medals - trac down the item id of his medals in the item log. or was that the first entry of that object id 268495431 in the log?

[kama3a]

then just trac his medals - trac down the item id of his medals in the item log. or was that the first entry of that object id 268495431 in the log?

i post log for him
he drop 1 adena few times
and same time got alot medals...

Code: Select all

[Orchidea to Megi] omg jow u make so many medals?

Code: Select all

TELL [Megi to Orchidea] hack :)

thats the chat log...

[janiii]

be sure to have revision 4378-4380. i hope you already banned the 2 player and they whole account

[kama3a]

be sure to have revision 4378-4380. i hope you already banned the 2 player and they whole account

atm i turn mysql logs and other type of logs..

if i will report if some 1 dupe again items.

ty for now.. if u have ideas write...

atm this can help ? viewtopic.php?f=69&t=18088&start=0&hilit=packet

[MELERIX]

yes, and if possible help to test and report feedback in that topic

[marcoviny]

viewtopic.php?f=81&t=30937&p=186311#p186311