وتتوالى كوارث joymax
 

بالصدفة بفتح rev6 لقيت الموضوع ده
خلاصة الكلام انه فى ناس معاها staff d20 ايوه D20 المهم الى حوالين الاعب ده بيجيلوه dc وملف dump لانه ملف ال d20 staff مش فى الميديا لكن الكارثة انهم ظبطوا الميديا بحيث انه ما يخدش كراش
يعنى مش معروف اذا كان ده اكونت GM واتهكر ولا هما اخترقا الميديا وبيعدلوا فيها براحتهم
المهم ده الموضوع فى rev6 وياريت اى حد من المشرفين يظبط الموضوع Player able to spawn GM item and D20 Legend staff...
Do you think those people are behind the DB leak that occurring since September 2011?
Related to the massive account hacking that keep occurring?

http://www.rev6.com/hackernorma.png
http://www.rev6.com/player/Norma/PubwiZ.html

This is the 3rd fortress war on Norma which people are complaining of Hacker/Exploit
The hacker login to the server and EVERYONE around them get a client crash.
The hack was caused by a player using a D20 Legend staff
Yes, I said it correctly, he had a D20 not D12, D20...

The error resulting from the crash is the following:
res\item\europe\weapon\tstaff_20.bsr Loading Failed.
For everyone that had a crash, you can use your bot to view their equipped item after the crash.

Another method is to look inside
C:\Program Files (x86)\Silkroad\Dump\*.dmp and the last created file should contain:
ASSERT("res\item\europe\weapon\tstaff_20.bsr Loading Failed.")
After a client crash, the client create a dump file telling what happened before the crash.

So, now we know it... Joymax GM account/DB was hacked.
The hacker spawned a D20 legend staff and some GM item
Or the hacker managed to put he's hand on Joymax DB, and manually edited he's item.
Either way, there was/maybe still exist... a huge security issue...

They also added the missing file in the pk2 so their client wouldn't crash.

A SPECIAL thank to MiLky_ who shared he's account allowing me to investigate the issue.
I would also like to thank Dinastia guild for attacking Constantinople on Norma.

Dinastia might of loss again due to hackers/exploiters, but now that it public.
Hopefully next week will be a more enjoyable battle, hopefully without any extra exploit.

Now come the time to try and explain how all of this happened?
Was is the pop exchange npc? I doubt it...

Who think a Joymax GM got hacked and they spawned some GM item and a D20 staff using GM power?
They then, dc after spawning the D20 staff, and figured to patch their client pk2...
allowing them to pickup the D20 staff and started exploiting the game with the D20 staff...
No wonder he managed to destroy the Fortress building so fast, the D20 staff has insane Damage output...

So hacked account from db leak? or hacked GM computer? who knows...
Not like Joymax will give us any information about it...
Well another Mystery solved...

حته ديه كمان

يعنى ولا سيرفرات خاصة نافعة ولا العادية نافعة اومال الواحد يلعب ايه gta 7

و مالوا :crazy:

دى سرفرى والراجل دى فعلا عندنا وعامل كارثة فى سرفر

loooooooooooooooooooooooooool

ستاف دجرى 20 ؟

كويس كويس معنى كده ان اللعبه اخرها لفل 200 xD

:thumb_yello:

مش عيب

:bann:

دة مش تعديل مديا لو مديا هتظهر ليه هو بس


دة تعديل داتا بيز وكدة يبقي 100% فيه ثغرات محدش يعرفها غير ناس محترفة في المجال دة عرفوا يستغلوها

ويلعبوا بالدتا بيز بتاعت الجيم ويحطوا ويشيلوا

اكونت الجي ام مش هيسترق لول طيب مايروح يغير الباس =)) او يعرف مين دخل علي اكونته بالاي بي بتاعه =)) ويديله بلوك وهيجيبه

زي ماتم اخترق الموقع اخترقوا الداتا

وحصل رول باك كتير قبل كدة علشان كدة

صح دة اكيد شغل هاكرز

خلاص دى بقت سرك القرود مش سلك رود اللعبة بقت فى البلالا انا هاكل فشار احسن :popcom:

ياجماعه انتوا مستغربين لي علي الاختراقات علي جوي ماكس

ماسغرابتوش لي علي المفاعل النووي الي في طهران الي اخترقوا القراصنه وهو اصلان مش موصل بالنت

القراصنه ملهمش حدود ومهما بلغ التقدم وسد الثغرات في الي يفيكها
فما بالك بجوي ماكس التعبانه دي :crash: