Page 1 of 1

Players can get Online players from server using xploit tool

Posted: Mon Aug 22, 2011 11:51 pm
by bomberoloco24
Well, i disabled the list of players in the server to prevent massive propaganda to other players via whisp, or for drama queens to complain about low login of server, but i got one guy that knew exactly how much ppl where on, who whas in offline mode, and who active.

So, i asked him, like a normal player, how he can know this, he told me there a "server checker" from multiplayerxploits.de or something like that.

I found l2 checker, its supposed to do that, i didnt download it couse im afraid of virus.

The question in this is: The server broadcasts amount of players on and off, even when its turned off in config ?

How can i prevent for players get this info ? thanks in advance .-

Please move if is incorrected placed, i used search, found nothing.

Re: Players can get Online players from server using xploit

Posted: Tue Aug 23, 2011 6:34 am
by Naminator_X_
Even L2Net can see the online player count. I believe the login server sends it to the client so it can "know" the load (low, heavy) so it's not something you just stop. Basically you only need a tool that bypasses your login. Unless you *mod your client* (don't ask how in here) to change the packet IDs i doubt you can stop that. Changing packets will remove most of the bot nubs too. Again .. asking for howto on client mod is strictly forbidden in here so i suggest you .. don't do it

Re: Players can get Online players from server using xploit

Posted: Tue Aug 23, 2011 5:09 pm
by bomberoloco24
Thanks for reply, i wont :D

Ill see another way to do it.

Re: Players can get Online players from server using xploit

Posted: Fri Sep 02, 2011 7:57 am
by Szponiasty
Naminator_X_ wrote:Even L2Net can see the online player count. I believe the login server sends it to the client so it can "know" the load (low, heavy) so it's not something you just stop. Basically you only need a tool that bypasses your login. Unless you *mod your client* (don't ask how in here) to change the packet IDs i doubt you can stop that. Changing packets will remove most of the bot nubs too. Again .. asking for howto on client mod is strictly forbidden in here so i suggest you .. don't do it
You can. Just rewrite code of packet sent to client (cant remember exact name atm), to send eg 0 or like I did - random number between 5000 and 6000 ;) It will not affect login and gameserver operation because valid player count will be still sent to login (as an ecrypted transmission between gameserver and login, excluding client). Also server traffic is not determined by client and is not based on player online count sent by it. Login sends server status to client and decides if server should be seen as off, or low traffic etc.

Re: Players can get Online players from server using xploit

Posted: Fri Sep 02, 2011 1:14 pm
by Starter
Szponiasty wrote:
Naminator_X_ wrote:Even L2Net can see the online player count. I believe the login server sends it to the client so it can "know" the load (low, heavy) so it's not something you just stop. Basically you only need a tool that bypasses your login. Unless you *mod your client* (don't ask how in here) to change the packet IDs i doubt you can stop that. Changing packets will remove most of the bot nubs too. Again .. asking for howto on client mod is strictly forbidden in here so i suggest you .. don't do it
You can. Just rewrite code of packet sent to client (cant remember exact name atm), to send eg 0 or like I did - random number between 5000 and 6000 ;) It will not affect login and gameserver operation because valid player count will be still sent to login (as an ecrypted transmission between gameserver and login, excluding client). Also server traffic is not determined by client and is not based on player online count sent by it. Login sends server status to client and decides if server should be seen as off, or low traffic etc.
Maybe even a number which would make l2net crash? Just an idea. xD

Re: Players can get Online players from server using xploit

Posted: Fri Sep 02, 2011 5:41 pm
by Origami
Starter wrote:Maybe even a number which would make l2net crash? Just an idea. xD
Indeed! And all the clients too :mrgreen:

Re: Players can get Online players from server using xploit

Posted: Fri Sep 02, 2011 5:42 pm
by JMD
Or you can turn on the community board and they wont even try to use the exploit.

P.S: If your server is good you dont have to hide your player count.

Re: Players can get Online players from server using xploit

Posted: Fri Sep 02, 2011 6:23 pm
by Szponiasty
JMD wrote:Or you can turn on the community board and they wont even try to use the exploit.

P.S: If your server is good you dont have to hide your player count.
Nah. Server can be average or even worse, but when proper amount of money is spent on advertising, it probably will have huge online. So online count != server quality.