There is a serious flaw on bnet's behalf that allows attackers to gain access to a war3 operated clan channel, I have trying to find the possibilities on how a attacker can comprimise the channel without clan members of the vitimized lending a hand on the assault. Would anyone here like to help and crack this puzzle with me, any suggestions ideas would be appreciated
Quote from: Savior on November 06, 2005, 12:59 AM
There is a serious flaw on bnet's behalf that allows attackers to gain access to a war3 operated clan channel, I have trying to find the possibilities on how a attacker can comprimise the channel without clan members of the vitimized lending a hand on the assault.
Would those clan members by any chance designate the attacker and rejoin?
Want to elaborate on how this is done?
Quote from: Savior on November 06, 2005, 01:18 AM
Not sure yet
Want to elaborate on what you have so far? Or are you just stating "I think there's a problem... but I'm not sure yet!"?
Quote from: Savior on November 06, 2005, 12:59 AM
There is a serious flaw on bnet's behalf that allows attackers to gain access to a war3 operated clan channel, I have trying to find the possibilities on how a attacker can comprimise the channel without clan members of the vitimized lending a hand on the assault. Would anyone here like to help and crack this puzzle with me, any suggestions ideas would be appreciated
/me ponders if Deception's idea worked with the source code I gave him that attempted to do it :P
eww Deception. Anyway a battle.net glitch, whohoo.
I've already figured out, i'd say it here, but i know everyone on battle.net will be checking here, and i don't feel the need everyone should be taking down all clans for this lil bug.
But after you do the trick, You cannot reconnect, other wise you lose status. you may rejoin, leave, come back, as long as you don't disconnect, it also requires the use of proxys. because sending the battle.net packets will ipban you, you do have to load multiple bots. and you gain cheif status. after you reconnect you cannot do it to the same clan channel for another 7 days. You may do this on any client as you wish except warcraft III.
You cannot use anybot to do this as most bots wont let you use these packets on certain clients. its a very easy trick indeed, i am however surprized no one has it done it before.
- - - -
Also other glitchs i have been found while sitting there last night trying to figure this one out was;
You can send whispers to users from them selfs, so it pretty much makes it look like they are talkin to them selfs or you can whisper somone else but from someone else. you can pretty much act like a bnet rep except in the fact that you cannot change the color of your text to blue.
And also you can drop war3 shamans, and chief, by sending the right packets a certain amount of times fairly simple.
Old news~
All you're doing is inviting ten starcraft bots, having them accept, and bnet sends you to the specified clan channel that you mentioned. Title and Clan must be identical to the existing clan.
Yet your close but your still wrong, theres important things you need to know, other wise your just gunna automaticly drop.
And words been out on bnet since my last post so alot of people figured it out but they can't do it, because they don't know the right requirements needed.
Quote from: MyStiCaL on November 06, 2005, 06:09 PM
Yet your close but your still wrong, theres important things you need to know, other wise your just gunna automaticly drop.
You mean using proxies?
Since everyone is doing it... i thought i'd tell y'all what to do..
You'll need more than 1 person to do this:
1 Person loads the bot that is going to invite.. the chieftain.
The rest load the remaining 9 bots on 1 client..
and then just invite em all like if you were making a warcraft 3 clan..
Mystical: I tested it, it works fine.
Sean: You're just repeating what I said.
Does the chieftain have to be a wc3, or is it just all starcraft acting like its making a channel then just over rides the warcraft datebase and puts the starcraft bot as the new chieftain.
This is a bigger problem then I thought alot of people are already posting to b.net saying there channel is getting taken.
http://www.battle.net/forums/thread.aspx?fn=opensupport&t=396416&p=1&#post396416
Its just all sc.. basically making a clan over another clan...
The Blizzard fanboys are quick to defend anything that would indicate Blizzard is neglectful at maintaining their games. :P
You don't need 10 bots to make a channel.
You will be ipbanned instantly on clan creation if you don't know how to do it, in witch Fact you have to have proxys to keep chief.
You only need 2 bots to do it.
Its done and over with and well far passed, this was well showed to the public by someone that was watching us figure this out.
Personally I appreciate the value of being able to make clans with down-level clients, but I think this is just going to prompt a Blizzard crackdown on bots. :/
Quote from: MyndFyre on November 07, 2005, 10:44 AM
Personally I appreciate the value of being able to make clans with down-level clients, but I think this is just going to prompt a Blizzard crackdown on bots. :/
I was thinking this I hope this does not cause battle net to start cracking down on 3rd party clients
Quote from: MyndFyre on November 07, 2005, 10:44 AM
Personally I appreciate the value of being able to make clans with down-level clients, but I think this is just going to prompt a Blizzard crackdown on bots. :/
Good riddance.
This'll make bots something difficult to write / obtain, hopefully. :)
Quote from: Newby on November 07, 2005, 04:26 PM
Quote from: MyndFyre on November 07, 2005, 10:44 AM
Personally I appreciate the value of being able to make clans with down-level clients, but I think this is just going to prompt a Blizzard crackdown on bots. :/
Good riddance.
This'll make bots something difficult to write / obtain, hopefully. :)
We've reverse-engineered every single thing they've thrown at us to a useable extent. We have some brilliant programmers here (Skywing, Grok, Adron, Arta, Yoni), probably smarter than Blizzard, especially in the reversing genre of the job. Do you seriously think they can stop all of us put together without drastic changes to the protocol, which would just end up breaking everything they already have and effectively putting a ton of bugs back into the system?
We? Us? You?
Skywing isn't really....."around".
Quote from: Joe on November 07, 2005, 05:12 PM
Quote from: Newby on November 07, 2005, 04:26 PM
Quote from: MyndFyre on November 07, 2005, 10:44 AM
Personally I appreciate the value of being able to make clans with down-level clients, but I think this is just going to prompt a Blizzard crackdown on bots. :/
Good riddance.
This'll make bots something difficult to write / obtain, hopefully. :)
We've reverse-engineered every single thing they've thrown at us to a useable extent. We have some brilliant programmers here (Skywing, Grok, Adron, Arta, Yoni), probably smarter than Blizzard, especially in the reversing genre of the job. Do you seriously think they can stop all of us put together without drastic changes to the protocol, which would just end up breaking everything they already have and effectively putting a ton of bugs back into the system?
Wow...Could you be sucking vL's dick any harder? (No offense, but good lord something had to be said)
Quote from: Joe on November 07, 2005, 05:12 PM
Quote from: Newby on November 07, 2005, 04:26 PM
Quote from: MyndFyre on November 07, 2005, 10:44 AM
Personally I appreciate the value of being able to make clans with down-level clients, but I think this is just going to prompt a Blizzard crackdown on bots. :/
Good riddance.
This'll make bots something difficult to write / obtain, hopefully. :)
We've reverse-engineered every single thing they've thrown at us to a useable extent. We have some brilliant programmers here (Skywing, Grok, Adron, Arta, Yoni), probably smarter than Blizzard, especially in the reversing genre of the job. Do you seriously think they can stop all of us put together without drastic changes to the protocol, which would just end up breaking everything they already have and effectively putting a ton of bugs back into the system?
Yes, because I see
so many WoW bots.
Hint: don't brown nose.
Quote from: Newby on November 07, 2005, 04:26 PM
Quote from: MyndFyre on November 07, 2005, 10:44 AM
Personally I appreciate the value of being able to make clans with down-level clients, but I think this is just going to prompt a Blizzard crackdown on bots. :/
Good riddance.
This'll make bots something difficult to write / obtain, hopefully. :)
Why do you want to make bots hard to obtain?
We don't, Blizzard will if this keeps up.
QuoteYes, because I see so many WoW bots.
Well, Joe & friends (who will not be disclosed) have gotten some serious progress. I'll admit it, WoW is coming slower than WAR3 did, but you'll get over it, seeing as how you don't own a WoW subscription and have absolutely NO room to complain. =)
Skywing: 1
Rabbit: 0
Haha stupied blizzard and not fixing simple problems even tho they know about it...
[10:00:39.893] <PeterN.Support@Blizzard> Good morning all.
[10:01:17.612] <PeterN.Support@Blizzard> There are no updates on the clan channel issues yet I'm sorry.
:/
~-~(HDX)~-~
When Blizzard fix glitches, they just make more. Well they did last time. All those patches we went through! How exactly did somebody work this glitch out though? Funny, you must of been LOOKING for a glitch to-able to work it all out? I want to know how you exactly found out about it, whoever did.. :p
Quote from: QwertyMonster on November 08, 2005, 12:41 PM
When Blizzard fix glitches, they just make more. Well they did last time. All those patches we went through! How exactly did somebody work this glitch out though? Funny, you must of been LOOKING for a glitch to-able to work it all out? I want to know how you exactly found out about it, whoever did.. :p
haha so true. I just want blizzard to fix the problem so all the clans will stop dieing.. it's getting kindof sad :)
Quote from: QwertyMonster on November 08, 2005, 12:41 PM
When Blizzard fix glitches, they just make more. Well they did last time. All those patches we went through! How exactly did somebody work this glitch out though? Funny, you must of been LOOKING for a glitch to-able to work it all out? I want to know how you exactly found out about it, whoever did.. :p
lol this is true blizzard causes more problems when they patch but this is such a easy server fix if they mess this up they need to be slapped.
edit: wow b.net must be fixing this problem faster then I though I just got this message.
[3:32:24 PM] Broadcast: This Battle.net server is going down for maintenance. Please connect to another server.
"[15:32:46] Server broadcast: This Battle.net server is going down for maintenance. Please connect to another server."
This update didn't seem to affect my non-BNLS bots.
Quote from: Joe on November 08, 2005, 09:13 AM
We don't, Blizzard will if this keeps up.
I guess you missed this part then....
"This'll make bots something difficult to write / obtain,
hopefully"
oh, yeah, well thats just newby =p
Quote from: QwertyMonster on November 08, 2005, 12:41 PM
When Blizzard fix glitches, they just make more. Well they did last time. All those patches we went through! How exactly did somebody work this glitch out though? Funny, you must of been LOOKING for a glitch to-able to work it all out? I want to know how you exactly found out about it, whoever did.. :p
Probably using a bot and accidentally sent the invite as a Starcraft client, found that it didn't disconnect him outright (or maybe it did), and he wanted to see if it'd work if he finished the invitation / creation...?
Quote from: Newby on November 08, 2005, 04:30 PM
Quote from: QwertyMonster on November 08, 2005, 12:41 PM
When Blizzard fix glitches, they just make more. Well they did last time. All those patches we went through! How exactly did somebody work this glitch out though? Funny, you must of been LOOKING for a glitch to-able to work it all out? I want to know how you exactly found out about it, whoever did.. :p
Probably using a bot and accidentally sent the invite as a Starcraft client, found that it didn't disconnect him outright (or maybe it did), and he wanted to see if it'd work if he finished the invitation / creation...?
Maybe. Well i hope Blizzard fix it and don't cause any MORE glitches. *sigh* :P
Quote from: Skywing on November 08, 2005, 10:35 AM
Quote from: rabbit on November 07, 2005, 05:18 PM
Skywing isn't really....."around".
Oh?
Yes. You check in every now and then, but you're not here every week making post(s) likes most of the other regulars.
Quote from: Joe on November 08, 2005, 04:26 PM
oh, yeah, well thats just newby =p
I realize that, which is why the question was directed at him and was about a comment he made.
Oh.
/target Joe
/slap
Quote from: Forged on November 09, 2005, 11:36 PM
Quote from: Joe on November 08, 2005, 04:26 PM
oh, yeah, well thats just newby =p
I realize that, which is why the question was directed at him and was about a comment he made.
Well, if you go on Battle.net, half the morons on it shouldn't be able to use a bot...
It would be nice if you had to have half a brain to use a bot.
Or to "program" one ;).
Quote from: Newby on November 10, 2005, 04:07 PM
Quote from: Forged on November 09, 2005, 11:36 PM
Quote from: Joe on November 08, 2005, 04:26 PM
oh, yeah, well thats just newby =p
I realize that, which is why the question was directed at him and was about a comment he made.
Well, if you go on Battle.net, half the morons on it shouldn't be able to use a bot...
It would be nice if you had to have half a brain to use a bot.
I have 8/16 of a brain, does that count?
Not that the majority of you who posted in this thread could write a battle.net bot if they so happened to patch stuff up and nobody realeased source code publically ::)
Quote
Well, if you go on Battle.net, half the morons on it shouldn't be able to use a bot...
It would be nice if you had to have half a brain to use a bot.
What's a bot?
;)
Off-topic
Quote from: Skywing on November 08, 2005, 10:35 AM
Quote from: rabbit on November 07, 2005, 05:18 PM
Skywing isn't really....."around".
Oh?
I can't help but notice that your last posts before today/yesterday (http://forum.valhallalegends.com/index.php?action=profile;u=2455;sa=showPosts) were quite a few months ago.
Hi Skywing! How're you? It's been a long time. Why haven't you replied to me on MSN? I left the conversation open for about a week hoping you'd catch me at some random time, and even tried sending you a message via your contact page (http://www.valhallalegends.com/skywing/SendMessage.html), but you never replied. :(
For all intents and purposes, I think rabbit was right.