Authentication bypass exploits for 1.12.1, 2.4.3 and 3.3.5a servers

[namreeb]

In early November of 2016, I privately disclosed to any private server developer who would listen to me two different authentication bypass issues. One was discovered by Chaosvex, the other by Daemon. A week or two later, I pushed public fixes for these issues to cmangos.

It is now the middle of March 2017 and some private servers have not fixed their servers. I have decided to release an open-source exploit for these issues. That exploit is here: GitHub - namreeb/wowned: Authentication bypass for outdated WoW emulation authentication servers

There are pre-compiled binaries for this exploit under 'Releases' here: Releases * namreeb/wowned * GitHub

Enjoy!

PS: Sorry mods for the cross-post, but I figured it was okay since this is an open source release too and relevant to this subforum.

[namreeb]

Updated to include support for Cataclysm: Release 0.3 Cataclysm support * namreeb/wowned * GitHub

[ffsoxid]

C:\Users\Oxid\Desktop\123\bypassss>wowned.exe -c -p "D:\World Of Warcraft 3.3.5a
WOTLK\wow.exe" --1
wowned v0.3 injector

ERROR:
F:\APIs\hadesmem\include\memory\hadesmem/injector.hpp(185): Throw in function st
ruct HINSTANCE__ *__cdecl hadesmem::InjectDll(const class hadesmem::Process &,co
nst class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::
allocator<wchar_t> > &,unsigned int)
Dynamic exception type: class boost::exception_detail::clone_impl<class hadesmem
::Error>
std::exception::what: Unknown exception
[struct hadesmem::TagErrorCodeWinLast *] = 193
[struct hadesmem::TagErrorString *] = LoadLibraryExW failed.



..........
Test on 3.3.5 server
i dono how can fix this ...
F:\APIs\hadesmem\include..... i dont have any Drive like this .

[namreeb]

That error code = ERROR_BAD_EXE_FORMAT. My guess is that you gave the wrong path to your executable. The "F:\" path is from my system when I compiled the binary that you're using.

[ffsoxid]

i did right path,i just copy wowned Files to my 3.3.5 wow Folder .i think i need Some program Like Visual C++ Redistributable Packages cuz i got missing MSVC120.DLL Errror but i did Install it . any Special . NET need? i use win 7 64bit






D:\335>wowned.exe -c -p "D:\335\WoW.exe" --2
wowned v0.3 injector

ERROR:
F:\APIs\hadesmem\include\memory\hadesmem/injector.hpp(185): Throw in function st
ruct HINSTANCE__ *__cdecl hadesmem::InjectDll(const class hadesmem::Process &,co
nst class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::
allocator<wchar_t> > &,unsigned int)
Dynamic exception type: class boost::exception_detail::clone_impl<class hadesmem
::Error>
std::exception::what: Unknown exception
[struct hadesmem::TagErrorCodeWinLast *] = 193
[struct hadesmem::TagErrorString *] = LoadLibraryExW failed.

[namreeb]

The redistributable packages are indeed required, but if you still had a dependency issue the application would not run at all. It does not use .NET for anything. Actually, since ERROR_BAD_EXE_FORMAT is coming from LoadLibraryExW(), perhaps what it is failing to find is the DLL. Did you also copy the auth_bypass.dll into the same folder?

[ffsoxid]

yes auth_bypass, libcrypto-1_1, libssl-1_1, wowned.exe. all is here