-
Authentication bypass exploits for 1.12.1, 2.4.3 and 3.3.5a servers
In early November of 2016, I privately disclosed to any private server developer who would listen to me two different authentication bypass issues. One was discovered by Chaosvex, the other by Daemon. A week or two later, I pushed public fixes for these issues to cmangos.
It is now the middle of March 2017 and some private servers have not fixed their servers. I have decided to release an open-source exploit for these issues. That exploit is here: GitHub - namreeb/wowned: Authentication bypass for outdated WoW emulation authentication servers
There are pre-compiled binaries for this exploit under 'Releases' here: Releases * namreeb/wowned * GitHub
Enjoy!
PS: Sorry mods for the cross-post, but I figured it was okay since this is an open source release too and relevant to this subforum.
Last edited by namreeb; 03-15-2017 at 05:03 PM.
Reason: fixed urls
-
Post Thanks / Like - 13 Thanks
tutrakan,
miceiken,
Ashoran,
jimmys96,
DarkLinux,
squiggy,
Natrist,
Teryaki,
adders,
culino2,
MrNoble,
Frosttall,
Valediction (13 members gave Thanks to namreeb for this useful post)
-
-
Member
C:\Users\Oxid\Desktop\123\bypassss>wowned.exe -c -p "D:\World Of Warcraft 3.3.5a
WOTLK\wow.exe" --1
wowned v0.3 injector
ERROR:
F:\APIs\hadesmem\include\memory\hadesmem/injector.hpp(185): Throw in function st
ruct HINSTANCE__ *__cdecl hadesmem::InjectDll(const class hadesmem::Process &,co
nst class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::
allocator<wchar_t> > &,unsigned int)
Dynamic exception type: class boost::exception_detail::clone_impl<class hadesmem
::Error>
std::exception::what: Unknown exception
[struct hadesmem::TagErrorCodeWinLast *] = 193
[struct hadesmem::TagErrorString *] = LoadLibraryExW failed.
..........
Test on 3.3.5 server
i dono how can fix this ...
F:\APIs\hadesmem\include..... i dont have any Drive like this .
Last edited by ffsoxid; 07-26-2018 at 02:42 AM.
-
That error code = ERROR_BAD_EXE_FORMAT. My guess is that you gave the wrong path to your executable. The "F:\" path is from my system when I compiled the binary that you're using.
-
Member
i did right path,i just copy wowned Files to my 3.3.5 wow Folder .i think i need Some program Like Visual C++ Redistributable Packages cuz i got missing MSVC120.DLL Errror but i did Install it . any Special . NET need? i use win 7 64bit
D:\335>wowned.exe -c -p "D:\335\WoW.exe" --2
wowned v0.3 injector
ERROR:
F:\APIs\hadesmem\include\memory\hadesmem/injector.hpp(185): Throw in function st
ruct HINSTANCE__ *__cdecl hadesmem::InjectDll(const class hadesmem::Process &,co
nst class std::basic_string<wchar_t,struct std::char_traits<wchar_t>,class std::
allocator<wchar_t> > &,unsigned int)
Dynamic exception type: class boost::exception_detail::clone_impl<class hadesmem
::Error>
std::exception::what: Unknown exception
[struct hadesmem::TagErrorCodeWinLast *] = 193
[struct hadesmem::TagErrorString *] = LoadLibraryExW failed.
Last edited by ffsoxid; 07-30-2018 at 02:18 AM.
-
The redistributable packages are indeed required, but if you still had a dependency issue the application would not run at all. It does not use .NET for anything. Actually, since ERROR_BAD_EXE_FORMAT is coming from LoadLibraryExW(), perhaps what it is failing to find is the DLL. Did you also copy the auth_bypass.dll into the same folder?
-
Member
yes auth_bypass, libcrypto-1_1, libssl-1_1, wowned.exe. all is here