Warden on private servers, does it update?

[popinman322]

I was wondering whether or not server owners have the capability to add bannable process info to their servers.

Is it possible to update such information, or is it all on the client? If it is updateable, to what degree? (e.g. can I add process names and/or hashes?)

[DaigonoYouso]

I think that warden is blizzard only antihack, not available on private servers, however some servers have it's own antihack

[popinman322]

Recently certain servers have been accessing Warden to catch players with progs open, like Molten. The only way they could be doing that is if they have a Warden module server-side.

Also, I saw a thread which insinuated MANGOS had such a module. :/

[DaigonoYouso]

Recently certain servers have been accessing Warden to catch players with progs open, like Molten. The only way they could be doing that is if they have a Warden module server-side.

Also, I saw a thread which insinuated MANGOS had such a module. :/

actually that's not warden but their own antihack afaik since warden is server-based (I think) and i highly doubt that blizzard would let it go on private servers because of hacks and bots that would be always modified to not be catched by warden

[Corthezz]

What the hell are you talking Wodan? No sentence you wrote makes any sense.
https://github.com/tomrus88/mangos_warden
Warden System for Trinity - Help and Support - TrinityCore
Warden Failed Checks - What Does It Mean? - Help and Support - TrinityCore

Warden is a module which gets streamed to the client. Its just like the server part emulated.

[DaigonoYouso]

What the hell are you talking Wodan? No sentence you wrote makes any sense.
https://github.com/tomrus88/mangos_warden
Warden System for Trinity - Help and Support - TrinityCore
Warden Failed Checks - What Does It Mean? - Help and Support - TrinityCore

Warden is a module which gets streamed to the client. Its just like the server part emulated.

so you want to tell me that private servers are using blizzard's warden? bullshit, if so then it would be impossible for blizzard to catch any hacker/botter

[Thunderofnl]

so you want to tell me that private servers are using blizzard's warden? bullshit, if so then it would be impossible for blizzard to catch any hacker/botter

This is quite incorrect. Since all private servers are lower then Blizzard's WoW there really is no issue with that.
Also, we already know what Warden is scanning for and blizzard knows that.

The EMU version of Warden and the Blizz version of Warden are different (on the server side) because as you might know nobody has access to WoW's original source code so what does an emu do? They replicate what warden does. But they could be completely wrong and use it in a different way that blizz does.

[popinman322]

They replicate what warden does. But they could be completely wrong and use it in a different way that blizz does.

Which is evident in the fact that they seemingly have access to passive scans. :/ (Scanning for background processes before they interfere with WoW)

[Corthezz]

so you want to tell me that private servers are using blizzard's warden? bullshit, if so then it would be impossible for blizzard to catch any hacker/botter

What the heck are you talking? I really cant follow your logic.
The Warden devs do the same every emulator developer is doing. They guess what the serverpart is doing and try to replicate it. I never said in any sentence that privat servers use blizzard's warden ffs.

You really make no sense. Its like saying private servers are using blizzards server files to run the project.
The warden used on private server is just an emulated version like for example an PSX emulator.

Emulated like an authentication server of a bot you want to use. You sniff the traffic between the WoW bot and the authentication server and based on that you build a software for the serverside which can accept and process the packets send by the bot. Finally you redirect the traffic of the WoW bot to the server your emulated auth program is running instead of the original.
This step is equal with redirecting WoW's traffic to some other location by changing the realmlist. The emulator is in this case our rebuild authentication program.

I dont get what you dont understand here and now ffs stfu.

[DaigonoYouso]

What the heck are you talking? I really cant follow your logic.
The Warden devs do the same every emulator developer is doing. They guess what the serverpart is doing and try to replicate it. I never said in any sentence that privat servers use blizzard's warden ffs.

You really make no sense. Its like saying private servers are using blizzards server files to run the project.
The warden used on private server is just an emulated version like for example an PSX emulator.

Emulated like an authentication server of a bot you want to use. You sniff the traffic between the WoW bot and the authentication server and based on that you build a software for the serverside which can accept and process the packets send by the bot. Finally you redirect the traffic of the WoW bot to the server your emulated auth program is running instead of the original.
This step is equal with redirecting WoW's traffic to some other location by changing the realmlist. The emulator is in this case our rebuild authentication program.

I dont get what you dont understand here and now ffs stfu.

what you dont understand

^this killed it

from what you said it looks like u have no idea what I meant

[parranoia]

Yes, it's very possible to update and add new checks to warden.

[stoneharry]

Yes, it's very possible to update and add new checks to warden.

This. And you can stream custom modules you create, but the client will discard custom modules unless you disable a RSA signature check in the client with a modified wow binary.

[namreeb]

This. And you can stream custom modules you create, but the client will discard custom modules unless you disable a RSA signature check in the client with a modified wow binary.

Sorry to necro this, but it's actually possible to disable this RSA signature check by sending a certain packet from the server which does not have proper sanity checking in the client, and exploit a small arbitrary code execution.

[Harambeqt]

Check the warden git repo. You won't get a better answer here.

edit; trinity repo* or w/e emulator the server is running on.

[Master674]

Sorry to necro this, but it's actually possible to disable this RSA signature check by sending a certain packet from the server which does not have proper sanity checking in the client, and exploit a small arbitrary code execution.

You'd better not get into details here :S

+rep for finding out