Mangos 3.3.5 mechanics

[punked]

I have this hack for Mangos 3.3.5 private server that can control other people characters (only include moving, jumping, orientation and position of character)

In other words whatever i do with my character the 'victim' is mirroring

The question is can i use this hack to make the "victim" talk, dance, attack or interact with npcs

The problem is that i searched for articles on wow mechanics and i can't seem to find anything useful

[BoogieManTM]

You probably can't.

Just guessing, but it's likely that this hack is sending a SET_ACTIVE_MOVER packet with the target's GUID. this is giving you control of the movements _only_ and not the actual session of the target.

If this is the case, I'm pretty shocked mangos has not patched this yet.

[punked]

Actually the hack doesn't sends any packets at all...
There a gm command in mangos that does the same thing if i'm not mistaken

[BoogieManTM]

You sure about that? Just what exactly IS the hack doing, then?

[ddebug]

Actually the hack doesn't sends any packets at all...
There a gm command in mangos that does the same thing if i'm not mistaken

Then it is only client side. You must send information to the server for you to even think about "controlling" the other player. You are not directly connected to other clients. You send information to the server and then the server sends information to all the other clients regarding your state.

The MaNGOs "GM" command applies the "mind control" state to the target, authorizes it, and sends update packets to the connected clients in that area (so they see the unit as controlled). The affected client gets notified that they are possessed and therefore lose all movement to their character. I don't believe that your hack is capable of session hijacking or authorizing yourself to run GM commands.

[miceiken]

You sure about that? Just what exactly IS the hack doing, then?

Client-side visualization?

[punked]

no, so the hack is working it's not client side )
if anyone is interesting in making it i have the codes and stuff it's a memory thing

[DrakeFish]

Like ddebug said, it's probably only a simple hack modifying the "Current Controlled GUID" address. This is not hard to do, and WON'T allow you to talk, emote or to do anything else not related to movements. Just like you can't fully control your hunter pet using "Eyes of the beast" or when Mind Controlling a target as a priest.

The only good exploit I can think of using this, if Mangos really does allow it, is to control NPC's and send wanted spells with it, as long as the unit does have the spell in the mangos database (if that's how it works in Mangos, 'cause that's how it would work in Blizzard; when you mind-control a creature, you get a list of it's spells that you can cast).

I hope you understand a little better the way it works. If you do tell me that in Mangos for 3.3.5 you get a list of possible spells to cast when controlling a NPC(replacing your usual actions bar), then I could work on some kind of hack to control a unit and send the wanted listed spells. (Also try your hack on bosses if possible). There is also a possibility (it may not work, but let's try it), that this method will work with players, meaning you could control an in-range GM to kill another player/unit(if he has the death touch spell). With this method working, there would be a lot of possibilities, but yet those are all theories.

Edit: Can you also post the link of that hack here (or "code" like you said)?

[ddebug]

snip

Even if the possession state was modified, it would only be for the current player [client side]. The person you are "mind controlling" would not actually be mind controlled. You would just THINK he/she is mind controlled.

Emulators, like retail, have sessions associated with each connected socket (player). You won't be able to do anything without hijacking a session. The chance of someone "hijacking" a session is slim to none. I doubt MaNGOs would implement sessions incorrectly. Would be a pretty big bug to go unnoticed in years of development...

[DrakeFish]

Even if the possession state was modified, it would only be for the current player [client side]. The person you are "mind controlling" would not actually be mind controlled. You would just THINK he/she is mind controlled.

Emulators, like retail, have sessions associated with each connected socket (player). You won't be able to do anything without hijacking a session. The chance of someone "hijacking" a session is slim to none. I doubt MaNGOs would implement sessions incorrectly. Would be a pretty big bug to go unnoticed in years of development...

Like I explained, this wouldn't be called session hi-jacking. It would be something about sending your movement packets and everything saying you control another controlled unit, just like when you Mind Control someone. There's an address for this in memory, and it does work in retail. The proof that it does send different packets when using this is that in retail servers, you get disconnected when using it on an unauthorized GUID (unit). Of course we can't control someone else's session, but there is a possibility that developers didn't add a verification to see if you are really authorized to "possess" the specified unit.

They never checked if we were authorized to fly when we send flying movement packets, making it possible to just modify player movement state to fly and such things (it was the same with XYZ position before they started to check it). It's about the same thing, but for a different kind of packets.

[andy012345]

This is just the active mover changing, obviously. Chat and spells will probably still come from you.

He won't be able to fake any spell casts, because theres only one way of casting a spell that isn't your own, and thats sending the pet spell cast while you're using something like eyes of the beast, or if you're controlling a vehicle.

Obviously you don't send a guid of whos casting your spell since it's already broken up into 2 opcodes, one for yourself and one for your current pet (when you're controlling a vehicle, or mind controlling an NPC it's considered your pet).

As far as the "authorizing who we're possessing" theory goes, the server tells you who you're possessing with the update fields (for mind control on a player, it basically sets your farsight field to the person you're controlling, then tells you to change your active mover iirc, on a npc, it sets the npc's possessed by to you and sends you a pet spells packet).
There's no CMSG_IM_HACKING_THIS_GUYS_ACTIONS_NOW.

[punked]

thanks for all the replies ppl, indeed the hack is not hijacking a session, the hack is just about sending movement packets with changed GUID of another char, i haven't tried to control a npc yet, but DrakeFishe's idea about controlling a BOSS would be neat. i hope they won't fix it so fast