Sending fake bluff flags to server menu

Shout-Out

User Tag List

Results 1 to 14 of 14
  1. #1
    LogicWin's Avatar Master Sergeant
    Reputation
    51
    Join Date
    Mar 2011
    Posts
    103
    Thanks G/R
    4/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    Sending fake bluff flags to server

    Hello, I'm here with a few questions regarding how WoW's server-system works.
    What I'm trying to do is to create a new speed-hack method.

    1. Is it possible to "create" an object/item by sending a packet that contains the required information for an object.
    The purpose with that is too be-able to send back the correct info with a packet that says "PLAYER has used <GUIDOfAObject>"

    2. If so is it possible to just send a packet with the data of the player using a speed-up potion?

    Basically I'm trying to ask is: Is it possible to send a fake packet to the server with the necessary data for creating a "PLAYER got benefit from <potionGUID>"

    PLEASE DON'T RESPOND AT ALL IF YOU ARE HERE TO FLAME

    The only reason that I'm asking this is because i don't want to waste any time with something that some-other person has already tried.

    Sending fake bluff flags to server
  2. #2
    TOM_RUS's Avatar Legendary
    Reputation
    914
    Join Date
    May 2008
    Posts
    699
    Thanks G/R
    0/52
    Trade Feedback
    0 (0%)
    Mentioned
    1 Post(s)
    Tagged
    0 Thread(s)
    Do you really think server is stupid enough to not check if you really have that speed-up potion you want to fake?

  3. #3
    DarkLinux's Avatar Former Staff
    CoreCoins Purchaser Authenticator enabled
    Reputation
    1627
    Join Date
    May 2010
    Posts
    1,846
    Thanks G/R
    193/539
    Trade Feedback
    16 (100%)
    Mentioned
    7 Post(s)
    Tagged
    0 Thread(s)
    That does not even work on private servers anymore... A speed hack will always exist, until they do a server side if((x1 - x2)/time > 310speed)
    Last edited by DarkLinux; 07-14-2011 at 12:37 PM.

  4. #4
    LogicWin's Avatar Master Sergeant
    Reputation
    51
    Join Date
    Mar 2011
    Posts
    103
    Thanks G/R
    4/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Thanks for the response but I didn't mean the "USE" effect, i meant ( the red text)
    [CLIENT] Player uses the potion XXX -> [SERVER] HavePotion? if so delete potion XXX -> [CLIENT] APPROVED -> Sending a packet to the server that I got a new bluff

  5. #5
    Frosttall's Avatar Active Member
    Reputation
    64
    Join Date
    Feb 2011
    Posts
    261
    Thanks G/R
    16/3
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by LogicWin View Post
    Thanks for the response but I didn't mean the "USE" effect, i meant ( the red text)
    [CLIENT] Player uses the potion XXX -> [SERVER] HavePotion? if so delete potion XXX -> [CLIENT] APPROVED -> Sending a packet to the server that I got a new bluff
    But the server tells the client, that he has the buff.

    It would be stupid, if the client sends the server, that he has a buff xD

  6. #6
    Jadd's Avatar 🐸 Premium Seller
    Reputation
    1515
    Join Date
    May 2008
    Posts
    2,433
    Thanks G/R
    81/336
    Trade Feedback
    1 (100%)
    Mentioned
    2 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by DarkLinux View Post
    That does not even work on private servers anymore... A speed hack will always exist, until they do a server side if((x1 - x2)/time > 310speed)
    Blizzard's track record indicates that next expansion says we're all going to be flying at 4000% with an instant cast mount anyways.

  7. #7
    sitnspinlock's Avatar Elite User CoreCoins Purchaser
    Reputation
    398
    Join Date
    Sep 2010
    Posts
    439
    Thanks G/R
    0/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    lul #1 rule of client <-> server communication. never trust the client

  8. #8
    lanman92's Avatar Active Member
    Reputation
    50
    Join Date
    Mar 2007
    Posts
    1,033
    Thanks G/R
    0/1
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    According to Unknowned's most recent post in the Screenshot Thread, Blizzard is trusting the client for a lot more things than they should. Not to draw any conclusions, but what the OP wants may be possible.

  9. #9
    suicidity's Avatar Contributor
    Reputation
    207
    Join Date
    Oct 2006
    Posts
    1,439
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    It's possible to keep a buff from being removed once it was applied for client side effect ( The rogue's sprint ability was known for this, common method by just limiting your packet flow ), but it being effective is purely situational.


  10. #10
    LogicWin's Avatar Master Sergeant
    Reputation
    51
    Join Date
    Mar 2011
    Posts
    103
    Thanks G/R
    4/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by suicidity View Post
    It's possible to keep a buff from being removed once it was applied for client side effect ( The rogue's sprint ability was known for this, common method by just limiting your packet flow ), but it being effective is purely situational.
    THIS is what im talking about, to fake that you still have the buff on you that will provide speed increase etc.

  11. #11
    TOM_RUS's Avatar Legendary
    Reputation
    914
    Join Date
    May 2008
    Posts
    699
    Thanks G/R
    0/52
    Trade Feedback
    0 (0%)
    Mentioned
    1 Post(s)
    Tagged
    0 Thread(s)
    Actually, buff has nothing to do with your speed. Speed change is completely different packets from server.

  12. #12
    andy012345's Avatar Active Member
    Reputation
    59
    Join Date
    Oct 2007
    Posts
    124
    Thanks G/R
    0/7
    Trade Feedback
    1 (100%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    The sprint thing is simply because you limited the rate of packets and the new speed sync wasn't recieved for a while. I mean, everyone that plays official should even know the speed changes are server side, thats why when you lag with your ghost world crap you can fly around like a tit. Although, blizzard did basically do a complete rewrite on movement in 4.2, so that might not be the case anymore
    lul #1 rule of client server communication. never trust the client
    Completely true, and blizzard do that for everything, except movement which would cause too much overhead trying to verify. They let warden crush anyone modifying things they trust the client with.

  13. #13
    Cypher's Avatar Kynox's Sister's Pimp
    Reputation
    1358
    Join Date
    Apr 2006
    Posts
    5,368
    Thanks G/R
    0/6
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by andy012345 View Post
    The sprint thing is simply because you limited the rate of packets and the new speed sync wasn't recieved for a while. I mean, everyone that plays official should even know the speed changes are server side, thats why when you lag with your ghost world crap you can fly around like a tit. Although, blizzard did basically do a complete rewrite on movement in 4.2, so that might not be the case anymore Completely true, and blizzard do that for everything, except movement which would cause too much overhead trying to verify. They let warden crush anyone modifying things they trust the client with.
    Hah, you think Warden crushes people. How cute. You must be new here.

  14. #14
    suicidity's Avatar Contributor
    Reputation
    207
    Join Date
    Oct 2006
    Posts
    1,439
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Cypher View Post
    Hah, you think Warden crushes people. How cute. You must be new here.
    Odd, I was thinking the exact same thing when I read his post.


Similar Threads

  1. Sending Fake Keystrokes to a Window in C#
    By luciferc in forum Programming
    Replies: 8
    Last Post: 01-11-2009, 05:01 PM
  2. Worst that can happen with Sending Fake ID
    By Mask in forum World of Warcraft General
    Replies: 10
    Last Post: 07-13-2008, 01:18 PM
All times are GMT -5. The time now is 02:59 PM. Powered by vBulletin® Version 4.2.3
Copyright © 2025 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Google Authenticator verification provided by Two-Factor Authentication (Free) - vBulletin Mods & Addons Copyright © 2025 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search