How to monitor Warden Private Server?

[Alex__]

reference:
https://www.ownedcore.com/forums/wor...er-script.html (Warden Private Server Script)

[namreeb]

By monitoring it.

[Alex__]

By monitoring it.

Do you know how to do it? Feel free to share what you know.

[DarkLinux]

https://www.ownedcore.com/forums/wor...ml#post3827053 (Warden Private Server Script)

That's how you can monitor it. it's really straightforward with basic reversing/coding knowledge.

[namreeb]

Do you know how to do it? Feel free to share what you know.

Yes. I would suggest you read the rules. Asking broad sweeping questions is not permitted here. Do the work yourself, and if you have specific questions you can come back here and ask them.

[Alex__]

"It is easy for me" is not helpful in any way.
How he got Lua strings from 5.4.8.18414 private server warden?

[namreeb]

"It is easy for me" is not helpful in any way.
How he got Lua strings from 5.4.8.18414 private server warden?

I don't know who "he" is, but the way I would do that is to hook the MOP Lua execution warden check. There is a check which takes two parameters from the server: the code to execute and the name of a variable to return the value of afterwards. If you find this function and hook it you'll be able to see what it's doing.

[Alex__]

Okay, I found how to see their Lua - breakpoint to lua execute worked.

[Alex__]

If someone found this topic and is still interested how to do it, there are old posts on this forum (4 years or older), with more info how to do it.

[maikel233]

If someone found this topic and is still interested how to do it, there are old posts on this forum (4 years or older), with more info how to do it.

Forum link?

[Alex__]

There are few posts. Like these
wor...tial-code.html
wor...r-hooking.html
https://www.ownedcore.com/forums/wor...ml#post1937717
Maybe more. I used google to find them.

[danwins]

warden in 18414 still has a static pointer chain that can be used to find the module.

fairly sure it is(note: not rebased):

00CE897C  s_moduleInterface

it should point to the header of the warden module which will be marked with "BLL2" if its not some custom warden module.