[Theory] How to connect to hidden live servers (Still in the works)

[superfly_]

Might be onto something.. :P

[Falconfira]

Basically this is data packet manipulation. You go to the PTR page and select the realm/character you want to use for the experiment. Then after selecting a test realm as the destination, you to change the targetrealmID to suit your taste and you recieve the message shown then when you confirm the desicion, it doesn't work.

With that in mind I can determine that the server has the entire list of realms available in the PTR directory; so it is no surprise that you are able to see lich king as the destination. The problem lies in the actually transfering of the character. When you click confirm the website then sends a 'copy' request, different than a 'transfer' request, to access a control server (a server which controls tranfers and the like). This could say something along the lines of "copy XXX character from dunemaul to lich king (obviously it would use the realm ID number and not the name)" The control server would recognize this as an illegal action and halt the operation referencing a list of realms and seeing the destination server for the 'copy' command being submitted doesn't match the list of acceptable realms.

The only possiblity that I could see having a remote chance of working is using the final confirm as a denial of service attack hoping that the control server becomes overwhelmed and completes the transfer and doesn't shutdown. Of course then you would be screwed anyways, being logged in, they would know who just slapped them.

So I don't think this is ever going to be possible if it is setup the way I stated, I have no idea if it is, I just know thats how I would setup my system.

[hams]

Thanks for adding to the discussion!
Yeah, that's what I was thinking it would be along the lines of, or it could be the fact that it denies the operation because it doesn't have the rights to go the the destination realm. I don't know, just a hope and a possible chance.

I mean I gave it a good 2 hours fiddling around seeing what I could find but cant find something of any relevance tbh. No one has tried with the tournament thing then trying I take it?

Yeah thanks again and keep posting people!

[hal9k2]

I think there is no someting like control server that is checking if you can transfer or not, I think rather there is something like each server have seting that allows or denide makeing transfers.

So example if our uber Lich King server have that seting on denide in his database then transfer will make error and will be unable to complet.

Sorry for may english, hope you understand what iam talking.

[hams]

Yeah I get you mate, thing is... we could all be wrong and all servers are transferable you just have to get everything set up right as if it was a payed character transfer. I mean the fields for the PTR transfer and the payed one are completely different. If it was tried through that way maybe.

I don't know, starting to think we never will unless some Blizz employee comes feeling in the mood to **** them all over tells us how. Or someone who just generally knows this shit!

[Falconfira]

In regards to a control server I am simply saying that is how I would set it up. That way you can have a central place to set parameters like locked server and such. Also it is much more efficent when you want to make changes such as the opening of the ghostlands server on the US servers. Go into the Control server and add it to the list and allow tranfers to this server from all others for a monetary value of 0 dollars. If this this is not that case then each server has its own listof accepts and denies, and in the case of a new server you would have to add it to 248 different server (last time I counted that was the US realms list count).

Similarly if you have a server center for your business it is much more effecient cost wise to simply have one box and run Virtual Machine which would create any number of servers on one box rather than going out and buying a bunch of different boxes.

All about customer service and the least amount of lag/downtime as possible. Also you could look at it from the angle of a control server would need access to payments, credit cards, etc. Better to have that in one location then a multitude of locations. The last thing you would want on your hands is identity theft to deal with, and the lawsuit against you that would insue; and with 10 million or more account open that is A LOT of sensitive information being handled.

twocents

[Disphotic]

It would be interesting to try this when the PTR starts. Usually at the start, its overwhelmed. However, Blizzard probably know about this now already, and are looking into it.

[Darkcow153]

Does anyone know what these Target fields are? Most of the other fields are self explanatory (Realm, Character ID, etc), but I'm not quite sure what to make of the Target fields.

What i'm talking about is these:

_page = page number? Not sure
movingCharacterGuid = character ID
sourceRealmID = the realm ID
_target2.x = ???
_target2.y = ???

Perhaps these fields are relevant to our interests?

[Aboogabooga]

First thing that came to mind was target server or target account. I think this is exploitable. What if we compared this to the real character transfer?

Does anyone know what these Target fields are? Most of the other fields are self explanatory (Realm, Character ID, etc), but I'm not quite sure what to make of the Target fields.

What i'm talking about is these:

_page = page number? Not sure
movingCharacterGuid = character ID
sourceRealmID = the realm ID
_target2.x = ???
_target2.y = ???

Perhaps these fields are relevant to our interests?

[Maliciousone1]

seems interesting

[hi675]

While interesting, I can see little use as Blizzard seems to have already figured this out and put a transfer available or unavailable tag on servers, so unless it has something to do with the x and y tags, it's just a fun trick.

[BlazerDL]

Keeping working on it, could be good

[aqwe12]

ohhh rlly nice how did u get that pron on ur taskbar? i've been trying that exploit forever

[hams]

how did u get that pron on ur taskbar? i've been trying that exploit forever

I R 3p1c H4XX0RZ!!!111one11eleven!

[aqwe12]

Does anyone the realm id for the US one? I tried it and it cam up wiht a ()=not a vaild realm