Tree of Savior Forum

Exploit Hidden Frames

Isn’t xenophobia worst than “hue” things?

1 Like

Truth.

The “xenophobia” you called, I call “experience” instead.

1 Like

So you’ve played with the entire Brazil and collected data from every single player. Nice job being that kind of person c:

You don’t need to act like that to everyone just like I don’t need to act like this to you, to your family or to people of you country just because I didn’t like what you or your friends said or did. Or should I? o:

2 Likes

The majority is what induces one’s thought about something.
If you see that 3 of 5 apples are edible, you will think “most of them are good”.

The majority is not what you have interacted with. Even if every person in this beta was from brazil, they would represent less than 0.05 of that country’s population.

So… tone it down a little. You met some jerks online. Gabin knows how uncommon that is, right?

1 Like

Regardless we shouldn’t be able to pull up any menu in game just by entering hot key commands. But someone who knows how to use hot keys to bring up these menu’s could easily find a work around to the ipf encryption modification. In archeage this is possible by loading changes to LUA files before the game fully loads to get around modification checks. But aside from that being able to open a shop allows people to sell items remotely and the system lagged allowing me to sell the same item multible times which means that there’s also problems with the way items get removed from your inventory and the character server. This could also be related to people losing items on the auction house as well. The loss of items might not actually be losses it could be people buying items with 0 funds just before the auction crashes. Because if the auction is all database wise the items should still be backed up in the database. Its not intended to allow bots to open a shop and remotely sell items they pick up. It would make the whole going over weight system obsolete and support people doing illegal things. Aside from being able to understand LUA to a certain degree because of archeage I also ran a private server for ragnarok online for 11 years and know how ragnarok’s LUA system works as well not to mention handled the programming aspects and hexing. I used to do translations for eathena and rathena some of the hex level translations I provided as patches are still used today even though I quit messing with ragnarok 3 years ago so I could just enjoy games instead of make them into jobs that don’t pay.

3 Likes

It does have a check sum but I’m not sure if it’s client side or server side. It would nice if it were server side that sends the check to the server and the server validates it…but, hackers can still edit packets and that doesn’t stop them from reading whats in compressed files. Of course this brings up another problem of having a lua system. The Lua System is suppose to make everything easy for the publisher or GM, but it comes with a big cost of others being able to “take advantage” by reading the scripts and finding ways to executing commands. I guess (I really don’t know), in Japan or Korea, it’s kind of trusted so these things don’t happen?
I can say an anti-cheat system will cause more problems, esp if it has a “heart beat” system, it will disconnect people a lot just because the server didn’t get a quick reply and there’s no real way to know if the server got that packet or not. There might be some sort of hick up on the client side so the client wasn’t able to send it causing the disconnection.
I hope IMC will not consider an anti-cheat program to solve this problem because it will just create more problems for the players.

The lua system isn’t supposed to matter if the program is designed correctly. How to design it such that the player couldn’t abuse it though, is another story.

1 Like

I guess it’s kind of the inverse, 0.05 is way too low compared to the reality.
Also, this is not the place to discuss about that.

If you want to talk about numbers I ask you to:

  1. Do a research on the percentage of players of age 16 or less in Brazil who do cheat.
  2. Do a research on the percentage of players of age 16 or less outside Brazil who do cheat.
  3. Do a research on the percentage of players of age 21 or more in Brazil who do cheat.
  4. Do a research on the percentage of players of age 21 or more outside Brazil who do cheat.

Otherwise I can just say that you’re being xenophobic as the most part of the people who say these things are being xenophobic. c:

By the way, from what people said other servers were abusing the exploit more than the people in the LA server.

About the topic, there’s no use on using check sums or anything like that. It’ll just stop people for some time because you can find ways to inject code into these types of things. You need to use a real anti-cheat system, be it detection or prevention.

It shouldn’t ever keep the files the way they were because now people have some code reference that might have useful data for them. But it’s already done. I hope there will be a good encryption system on the future just to make it something that doesn’t worth breaking.

I call you ignorant, no one cares about age rateo, but the fact.
Unless the peoples of my own country proves me the inverse of what I think,
I will keep thinking the same thing.

No. I call you ignorant for what you said first. Age ratio does affect how people interact with the ambient. You’re just attacking me and everyone from Brazil, which of course I can just ignore as it doesn’t apply to me but people like you create a worst image than the reality can be. I do not want that.

Where are you from?

@Topic: Wasn’t there an anti-cheat system already?

1 Like

I does not need to cause a bad image about brazillians,
automatically there is a brazillian or more doing that right now
in-game or in another game or forum.

Also, I am Brazillian aswell.

So I think you should try at least do something to not be the same kind of person as the ones you are referring… I won’t continue this thing as it’s bad for the forum, good bye c:

I does not, just mentioned.
And you are right, this kind of discussion sucks.
Bye.

yeah, it should had be a problem. but when you introduce scripting, you introduce a way to inject commands no matter how you secure it and it is a problem with C++ because you could inject code as well.

it’s hard because if there is no Lua System then the C++ program would have to do most of the work, unless there are some who know what to do, but again the Lua is there for those who know Lua and can program in Lua without having to know C++ code or assembly.

I didn’t want this to turn into a lets blame brazil war for cheating. Just so you guys know I’m not from brazil I’m a white american who has a little bit too much time on his hands and knows how to take things apart. While I know often times people love to blame brazil players for everything because there’s just a lot of hate between them. This bug, exploit w/e you like to call it came from america. Yes I understand I have skoll in my name and thats also a beer from brazil but its also a mythological creature from norse mythology a wolf that chases the sun to cause the change from day to night.

If you want my opinion about how they should go about fixing it. Using a lua system for the client isn’t a horrible thing as long as its done the right way. Meaning things like skill cooldown’s timers and such like that should be completely server side. Anything that leaves formula’s client side will open the door for modification. Unfortunately it doesnt matter how they are encrypted because anyone who wants to decrypt lua files will do it. It’s completely impossible to make them completely not visible because they still have to load into the memory at some point which they can be dumped directly from memory as well.

Hackshield, gameguard and punkbuster all of these anti-hack programs are obsolete hackshield gave up service on there software this year so that ones done. gameguard theres a complete extractor on the internet to unpack and modify that one not to mention it doesn’t work with windows 10 users properly they have more problems then they should. Punkbusters used in very few games but the ones it is used in still have hacks that are active. If a anti-hack program is going to be used it has to be custom. It can’t be open source or purchasable because even your hackers are going to buy it. It’s a waste of your money to invest in a program that isn’t really going to stop or warn of hacking. And in all honesty tree of savior should be going with a custom software that detects and then notify’s for bans which should be done as hardware bans for cpu since spoofing cpu hwid can cause damage to the CPU. Harddrive bans I can get around, Network card bans I can get around easily. I wouldn’t dare mess with a CPU ban personally cause it’s not worth the risk. Its better to not give them an opportunity to hack all the client side should just not allow the user to abuse anything. All the server side needs proper checks in place to make sure the user can’t post items to the auction and force crash the game to dupe. Or speed up packets in order to teleport or speed hack.

I think they are just troll trying to gain attention for themselves, I think. I just ignore them.

It’s nice to have a community that know how to find these exploits but the trolls are just too much for me, even if I do ignore them.

Actually the C++ executable generated is just a plain executable. The main problem here is that you can inject custom code (as with any language on any executable format, be it C#, Java, C++, Delphi, Flash or so).

The best solution is to leave everything important server-side. Also, I do think it’s kinda easy to spoof the CPU check in the given process if you know what you are doing. Server-side hack detection is also possible and kind of reliable depending on the checks.

1 Like

Nice find.#

Hope it gets quashed.

Still funky about the +40 equips… and tele hacks.
Can’t see that as legit xD.