Adding Existing Chars To Any Account

Jaap · Post by **Jaap** » Wed Dec 07, 2005 1:59 pm

Dax wrote:
Jaap wrote: I suspect Ice-T to have used that hack in order to create a GM07 characer.
Nope. What you saw from Ice-T is a mainlogserver hack.

Ok. Cool.
I'm going to investigate some more then!

Ice-T · Post by **Ice-T** » Wed Dec 07, 2005 5:31 pm

yeh that GM07 is a gm on hb bf 49 or w/e i just stole it and put it on my acc

Slayer · Post by **Slayer** » Wed Dec 07, 2005 5:39 pm

plxlearn teh slaya noobie this 1337 haxies

Jaap · Post by **Jaap** » Wed Dec 07, 2005 6:27 pm

NeukenInDeKeuken wrote: plxlearn teh slaya noobie this 1337 haxies

My approach was this:

I connect a "worldserver" to the mainlogserver. As you all know, you can specify a worldserver name of up to 30 characters. You can specify this in the WLServer.cfg.

Now, because the account files are parsed exactly like configuration files (and all other plain text files for that matter) -> the file gets split into tokens with the seperators " " (space) "=" (equals-to) "\t" (tab) and "\n" or "\r" (both end-of-line chars).
I figured out that if you include these in the worldserver name, and you request to create a character on the worldserver: the character name is stored in the account file like this:

account-character-WORLDSERVERNAME = CHARACTERNAME

So imagine the worldserver name being: "=a account-password "
then suddenly the line above changes to:

account-character-=a account-password = CHARACTERNAME

where that space is exactly the same as an ENTER key (they are both seperators, so it doesnt matter).

Maybe Ice-T did it differently. I'm curious how he did it though.

Jaap · Post by **Jaap** » Wed Dec 07, 2005 6:33 pm

Oh I forgot to mention that to add chars to your account, just use the same worldservername as the target server plus a space (or any other seperator). That way, once the character is created, it gets created on the fake worldserver, but it gets written to the one and only account file correctly. That way the character appears in the accountdata on the target server.
Example:

HB Slayers has worldserver name "MtW"
You attach your worldserver to HB Slayer's MLserver and name it "MtW " (note the space).

Then you create a character on it (such as GM1) and it gets saved in the account file with the seperator:

account-character-MtW = GM1

As you can see, the extra space doesn't matter once its in the account file.

Slayer · Post by **Slayer** » Wed Dec 07, 2005 9:17 pm

bone-you · Post by **bone-you** » Thu Dec 08, 2005 2:52 am

Congrats on your progress. ^^

Ice-T · Post by **Ice-T** » Thu Dec 08, 2005 12:12 pm

hum that packet you are manipulating is called ACCOUNTINFOCHANGE the ML server sends a create character request to the WL then the WL server sends a packet to the mainlog server to notify that it has sucsessfully created once it sends this packet then the ML will update the account info
this is the packet im currently playing with
but my way of editing accounts was to just edit the create account packet

RageIlluminati · Post by **RageIlluminati** » Thu Dec 08, 2005 1:04 pm

mhm.. would it be hard to convert this hack to work on SQL files? :blink:

EDIT: then I wish you good luck.. and I hope.. you get this hack work.. and release it to whole world for free:-D

Ice-T · Post by **Ice-T** » Thu Dec 08, 2005 1:24 pm

it wouldent work with sql, because when u make an acc/char they arnt linked to eathother in the same way as .txt like txt links via/ names sql links with automaticly assigned numbers in the db

Jaap · Post by **Jaap** » Thu Dec 08, 2005 2:34 pm

Ice-T wrote: hum that packet you are manipulating is called ACCOUNTINFOCHANGE the ML server sends a create character request to the WL then the WL server sends a packet to the mainlog server to notify that it has sucsessfully created once it sends this packet then the ML will update the account info
this is the packet im currently playing with
but my way of editing accounts was to just edit the create account packet

That's exactly the packet I'm talking about.
The packet contains 1) Charname 2) Accountname and 3) Worldservername
Not even a password required!!

James! · Post by **James!** » Thu Dec 08, 2005 6:53 pm

Ice-T · Post by **Ice-T** » Thu Dec 08, 2005 7:07 pm

omg what i would give to know what i know now 3 years ago..

Ice-T · Post by **Ice-T** » Thu Dec 08, 2005 7:54 pm

Jaap wrote:
Ice-T wrote: hum that packet you are manipulating is called ACCOUNTINFOCHANGE the ML server sends a create character request to the WL then the WL server sends a packet to the mainlog server to notify that it has sucsessfully created once it sends this packet then the ML will update the account info
this is the packet im currently playing with
but my way of editing accounts was to just edit the create account packet
That's exactly the packet I'm talking about.
The packet contains 1) Charname 2) Accountname and 3) Worldservername
Not even a password required!!

hum i think there is more info sent, as the packet is 103 bytes/ (106) with enc key i know
charname is sent as 10 bytes
account name is 10 bytes
world server is sent as 30 bytes
+ 7 for packet headers

that makes it.. 57 (60 with enc key) so it is sending some other info.. just gotta work out what

Slayer · Post by **Slayer** » Thu Dec 08, 2005 7:55 pm

Ice-T wrote:
Jaap wrote:
Ice-T wrote: hum that packet you are manipulating is called ACCOUNTINFOCHANGE the ML server sends a create character request to the WL then the WL server sends a packet to the mainlog server to notify that it has sucsessfully created once it sends this packet then the ML will update the account info
this is the packet im currently playing with
but my way of editing accounts was to just edit the create account packet
That's exactly the packet I'm talking about.
The packet contains 1) Charname 2) Accountname and 3) Worldservername
Not even a password required!!
hum i think there is more info sent, as the packet is 103 bytes/ (106) with enc key i know
charname is sent as 10 bytes
account name is 10 bytes
world server is sent as 30 bytes
+ 7 for packet headers

that makes it.. 57 (60 with enc key) so it is sending some other info.. just gotta work out what

*prays it's a cookie!*