item or runes dupping

[C3PO]

Hello,

I see the last days often messages in World Chat where small characters offers cheap runes grad X, and asked myself is it possible again to duplicate items?

[Hidden]

Looking at the forums it was but they have fixed it again now

[SmemE]

There are people who worked in the way I do not know the updates coming the same old way benefit the note updated my 5

[Ego95]

Anyone know, what the dupe was? In the german forum gameforge writes they had to take the gashas out of the item shop because there was an exploit. Because I never buy gashas I don't know what was in there? Does anyone know?

AlterEgo95

[BlubBlab]

First sry alterego I doesn't play ROM anymore so I didn't answered to you PM's

I know too like most of the board readers that this hack is going on and it's much more than a dupe.
The whole Item is manipulated in the process. I was curious so I searched and didn't find anything and wondering about it because I heard they spawned links where you can find the hack in the worldchat of different servers.

In the past very often the hacks where found here too but this time don't seem so.

[McGuffin]

Current theory is the hack is actually the creation of a GM character. From there they can spawn anything. So they are apparently not duping anything but just creating it, and NPCs, from the GM menu. Latest from GF says they are concentrating on CE though I don't know what good that is going to do them. If someone can manipulate the client memory to create a GM character on the server then there would appear to be some serious security holes between client and server. Which does not bode well for the game as I am not sure they have the talent to fix it.

[lisa]

Nice theory except that just having a GM character won't give you the GM menu to be able to do things, GM's don't have the same client that we use. So to add to the theory they would need to get a hold of the programme that GM's use, which is of course possible considering how many "unofficial" servers there are.

[BlubBlab]

Or they used client DB manipulation and the system has no sanity check at all.(I did figure it out but didn't tested it)
Either ways its a huge hole in the system if that possible. I read that the GF and Runewalker tried to stop them with a patch but it looks like they failed.

[Ego95]

I just bursted Hoson down to 18% in bethomia hm with a tank and a heal
Tomorrow we'll get him

[kenzu38]

This. I've also seen some chars in my server recently selling these hacked items. Like Exp Charms that give 10M exp. Of course, when I pmed them they didn't tell me how they're getting it.

But yeah, I made my own private server long ago and have an idea of what GM chars can do. It seems it's along those lines that they're creating these hacked items.

[Nobodyknows]

I saw a video that detailed how the hack worked. But never tried it since going back through the DB they could probably easily figure out who was doing this and ban them.

You needed CheatEngine in order to do it.

You took an item, usually something cheap and disposable, found it's value in memory via CE, then sold it to a NPC. You would modify some values on that item via CE and then bought it back from the NPC. Hacked item with extra stats and/or runes on it. If you added runes to the item you could remove them and then sell the runes. If you added stats you could puri them and put them on other equipment or sell the stone. Trial and error to see what values did what to an item but with some experimenting some people must have figured out how to add particular runes or stats.

I guess something similar to that was used to dupe diamonds and/or gold along with changing the stats on gear to give people crazy amount of HP, Physical Attack, etc.

But the loophole that existed, basically the game not checking the item to see if it's changed when the player buys it back from the NPC, has been fixed.

[Lamkefyned]

http://www.solarstrike.net/phpBB3/viewt ... =21&t=5053