Jump to content

  •  

Bug Tracker Migration

June 3rd
Good news everyone! The staff has decided that it is time to slowly kill off this Bug Tracker. We will begin the process of slowly migrating from this Bug Tracker over to our Github Issues which can be found here: https://github.com/HerculesWS/Hercules/issues

Over the next couple of days, I will be closing off any opportunity to create new reports. However, I still will keep the opportunity to reply to existing Bug Reports. Doing this will allow us to slowly fix any bug reports we have listed here so that we can easily migrate over to our Issue Tracker.

Update - June 7th 2015: Creating new bug posts has been disabled. Please use our https://github.com/HerculesWS/Hercules/issues tracker to post bugs. Users are still able to reply to existing bug posts.

- Administration

Issue Information

  • #004139

  • 5 - Critical

  • Fixed

Issue Confirmations

  • Yes (0)No (0)
Photo

cash shop missing checks, infinite points exploit

Posted by Hercules Bot on 21 March 2010 - 11:50 AM

Originally posted by theultramage
http://www.eathena.w...er&showbug=4139

(partially copied from http://www.eathena.w...howtopic=242267)

happen on all revision
this spread in Thai's eAthena society for a while  

how to do this :

use wpe to send this packet when you open cashshop window
0x0288 <item id>.W <amount>.W <point>.L
CODE
8802 472F 0001 00000080


why :
eA's npc_cashshop_buy() function has overflow bug , when u send krafapoint value of (-MAX_INT) aka 0x80000
the value will gets overflow and bypass all if check and you will get MAX_INT cashpoint

This post has been edited by theultramage: Apr 17 2010, 03:17 AM