+- SilabGarza - RuneScape Private Server (https://playsilab.com/forums)
+-- Forum: News (https://playsilab.com/forums/forumdisplay.php?fid=5)
+--- Forum: Announcements (https://playsilab.com/forums/forumdisplay.php?fid=26)
+---- Forum: OLD Updates (https://playsilab.com/forums/forumdisplay.php?fid=29)
+---- Thread: [URGENT] I'ma hack you. (/showthread.php?tid=75849)
[URGENT] I'ma hack you. - Pro Prayer - 10-28-2011
[COLOR="White"][SIZE="3"]
Ninjablood2 Wrote:Just a couple of things that appear incorrect in your post here Brittany. Starting things off, MD5 Hash is completely hackable, not even that hard either. Go up against a cracking application and you'll get destroyed. Salt is the only protection you'll have when applied with Hash. Encryption is nothing but a myth with the new scripts that can be run through ASM with a backend engine. Secondly, remove the command. Runescape runs with an OS/IOStream. Meaning commands are sent to the server through packets, if someone were to simply make a packet editor (BWE Updated for RS) they could duplicate or stimulate the packets used in that command. Just a warning.
Salt uses a special method known pretty simple as randomizing, the reason its considered secure is due to its ability to scramble the key put in place by your hash. Personally, seeing as you're not running your character files from a SQL based server and most likely have them placed in text files or an xml table file, the salt/hash/MD5 is built through a system of Java, making it extremely weak.
No doubt its a method in your characterSave file. Of course, Delta servers use a token algorithm on your characterSave, so you're secure until someone designs a script that simply copies the files and places them into a .jar that decrypts and "peppers" your salt protection. Pepper was designed shortly after reCAPTCHA was cracked by botting software.
Salt is considered "uncrackable" when used in a MySQL or MsSQL server format. Seeing as that's running through the SQL framework, it is uncrackable. Sorry if that was too confusing but just wanted to point out some evident flaws.
I was guna say something but all I can say is... True..... either way someone with enough experience can get it. Especially in md5. or they can SQLinject your website but idk if ur website would allow it i'm pretty sure your website is very well protected. anyways..... THANK YOU BRITTANY FOR FINALLY MAKING ALL THIS FOR PEOPLE WHO GIVE THERE PASSWORDS OUT!!!! IT'S SO EASY TO KEEP UR ACC SAFE PEOPLE!!!!!!!!!!!!!!!!!! FOLLO THIS PEEPS![/SIZE][/COLOR]
[URGENT] I'ma hack you. - Brittany - 10-28-2011
[SIZE="2"]
Ninjablood2 Wrote:Just a couple of things that appear incorrect in your post here Brittany. Starting things off, MD5 Hash is completely hackable, not even that hard either. Go up against a cracking application and you'll get destroyed. Salt is the only protection you'll have when applied with Hash. Encryption is nothing but a myth with the new scripts that can be run through ASM with a backend engine. Secondly, remove the command. Runescape runs with an OS/IOStream. Meaning commands are sent to the server through packets, if someone were to simply make a packet editor (BWE Updated for RS) they could duplicate or stimulate the packets used in that command. Just a warning.
Salt uses a special method known pretty simple as randomizing, the reason its considered secure is due to its ability to scramble the key put in place by your hash. Personally, seeing as you're not running your character files from a SQL based server and most likely have them placed in text files or an xml table file, the salt/hash/MD5 is built through a system of Java, making it extremely weak.
No doubt its a method in your characterSave file. Of course, Delta servers use a token algorithm on your characterSave, so you're secure until someone designs a script that simply copies the files and places them into a .jar that decrypts and "peppers" your salt protection. Pepper was designed shortly after reCAPTCHA was cracked by botting software.
Salt is considered "uncrackable" when used in a MySQL or MsSQL server format. Seeing as that's running through the SQL framework, it is uncrackable. Sorry if that was too confusing but just wanted to point out some evident flaws.
It's crackable if you have the salt and the keys for it, yah, but none of that can be gotten with out server files, as this thread was about being able to 'not get hacked with out files'
Idc if it's crackable outside of the RSPS world and I'm 100% sure it is, but in this situation, it's 100% not possible with out having access to the files it's stored in.[/SIZE]
[URGENT] I'ma hack you. - Ipklucas - 10-28-2011
sweet update!!!
[URGENT] I'ma hack you. - Brittany - 10-28-2011
[SIZE="2"]
Ipklucas Wrote:sweet update!!!
This thread's not even about updates. Enjoy those infractions.[/SIZE]
[URGENT] I'ma hack you. - Ashton - 10-28-2011
Bleh I still got hacked
[URGENT] I'ma hack you. - Blocks - 10-29-2011
how can i reset a password on the game? ::resetpass?
[URGENT] I'ma hack you. - Tee Rouze - 10-29-2011
[SIZE="1"]
Blocks Wrote:how can i reset a password on the game? ::resetpass?
If you're meaning change it then you go ::changepassword <newpasshere>[/SIZE]
[URGENT] I'ma hack you. - Rxrpure - 10-29-2011
Thanks Brittany
ill take this under consideration thanks for the heads up ill change my password
[URGENT] I'ma hack you. - Ninjablood2 - 10-31-2011
I suppose ignorance is bliss. You obviously don't understand how each movement is traced in Runescape. It's the way the playerUpdating method is setup. According to the last test I did, you still have animations on 0x80 and you're running 0x400 as a security method. A password isn't even turned to MD5 until its gone through a similar process as the playerUpdating method. "Outside of the RSPS world", sorry that made me laugh. When someone begins fucking with everything you have since you don't even have the sense to create a packet filter that accepts and declines certain packet patterns, than I'll be sitting and watching. You're still and always will be using Delta, which I'm going to assume is using the Netty networking system. Meaning I could just breach your source as a whole and have every accounts password sent via php to a storage system / trayLoading method before it even reaches the salt. It's how WinterLove is built and Delta uses the same algorithms.
Don't get all cranky. I was pointing out flaws.
[URGENT] I'ma hack you. - segosel - 11-04-2011
i love you brit ur so nice and kind keep it up :love: