CrushingRaid/SynGreis Candidate Thread

[crushingraid]

The reason I'm putting my name in here is because i have something that a lot others don't have. That is knowledge to help improve cabal to become less exploitable and become more resilient to hacking.

I have degrees in the following.

Computer Science.
Computer Programming(Advanced form of Science).
Engineering Technology.
Video Game Designing.
Computer Network Administration.
Web Technology Specialist.

I am adept in C#, C++, Assembly, PHP, SQL and home schooled in Cryptography.

I have hosted several private servers in my life such as Ragnarok Online, World of Warcraft, Lineage, Fiesta(briefly was a private server but project was cancelled). I also developed Control Panels for these games to interact with the game in order to broadcast live rankings and other relevant information.

I have developed my own full games. dark-warriors.net (http://dark-warriors.net) i helped develope the core engine and battle system. This is Text based but i wanted to show that the security of this site is top notch and there is checks for every single query and connection. I also worked on a small project of my own which is still in its infancy called Darkest of Sins 3D. This was the successor of my previous installment Darkest of Sins. the 3D project was to demonstrate the secure possibilities without the use of HackShield or GameGuard.

I feel that Cabal needs desperately to improve their measures in tackling the botting and hacking efforts.

I have personally circumvent GameGuard completely and so therefor I would concentrate on implementing a strategic method of code to help remove 95% of the current hacking methods that are used today, immediately. What Cabal is lacking today is unfortunately the integrity of its code and suffers from constant exploitation.

Rather then fully concentrating on in game skills and gear, I concentrate on the knowledge and inner workings of Cabal to understand what changes might have to be made to greatly improve the performance, integrity and above all the balance.

I will also addres a few concerns within the gameplay and other suggestions to help increase the enjoyment of Cabal for the community.

I feel that this is needed and since the developers will be present I think it is imperative that these security issues be addresses and to present a plan to help improve the stability of Cabal and greatly increase its performance and integrity.

Should XI come along for the trip, I will ensure to record the entire night of his drunken ways when he goes karaoke'iing.

I also do have a main account(free from usage of hacks) so I can do some pvping :)

This is NOT a troll.

[Sprite]

everyone just wants to see me drunk :(

[Valdoroth]

Dude, just apply to work for ESTsoft Inc. branch here in the US and create a new code for the security. Bet they'd pay nicely for a better security program that was more reliable than gameguard. :D

[crushingraid]

pfft f*** that sh*t. I want a free trip to Korea.

besides i don't feel safe in America. no offense but your cops got issues.

And I got my son to worry about so i cant be away for a prolonged period of time. and i highly doubt mama will move to America.

Plus, I want to personally meet the developers.

So, Val, do i got your vote or...

[DanteX]

so u did hack all those times when people acused u lol. didnt u deny it XD?

[Cathy]

everyone just wants to see me drunk :(

u azn it not like it hard to get you drunk

[DanteX]

lol^ stereotype :P

[crushingraid]

So.....Am I getting votes or....

[Cathy]

I'm voting for Chingu. I know XI popular enough to get voted for, even without my vote, so I know he'll end up going.

But I want to see Chingu and XI together :> bffs~

[DanteX]

LOL cathy cray XD

[crushingraid]

:(

*sigh*....I MUST PERSIST.

[Rambo]

Yes, you've got my vote.

[BigBoy]

Nerdddddddddddddddddddddddddddddddd

[crushingraid]

Those nerds are the ones who makes the games you play :)

[Cathy]

Those nerds are the ones who makes the games you play :)

If nerds who made games didn't exist, we'd all be less nerdy D:

[crushingraid]

Seriously. People don't want a more secure game that there concerned with personality and ego to go to korea?

[Lyro]

The damage is already done from hacking/alz exploits/game glitches. You can't undo time but u can fix it over time with a better security system.
I would like to see a better security system as well and at least your not going simply to show off to the world. If you running I'd vote for ya

[crushingraid]

Thanks.

I agree, damage is done, but i can help prevent further damage and possibly repair some damage and possibly restore faith and trust in the cabal community.

[Corvettezr1]

i'm voting for chingu. I know xi popular enough to get voted for, even without my vote, so i know he'll end up going.

But i want to see chingu and xi together :> bffs~

rofl

[crushingraid]

there is 6 spots to go.

Who else is voting o.0

[plzbuffme]

u azn it not like it hard to get you drunklol, normal korean work forces are forced to get -faced after work by their superior every day. anyone who's went to korea would be mind boggled at how high their tolerance is.

but then again, almost every country drinks more than amrika

[crushingraid]

back on top, anyone else agrees that security must be caught up?

[1337]

How do you plan to fix the security problems against third party programs (cheat engine) with a Q&A with the devs?
So your plan is to acknowledge them about how garbage there anti-cheat system is? that doesn't really fix it right...
and then what?
tell them the NA branch is doo doo?
tell them you can bypass gameguard ez?

[crushingraid]

Yes, and i will show them possible alternatives on how to stop them. Releasing how i bypassed it onto forums or anywhere like elitepvpers is just plain stupid.

Q&A can lead to other issues also. Such as "Hey i noticed your gameguard and code is pretty crappy, but heres a few ways we can improve upon it".

NA got it together compared to Indonesia, Europe, Philippines, but the majority of what i have in store is applicable in all regions.

Also the anticheat is not theirs. its simply a program that hooks onto it and prevents the client memory addresses from being tampered, and it monitors packet distribution so if your spamming no skill delay, they can view the GG logs by the .erls and say, hey this guy sent alot more packets then usual, lets go investigate them. Easy way to get around the .erl logs is to simply delete them and leave a script running to delete them every 10 seconds or so. So the developers or whoever has the administrative tools to view the erl files that periodically gets sent views nothing out of the ordinary.

So, Estsoft does not own GameGuard, they just add it as a cheat prevention system. So yes gameguard is sh!t, but its not estsofts fault. HackShield isnt even better. The problem relies in the flexibility and controls that is client side.\

If the developers know that one of my intention is to provide them possible alternatives to close exploits and prevent cheat systems, do you not think they will maybe set aside more time when they realize im not talking out of my ass?

[blazingturd]

actually its as simple as using EU's 64 bit version of gg. ya it can be bypassed but it doesn't take a genius of a gm to see who is using a bypass and who isn't. no one cares about na so don't expect them to actually give a shiit

[xvxURIZENxvx]

I'll vote for you crush...I'd throw my nomination up but it's typhoon season in KR so...HAVE FUN!!!!

[sn0wXz]

Yes, and i will show them possible alternatives on how to stop them. Releasing how i bypassed it onto forums or anywhere like elitepvpers is just plain stupid.

Not many anti cheats have the resources gameguard/punkbuster/hackshield have, there is a reason most games use them, as they are regularly updated. Anything released on epvp is released to developers/GMs anyway, they can view any exploit public for the game and decide what needs to be done from there accordingly.



Q&A can lead to other issues also. Such as "Hey i noticed your gameguard and code is pretty crappy, but heres a few ways we can improve upon it".


Gameguard is not coded by developers of EST, you can forward tips suggestions to INCA/nprotect without needing to Q&A developers about public methods of bypass they presumably already are aware of. They have always had access to all public exploits from the start, any change they make to the mechanics would probably have a direct result in gameplay changes in order to address the flaws in the game, like the aoe modifications, skill delay ect. There always has been and always will be exploits for any game, gameguard is to prevent this from occurring uncontrolled, once its bypassed all the modifications are result of exploiting mechanics and design flaws, you can't re-code the mechanics to prevent someone from exploiting game mechanics but just stay up to date on preventing them. They could dump GM debug address, but the packet AOE will still exist emulating the client sending the packet using the same ASM.....They could restrict AOE on skills via packets then when someone lags client->server they get d/c'd quicker by the new a/c function, lol. No skill delay could be better but a limit on how much spam does a decent enough job to prevent people from soloing things that regen/heal ect.




its simply a program that hooks onto it and prevents the client memory addresses from being tampered, and it monitors packet distribution so if your spamming no skill delay, they can view the GG logs by the .erls and say, hey this guy sent alot more packets then usual, lets go investigate them.


That was a pretty crude assumption, I'm not sure where your getting that information but its not nearly correct, the erl logs are not submitted in real time to inca, nor est "administrators", I know of plenty of accounts that exceeded the no skill delay spam intentionally forcing error codes, about 2-3,000 error codes and no ban and no not deleting .erl files every 10 seconds, Lol.... Most likely the player did something else to result in ban, most of the error codes are result of the server rejecting the packet, not gameguard detecting something wrong, once gameguard is fully bypassed you can verify this by still receiving error codes when doing certain things interacting with server. You could leave a character open spamming dcing doing CA all day or whatever, stay off top 10 board and be fine; change a item desc of a tit sword to voucher and attempt to use it with gg disabled, receive same rejected packet from the server and the account is flagged/banned pretty fast, probably sends error report to billing support although thats a crude assumption as well.

I was under the same impression until a close friend of mine proved me wrong sitting next to me, without any exploits just skill delay and modified bm2 dc'd for months str8 before we stopped playing, still not banned I checked after reading your paragraph, Lol. I sincerely doubt there is as direct of a correlation between delay spam and being banned. I still have not been able to verify that they are actually banning from the rejected packet. Gameguard doesn't have anything to do with the rejected packet from the server, it simply fails the logic algorithm.



Easy way to get around the .erl logs is to simply delete them and leave a script running to delete them every 10 seconds or so. So the developers or whoever has the administrative tools to view the erl files that periodically gets sent views nothing out of the ordinary.

Nobody needs to "get around .erl logs", These .erl logs are client sided, deleting them does not heighten chance of getting away with an exploit, it just erases any log gg has made about your computer, for your gg module. As GG constantly writes these logs, any pertinent data for flags or detections will not be solely stored in .erl logs on the client computer.

Overall I think developers know what can/should be done to clean up the exploits area, just a simple browse in epvp will let them know all of the public user exploits, its like here patch this and that if you want type forum I guess. No I don't really think they would dump GG which is a relatively affective anti cheat for some unknown ac, because no ac is perfect it makes sense to stay with gg and just patch exploits on the client builds, no matter what AC is used, they will still have bots ect after someone unpacks/debugs the new protections...

[crushingraid]

elitepvpers isnt the only site that deals with hacks.

"Q&A can lead to other issues also. Such as "Hey i noticed your gameguard and code is pretty crappy, but heres a few ways we can improve upon it".

notice the AND here.

your friend not being banned maybe just a lucky draw as they accidentally skimmed through it. i had a few accounts that was spamming nsd also for months never got banned. took a break came back spammed it once got the ban hammer.

even if they remove the gm address completely, aoe will still exist and it will always e found a way to hack aoe and increase its range. for example skills.enc just increase its aoe range and there you go, voila you just bypassed gm address completely.

Since ep9 unpacking was increasingly more difficult, finding the proper addresses was a bit delayed. But the main problem is the enc files. perhaps they should develope a randomizing XOR key so it will never be the same. lineage developed this prior to teh step of storing everything server side.

files with gameguard send regular reports to gameguard and estsoft relating to packet use and other similar possible intrusions. .erl files is the consolidations and holds indexes to those errors, hence why they look at .erl files. I spoke to nprotect by email and they notified me the way gameguard works limited to that since i was putting the impression i was developing my own game and was looking into gameguard and asked how gameguard works.

spamming bm2 fa and getting d/c doesnt always mean you will get banned. if you do it in dungeons or cas and dont hit top 10, you can stay safe. but gms has tools for other things such as fast leveling. if you go from 1-100 in less then 24 hours they may investigate.

like i said back in some of my posts, gameguard is not the issue, the coding is. once gameguard is bypassed completely people can wreck havoc. its even worse if they can remove the disconnection flags.

i agree no matter what anticheat is used there will always be bots. but it can be greatly reduced.

[1337]

Not many anti cheats have the resources gameguard/punkbuster/hackshield have, there is a reason most games use them, as they are regularly updated. Anything released on epvp is released to developers/GMs anyway, they can view any exploit public for the game and decide what needs to be done from there accordingly.



Gameguard is not coded by developers of EST, you can forward tips suggestions to INCA/nprotect without needing to Q&A developers about public methods of bypass they presumably already are aware of. They have always had access to all public exploits from the start, any change they make to the mechanics would probably have a direct result in gameplay changes in order to address the flaws in the game, like the aoe modifications, skill delay ect. There always has been and always will be exploits for any game, gameguard is to prevent this from occurring uncontrolled, once its bypassed all the modifications are result of exploiting mechanics and design flaws, you can't re-code the mechanics to prevent someone from exploiting game mechanics but just stay up to date on preventing them. They could dump GM debug address, but the packet AOE will still exist emulating the client sending the packet using the same ASM.....They could restrict AOE on skills via packets then when someone lags client->server they get d/c'd quicker by the new a/c function, lol. No skill delay could be better but a limit on how much spam does a decent enough job to prevent people from soloing things that regen/heal ect.




That was a pretty crude assumption, I'm not sure where your getting that information but its not nearly correct, the erl logs are not submitted in real time to inca, nor est "administrators", I know of plenty of accounts that exceeded the no skill delay spam intentionally forcing error codes, about 2-3,000 error codes and no ban and no not deleting .erl files every 10 seconds, Lol.... Most likely the player did something else to result in ban, most of the error codes are result of the server rejecting the packet, not gameguard detecting something wrong, once gameguard is fully bypassed you can verify this by still receiving error codes when doing certain things interacting with server. You could leave a character open spamming dcing doing CA all day or whatever, stay off top 10 board and be fine; change a item desc of a tit sword to voucher and attempt to use it with gg disabled, receive same rejected packet from the server and the account is flagged/banned pretty fast, probably sends error report to billing support although thats a crude assumption as well.

I was under the same impression until a close friend of mine proved me wrong sitting next to me, without any exploits just skill delay and modified bm2 dc'd for months str8 before we stopped playing, still not banned I checked after reading your paragraph, Lol. I sincerely doubt there is as direct of a correlation between delay spam and being banned. I still have not been able to verify that they are actually banning from the rejected packet. Gameguard doesn't have anything to do with the rejected packet from the server, it simply fails the logic algorithm.



Nobody needs to "get around .erl logs", These .erl logs are client sided, deleting them does not heighten chance of getting away with an exploit, it just erases any log gg has made about your computer, for your gg module. As GG constantly writes these logs, any pertinent data for flags or detections will not be solely stored in .erl logs on the client computer.

Overall I think developers know what can/should be done to clean up the exploits area, just a simple browse in epvp will let them know all of the public user exploits, its like here patch this and that if you want type forum I guess. No I don't really think they would dump GG which is a relatively affective anti cheat for some unknown ac, because no ac is perfect it makes sense to stay with gg and just patch exploits on the client builds, no matter what AC is used, they will still have bots ect after someone unpacks/debugs the new protections...



If we wanted to send a real hacker with the best knowledge, we would send sn0wXz :)

[crushingraid]

what has snow done lately?

all his info comes from elitepvpers.

[crushingraid]

vid uploaded.

http://www.youtube.com/watch?v=qkRt-cAXS6g&feature=channel&list=UL

[crushingraid]

*bumpin it up*