TarikMS [still working on name]

ok i made my own private server
it isnt done yet but i will let people play on it
here are some screenies






lol that was just a joke

Henesys


Orbis


Aqua


ok i dont want to put any more screenies just join

Things needed
-Hamachi - http://www.download.com/LogMeIn-Hamachi/3000-2651_4-10605260.html?cdlpid=10785910
-TarikMS- http://rapidshare.com/files/105951901/TarikMS.zip.html

Tut:
-put the GGAserver in your maplestory map

-put the Startup on desktop
-right click on startup click "bewerken"(dutch windows) its the 2nd option from above
-then fill in ur path of GGAserver (should look like this start *:\*\*\GGAServer.exe 5.145.39.44 8484) * = ur path

-install hamachi andstart it
- then click the triangular shaped button on hamachi
- Name = new hamachi (contact me to get it)
- Pass = new hamachi (contact me to get it)

it should be working if the server is UP

http://5.209.90.218/yourms/index.php <<<< register site

Okay done all that, tell the nib how to get onto it xD. Do i double click the game or what? Telll me more!

The server's off now.
It's great.

lol, not a very good screenie to begin with, its where i will send you if you want other hair + face.

going to sleep now

EDIT: ah you added some more
i think i need to pump your HP a bit, but we will see tommorow

GM's!!!!

i like killing zakum

the hands have eyes

is the GGAserver thing, do you put in the maplestory server? and put it in the map section?

hope it goes well mate.

Correct me if Im wrong, but your timing is impeccable, but have you just done what the thousands of others are doing atm and just using the newly released sources of various Private Servers? Im not saying its wrong or criticising you, just that it may be a piece of piss to create a PS now.. but when Nexon carries on updating real GMS its going to be hard to update yours, unless you rely on people leaking more stuff. Its kinda depressing on CEF atm seeing how many people think they are good and 1337 because they can make a PS, whent he only reason they can do it is because they are copying someone elses source code. Glad you aren't acting like that mate!

Either way I dont have time for TarikMS atm, although if you need a hand with any coding Ill try my best to be there. KiMS is going slow. KiKi is getting alot of shit for KiPE being leaked and abused so he doesnt really feel like logging on much.. however!! VMS is going great, Beta testing is in progress and coding is going really amazing, we have autosave on each map at last which save logging out to save.

I suggest you try and get off of hamachi asap as it makes things more difficult in the long run. Also are your monster drops only coded for lower level monsters and a few bosses (griffey) or have you sorted them?

This should be good as we can help each other out with problems :3

edit: you didnt include credits

Notice: Btw Tarik I wouldnt go around advertising this much like most of the other servers, unless you move to Sweden or Holland has the same intrusion law pass as Sweden. Memory editing is illegal. Private server making is illegal. Guess which is worse. Just giving you a heads up.

Important Update: You better not be using any TitanMS source;

x0r wrote:Today on IRC we decided to take a look at the TitanMS source code, within two minutes we found a stack overflow exploit which can easily crash any server and allow a would-be hacker to run code on the servers, allowing them to take control of any computer hosting TitanMS.

You've been warned.

In MapleStory strings are structured with a size prefix which indicates the string length, then followed by the string. Example:

Code:

0004 "PENIS"

In TitanMS the maximum buffer size is just over 2.5kb, so you can send and receive that much data in one packet theoretically.
MapleStory usernames and passwords can be a maximum of 15 characters each, in TitanMS there is no checking to see if each are 15 characters or less. Here is how it is done:

Code:

#define MAX_FIELD_SIZE 15

...

   int usersize = getShort(packet);
   int passsize = getShort(packet+usersize+2);
   char username[MAX_FIELD_SIZE], password[MAX_FIELD_SIZE];
   getString(packet+2, usersize, username); 
   getString(packet+4+usersize, passsize, password);

...

void getString(unsigned char* buf, int len, char* out){
   strncpy_s(out, len+1, (const char*)buf, len);
}

So this being said, since the username & password variables are both local, you could easily overflow the stack and do one of the following:

1. Destroy the stack, causing the program's integrity to falter & consequentially force it to crash.
2. Find a return point from a call and redirect it to shell code for which to execute.

I won't say how to cause the stack overflow but if someone was to do it and spend a bit of time, it would be very easy to manufacture an implementation that would not only allow them to execute any code they wished but it could also give them access to the databases if implemented correctly, which would expose everyone's passwords.

x0r wrote:

V1ral wrote:Looks easily fixable.

Sure, doesn't change the fact that I've found another 5 exploits though.

I have a problem this happens whenever i double click on my character

sorry , but your account crashed
just make another character , and delete that one

i had the same problem
just make another character

Will anything bad happen if i upload those files from those internets, if no, i wud like to play on it =P

no nothing is gonna happen

Your acc crashed because you logged off with too many equips, ask Tarik and he can sort it, you lose all your equips though >.<

SkitzoTamz wrote:Your acc crashed because you logged off with too many equips, ask Tarik and he can sort it, you lose all your equips though >.<

what he said

U Sure?

i reset everything and im using the odinMS source now
it should be more stable now, i changed some things in my first post

and i am a smexy god on this world