Search found 11 matches

by dierighty
Sun Dec 09, 2012 1:10 am
Forum: Battlefield server and client
Topic: New crash exploit part III (17.11.2012)
Replies: 42
Views: 190825

Re: New crash exploit part III (17.11.2012)

Nice job, Grabbi on capturing those packets. From observing the wireshark the server normally updates the clients(@ 33Hz?) with a data packet of 212 bytes. In Grabbi's packet log, the server sends its last data packet, No. 5593, at time 10.119069. So I assume after this time the server has hung, and...
by dierighty
Thu Oct 27, 2011 1:49 am
Forum: Battlefield server and client
Topic: BF1942 Server Crash Exploit FIX - Updated executables HERE
Replies: 7
Views: 48571

Re: BF1942 Server Crash Exploit FIX - Updated executables HE

tekk, the patch was not given to me by the exploiters(whoever they are). Each server executable requires a different alteration to be crafted, because the sequence and location of the machine instructions that make up the executable and subsequently the handleGameEventManagerEvent() function are uni...
by dierighty
Thu Sep 15, 2011 2:36 am
Forum: Battlefield server and client
Topic: BF1942 Demo Server Crashes
Replies: 62
Views: 472137

Re: BF1942 Demo Server Crashes

This patch is for the newer version of the demo, v1.1 1.Modify before func.0048b410 [offset] [modified bytes] [instruction] 8b403 8b 45 04 mov eax,dword ptr[ebp+0x4] 8b406 83 f8 01 cmp eax,1 8b409 74 05 je 0048b410 8b40b eb 29 jmp 0048b436 2.Modify after func.0048b410 [offset] [modified bytes] [inst...
by dierighty
Thu Sep 15, 2011 1:11 am
Forum: Battlefield server and client
Topic: BF1942 Demo Server Crashes
Replies: 62
Views: 472137

Re: BF1942 Demo Server Crashes

Modification for the BF1942Demo.exe version 1.0 1. Modify before func.00485583 Offset Original Modified Instructions comments 85583 90 90 90 8B 45 04 mov eax,dword ptr[ebp+0x4] ;get the event # 85586 90 90 90 83 F8 01 cmp eax,1 ;is this createPlayer event at the expected event #? 85589 90 90 74 05 j...
by dierighty
Sat Sep 03, 2011 4:06 pm
Forum: Battlefield server and client
Topic: BF1942 Demo Server Crashes
Replies: 62
Views: 472137

Re: BF1942 Demo Server Crashes

The .text section for the dynamic 1.61 is different, as indicated by the result from the readelf command: From readelf -S bf1942_lnxded.dynamic: Section Headers: [Nr] Name Type Addr Off Size ES Flg Lk Inf Al [12] .text PROGBITS 08052ab0 00aab0 611480 00 AX 0 0 16 Here are the modifications to be mad...
by dierighty
Wed Aug 03, 2011 7:41 pm
Forum: Battlefield server and client
Topic: BF1942 Demo Server Crashes
Replies: 62
Views: 472137

Re: BF1942 Demo Server Crashes

Here is the modification of the patch for the older 1.6v windows version of BF1942_w32ded.exe. Detour: Original: Virtual_Addr File_Offset Bytes Instruction 0045A50F 0005A50F 8B 10 mov edx,[eax] Modified Virtual_Addr File_Offset Bytes Instruction 0045A50f 0005A50f EB 82 jmp Comparison: Original: Virt...
by dierighty
Sun Jul 31, 2011 12:28 am
Forum: Battlefield server and client
Topic: BF1942 Demo Server Crashes
Replies: 62
Views: 472137

Re: BF1942 Demo Server Crashes

Ah shoots, you are right the last byte needs to be changed to a 90 or nop instruction, I did this in my patches for testing, but forgot to put it in my post.
by dierighty
Sat Jul 30, 2011 11:27 pm
Forum: Battlefield server and client
Topic: BF1942 Demo Server Crashes
Replies: 62
Views: 472137

Re: BF1942 Demo Server Crashes

Here are the offsets to modify for the BF42 windows dedicated server, BF1942_w32ded.exe: Detour original: Virtual File Original Address Offset Bytes Instruction 0045a52f 5A52F 8B 10 mov edx,dword ptr[eax] Modified: Virtual File Modified Address Offset Bytes Instruction 0045a52f 5A52F EB 82 jmp 0045a...
by dierighty
Sat Jul 30, 2011 9:12 pm
Forum: Battlefield server and client
Topic: BF1942 Demo Server Crashes
Replies: 62
Views: 472137

Re: BF1942 Demo Server Crashes

Patched server link for the patched-rc2-full-version:
http://yehty.netii.net/dyryty/bf1942_ln ... tch.tar.gz
by dierighty
Sat Jul 30, 2011 8:57 pm
Forum: Battlefield server and client
Topic: BF1942 Demo Server Crashes
Replies: 62
Views: 472137

Re: BF1942 Demo Server Crashes

Here is the patched bf1942_lnxded.static, I used the bf1942_lnxded.static from the bf1942-update-1.61.tar.gz to (RC2). Here is a list of the md5sum's of b1942_lnxded.static for the various un-modified linux dedicated server versions: 1. Battleifled: 1942 v1.6 Full Server [Linux] RC1 6c6508aae7d61ab7...