SSO Exploitation

[Central]

At the minute, I'm in the process of 'fixing' the SSO Exploit that RevCMS has with its SSOTicketEvent.cs by using Sledmore's fix on the following thread:

You must be registered for see links

The dilemma I face is that when I adapt SSOTicketEvent.cs to the fix sledmore provided, it doesn't allow me to connect, though saying 1 user online. If I revert back to the Exploited SSOTicketEvent.cs it works? Does anyone know the fix for this?

 

[JynX]

Ensure your SSO is > 15 characters, if not, adjust the CMS to generate one that is.

 

[Joe]

At the minute, I'm in the process of 'fixing' the SSO Exploit that RevCMS has with its SSOTicketEvent.cs by using Sledmore's fix on the following thread:

You must be registered for see links

The dilemma I face is that when I adapt SSOTicketEvent.cs to the fix sledmore provided, it doesn't allow me to connect, though saying 1 user online. If I revert back to the Exploited SSOTicketEvent.cs it works? Does anyone know the fix for this?

All PlusEMU downloads (even R1) have this fix in the emulator, you’re not replacing the whole file with what he said are you? Just replace the class.

 

[ashe]

All PlusEMU downloads (even R1) have this fix in the emulator, you’re not replacing the whole file with what he said are you? Just replace the class.

Just the method is enough, hell even the conditional checks would do. Would be cool if OP could post his class though, so we could see what's going on.

if (sso.Length < 15)
    return;

I would suggest copying from

You must be registered for see links

to avoid any confusion. You don't need the null check since length would do that for you.

 

[Central]

All PlusEMU downloads (even R1) have this fix in the emulator, you’re not replacing the whole file with what he said are you? Just replace the class.

I did replace the class, it just never did anything. I'll try @ashe way and get back to you's.

Post automatically merged: Jun 10, 2019

Tried ashe's way and yet again, didn't work. Stuck on 76% and then said 3 users online.