Reply to thread

Message

<blockquote data-quote="SOUL" data-source="post: 406381" data-attributes="member: 64122">Howdy,The global variable &quot;PlusEnvironment.SWFRevision&quot; displays your hotel's current revision&nbsp; on the &quot;about command&quot; and users can send a new string to the server which replaces the SWF Revision string. It isn't the biggest exploit although didn't get much attention.Tested it on Peace and a few others quite surprised they haven't patched it yet , will leave this here simply for proof not going to post more as it's nothing to gloat about..<img src="http://image.prntscr.com/image/3987674f0b0d415b93e0d23615ca66ad.png" alt="" class="fr-fic fr-dii fr-draggable " style="" />Here's the fix<ul>
<li data-xf-list-type="ul">Locate the file 'GetClientVersionEvent.cs' -Communication &gt; Packets &gt; Incoming &gt; Handshake</li>
<li data-xf-list-type="ul">Replace the class content with the code below.</li>
</ul>[SPOILER=&quot;Code&quot;]using Plus.HabboHotel.GameClients;using Plus.Communication.Packets.Incoming;namespace Plus.Communication.Packets.Incoming.Handshake{&nbsp;&nbsp; public class GetClientVersionEvent : IPacketEvent&nbsp;&nbsp; {&nbsp; &nbsp; &nbsp;&nbsp; public void Parse(GameClient Session, ClientPacket Packet)&nbsp; &nbsp; &nbsp;&nbsp; {&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; string Build = Packet.PopString();&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; if (!Build.ToLower().StartsWith(&quot;production&quot;))&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; return;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; Session.SWFRevision = Build;&nbsp; &nbsp; &nbsp;&nbsp; }&nbsp;&nbsp; }}[/SPOILER]<ul>
<li data-xf-list-type="ul">Locate file &quot;GameClient.cs&quot; - HabboHotel &gt; GameClients</li>
<li data-xf-list-type="ul">Find &quot;private readonly int _id;&quot; (at top) and above it, add the code:</li>
</ul>[SPOILER=&quot;Code&quot;]internal string SWFRevision { get; set; }[/SPOILER]<ul>
<li data-xf-list-type="ul">Save the file.</li>
<li data-xf-list-type="ul">Locate the file &quot;InfoCommand.cs&quot; - HabboHotel &gt; Rooms &gt; Chat &gt; Commands &gt; User</li>
<li data-xf-list-type="ul">Search for</li>
</ul>[SPOILER=&quot;Code&quot;]PlusEnvironment.SWFRevision[/SPOILER]<ul>
<li data-xf-list-type="ul">Replace with</li>
</ul>[SPOILER=&quot;Code&quot;]Session.SWFRevision[/SPOILER]Or you could just remove it as showing your revision isn't necessary but that's down to you.</blockquote>

[QUOTE="SOUL, post: 406381, member: 64122"] Howdy, The global variable "PlusEnvironment.SWFRevision" displays your hotel's current revision on the "about command" and users can send a new string to the server which replaces the SWF Revision string. It isn't the biggest exploit although didn't get much attention. Tested it on Peace and a few others quite surprised they haven't patched it yet , will leave this here simply for proof not going to post more as it's nothing to gloat about.. [IMG]http://image.prntscr.com/image/3987674f0b0d415b93e0d23615ca66ad.png[/IMG] Here's the fix [LIST] [*]Locate the file 'GetClientVersionEvent.cs' -[B]Communication > Packets > Incoming > Handshake[/B] [*]Replace the class content with the code below. [/LIST] [SPOILER="Code"] using Plus.HabboHotel.GameClients;using Plus.Communication.Packets.Incoming; namespace Plus.Communication.Packets.Incoming.Handshake { public class GetClientVersionEvent : IPacketEvent { public void Parse(GameClient Session, ClientPacket Packet) { string Build = Packet.PopString(); if (!Build.ToLower().StartsWith("production")) return; Session.SWFRevision = Build; } } } [/SPOILER] [LIST] [*]Locate file "GameClient.cs" - [B]HabboHotel > GameClients[/B] [*]Find "private readonly int _id;" (at top) and above it, add the code: [/LIST] [SPOILER="Code"] internal string SWFRevision { get; set; } [/SPOILER] [LIST] [*]Save the file. [*]Locate the file "InfoCommand.cs" - [B]HabboHotel > Rooms > Chat > Commands > User[/B] [*]Search for [/LIST] [SPOILER="Code"] PlusEnvironment.SWFRevision [/SPOILER] [LIST] [*]Replace with [/LIST] [SPOILER="Code"] Session.SWFRevision [/SPOILER] Or you could just remove it as showing your revision isn't necessary but that's down to you. [/QUOTE]

Verification

Reply to thread

Connect with us

Newest members