Trinitycore: sniff password by niW.SUn

Created on 22 Mar 2017  路  5Comments  路  Source: TrinityCore/TrinityCore

hello.some one is sending packets like this to our server

0000: 45 00 00 54 00 26 40 00  71 06 c0 b8 02 b8 76 29  E..T.&@. q.....v)
0010: c0 a8 0f 3c 29 90 0e 8c  5b 75 e0 82 b8 cd c5 ca  ...<)... [u......
0020: 50 18 00 40 cb dc 00 00  00 08 28 00 57 6f 57 00  P..@.... ..(.WoW.
0030: 03 03 05 34 30 36 38 78  00 6e 69 57 00 53 55 6e  ...4068x .niW.SUn
0040: 65 d2 00 00 00 c0 a8 01  06 0a 4c 4f 53 54 50 52  e....... ..LOSTPR
0050: 49 45 53 54                                       IEST

and he/she is trying to login to a lot of accounts
he/she succeed and this accounts session key changed to this:
FFFF6666505044440D0D16165E5EA1A1F0F0CDCD4B4BC4C45C5CBCBC030351517C7CF2F22929E1E1

how this can happen!
that's a huge problem and there is not any security to any account
he/she can online with all account even administrators and gm one!

Most helpful comment

git pull

All 5 comments

This issue is not considered valid because of the following reasons:

  • No proper commit hash (revision)

Please read http://bit.ly/tc-issuetracker-and-you and add the missing information to this issue. Thanks.

stop using ancient cores, your bug was fixed already.

can u link the fix ?

git pull

my core is really old
and i cant update hole core now. it will really take time to convert data
but this problem is really seriously now
plz link the fix . to do that and i'll update core later
is this : https://github.com/TrinityCore/TrinityCore/commit/14abd1f5875d8c8e98ac9c76789d8b439008eba2

Was this page helpful?
0 / 5 - 0 ratings

Related issues

jerbookins picture jerbookins  路  3Comments

besplash picture besplash  路  3Comments

funjoker picture funjoker  路  3Comments

daddycaddy picture daddycaddy  路  3Comments

Tatara902 picture Tatara902  路  3Comments