Jump to content

Check Server Vulnerability Messenger - SQL Injection


Recommended Posts

  • Premium

M2 Download Center

This is the hidden content, please
( Internal )

Hello devs!

 

I've found this tutorial on another Metin2Forum(doesn't matter which one, I'M NOT THE ORIGINAL POSTER) !

I think it can be userful for peoples which use diffs to fix this vulnerability and they don't know sure if the diff works or not.

 

Spoiler

085317messengerinjection.png.58aa4eb089a

 

How to do ?

1.Download this python DLL (see in your client if it's using 2.2 or 2.7):

Python22

Python27

 

2. Log in to navicat, database player and after press 'CTRL+Q':

Paste this code and click 'RUN'

Spoiler

DROP TABLE IF EXISTS `test`;
CREATE TABLE `test` (
  `name` varchar(255) NOT NULL,
  PRIMARY KEY (`name`)
) ;

INSERT INTO `test` VALUES ('A');
INSERT INTO `test` VALUES ('Caso');
INSERT INTO `test` VALUES ('Parole');
INSERT INTO `test` VALUES ('Scrivendo');
INSERT INTO `test` VALUES ('Sto');

 3.Login to client with anny account(isn't necessary to be GM) and you will see this noticebox:

Spoiler

085317dll-injected.png.b045583032ef08e8e

4. Press F9 and will see these mesages:

Spoiler

085317injection-complete.png.83e3d81d480

 

 

Spoiler

085317feedback.png.74da2e80e38964afd6f47

 

6. Now Login again to Navicat , database player and open table test. If that table it's empty(don't have anny record) your server was succesfully injected, so you are still vulnerable.

 

Hope it works for all of you !

 

Edited by FlorinMarian
  • Metin2 Dev 11
  • Dislove 1
  • Angry 2
  • Good 9
  • Love 2
  • Love 15
Link to comment
Share on other sites

  • 1 year later...
  • 3 years later...
  • 2 months later...

Announcements



  • Similar Content

  • Activity

    1. 2

      Feeding game source to LLM

    2. 0

      Target Information System

    3. 2

      Feeding game source to LLM

    4. 2

      anti exp explanation pls

    5. 2

      Feeding game source to LLM

    6. 2

      anti exp explanation pls

    7. 0

      [GR2] Positioning an object added with "Attach"

  • Recently Browsing

    • No registered users viewing this page.
×
×
  • Create New...

Important Information

Terms of Use / Privacy Policy / Guidelines / We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.