Post: #1

Hello,
I've discovered that some of our players uses scripts to detect status of any npc in world, so they can easy check if any npc's have lower HP or if its alive. So it gives them information that somebody is here and they can go kill them ... for example YokoInjection command: uo.GetHp(NAME_OF_OBJECT) and you see its HP anywhere in world no matter how far u are.

Do you have any idea how to detect these commands from client-side?

MB how to see exact packets from client?

Thank you.

Post: #2

You can download the injection tool and SpyUO, use both in your client, connect to your server, use the uo.GetHp() command and monitor the SpyUO screen for the specific packet that queries the server about the specified mobile.

Lets say it is packet 0x34 (which i think it is), go to your sphere.ini, use the "PACKET34=f_packet_34" filter, find the UID and check the distance between the player who sent the packet and the target UID, if they are farther than 14 tiles then block the packet request.

You can also open an issue on the SphereX Github as this can be seen as an exploit

Post: #3

(08-08-2022 05:28 AM)Feeh Wrote:  You can download the injection tool and SpyUO, use both in your client, connect to your server, use the uo.GetHp() command and monitor the SpyUO screen for the specific packet that queries the server about the specified mobile.

Lets say it is packet 0x34 (which i think it is), go to your sphere.ini, use the "PACKET34=f_packet_34" filter, find the UID and check the distance between the player who sent the packet and the target UID, if they are farther than 14 tiles then block the packet request.

You can also open an issue on the SphereX Github as this can be seen as an exploit

Unfortunately he is using so old Sphere that he said its not able to work with packets.

Post: #4

test test