Old Glitches and Exploits

fgarvin

fgarvin

Jungle Guide

Join Date: Sep 2005

I'm sure that they've all been patched, so I'm not too concerned about talking about them now.

How they were done interests me, but how they were discovered/uncovered interests me much more. (I'm not interested in dublicating them)

The Mallyx exploit.
Disconnecting the opposing team in PvP.
~15 members in one party.
And the infamous Armbrace dupe trick.

I've read all of the old posts, but they're mostly full of speculation and have very little in the way of actual fact.

Mostly, I'm curious to find out how they discovered the Mallyx exploit.

slowerpoke

slowerpoke

Desert Nomad

Join Date: Jul 2007

Cuba

i think alot of the exploits are from folks analysing the network traffic between the game client and the server, and figuring out what packets cause certain actions.

isnt there also a project working on creating some sort of server client via reverse engineering. no doubt they figured out some things too.

jiggles

Desert Nomad

Join Date: Sep 2007

N/

No one is going to explain how they are done because they might give the wrong people the wrong idea's.

fgarvin

fgarvin

Jungle Guide

Join Date: Sep 2005

Quote:
Originally Posted by jiggles View Post
No one is going to explain how they are done because they might give the wrong people the wrong idea's.
That's fine, whatever, but if you read my post, you'll see that I'm more interested in how these glitches were discovered, not how they were done.

For example: Did the Armbrace dupe happen by accident when two players were trading, or did someone go out of their way to figure out a way to trickf*ck the game?

And all the "wrong idea's" in the world won't matter if the game has been patched, which I'm sure that it has.

Neo Nugget

Neo Nugget

Site Contributor

Join Date: Jan 2006

R/

pre searing GH glitch which I heard had to do with a bug in observer mode when it first came out.Then theres that glitch with the ambassador in the GH that could take people anywhere.

Didn't they call the HoS chest run and the Urgoz vampire farm an exploit when they fixed them? Can't remember....

All fixed ages ago.

Big_Daddy

Big_Daddy

Lion's Arch Merchant

Join Date: Apr 2006

The Big Daddy Experience [BigD]

N/Mo

You know? I've asked myself the same question, but I tend to keep it to myself since it is a very thin ice of a subject to deal with. If not handled properly the thread can get out of hand.

Jiao Yang

Jiao Yang

Lunar Rabbit

Join Date: Dec 2005

Most glitches are discovered by accident, or people are inspired by similar problems in other games. The disconnect dupe hack would be an example of this.

Aubrey

Aubrey

Ascalonian Squire

Join Date: Oct 2005

Minneapolis, MN (USA)

Hero's Alliance [HERO]

W/Rt

Curiosity killed the game. Hax are hax and should not be identified for the general public. People will always find ways to ruin a good thing no matter how noble the intentions are.

pablo24

Frost Gate Guardian

Join Date: Aug 2007

I always get a good laugh when I read all the speculations about how the exploits are done on these forums, most of it is just completely besides the point x)
I know how all of the ones you listed here and many more were done, there's even the most important one that you didn't list but I guess that's because ANet didn't even list it in the update notes in fear of people discovering how huge some flaws in their code are.

EDIT:
Quote:
~15 people in a party
Actually you could get up to 49

Lyynyyrd

Lyynyyrd

Banned

Join Date: Jun 2008

Aussie Trolling Crew - Spah!

Best exploit in the world:

Desert wreckages / frozen chest

stretchs

stretchs

Jungle Guide

Join Date: Sep 2007

Untimely Demise [Err了] - SOHK

HEH, you mention exploit and pablo comes about. You still digging through the game trying to break things or did you finally retire?

As for the "most infamous" glitch, I am sure there are many but the one with probably the most impact on the economy would have to be the duping exploits

pablo24

Frost Gate Guardian

Join Date: Aug 2007

Quote:
Originally Posted by stretchs View Post
HEH, you mention exploit and pablo comes about. You still digging through the game trying to break things or did you finally retire?

As for the "most infamous" glitch, I am sure there are many but the one with probably the most impact on the economy would have to be the duping exploits
Ahaha the duping exploit definitely wasn't the one with the most impact on the economy, but sorry I can't tell more about that on these forums

As for if I'm still trying to find exploits, from time to time I come on GW when I'm inspired and I usually find some really broken stuff.. like last week

Painbringer

Painbringer

Furnace Stoker

Join Date: Jun 2006

Minnesota

Black Widows of Death

W/Mo

You mean like the /ADD GOLD XX21XX(AMOUNT) Take away the brackets. Command But it is more fun to work for your gold nowadays so no one uses it


The only one that truly comes to mind is the A-net Freak your a$$ out one. This one happens In RA and on a rare occasion when returning after a defeat you get zoned to the log on screen full of totally blank characters. I soiled my self the first time it happened. But it is just a messed up bug. That corrects its self if you log out and back in. But I am sure the dev get a chuckle on it.

Numa Pompilius

Numa Pompilius

Grotto Attendant

Join Date: May 2005

At an Insit.. Intis... a house.

Live Forever Or Die Trying [GLHF]

W/Me

Quote:
Originally Posted by fgarvin View Post
The Mallyx exploit.
Disconnecting the opposing team in PvP.
The mods here deleted all posts which detailed how those were done, and I can certainly take a hint, so this will be very general:

Both these revolved around modified packets. In the case of the Mallyx exploit (which was really a "teleport anywhere" client hack) a modified area code was sent, allowing the player to teleport to (and unlock!) a normally unavailable outpost, in the second case a packet containing an illegal character was sent as a whisper, causing the recipients client to get a buffer overflow & crash.
Quote:
~15 members in one party.
And the infamous Armbrace dupe trick.
Don't know about these. I have half a memory of a glitch which made it look like there were 15 (or as many as you cared) people in the team, but there weren't really.
Quote:
Mostly, I'm curious to find out how they discovered the Mallyx exploit.
As I understood it the guy used a packet sniffer to reverse-engineer GW's packets.

makosi

makosi

Grotto Attendant

Join Date: Mar 2006

"Pre-nerf" is incorrect. It's pre-buff.

Requirement Begins With R [notQ]

Me/

I like the Simple Thievery bug.

You could steal and use Siege Turtle Attack, Bear Form, Elemental Shift and other nasty monster skills.

It was patched pretty fast.

TheDragonmaster

Frost Gate Guardian

Join Date: May 2008

R/

What in the world happened when you used Elemental Shift? Your whole skill bar changed?

Or Reform Carvings for that matter? You swapped character model, profession, attributes, skill bar, and equipment?

Issac

Issac

Desert Nomad

Join Date: Oct 2006

Earthrealm

W/A

Disconnecting the opposing team in Pvp is the most interesting one to me at least. Seems like it would be to much trouble to go through lol.

Haxor

Krytan Explorer

Join Date: Aug 2008

Legion of the Feng Huang [ASH]

Elemental Shift worked as a form, I remember that. I presume Reform Carvings did the same.

Both changed the skillbar.

Zodiac Meteor

Zodiac Meteor

Imma Firin Mah Rojway!

Join Date: Aug 2008

At the Mac Store laughing at people that walk out with anything.

E/Mo

I'm using Echo!
I'm using Call of Destruction!
I'm using Arcane Echo!
I'm using Call of Destruction!
I'm using Call of Destruction!

ROFL that would be awesome, wipe your own team by summoning enemies to kill you.

TheDragonmaster

Frost Gate Guardian

Join Date: May 2008

R/

Just think of all the interesting uses of Claim Resource...

fgarvin

fgarvin

Jungle Guide

Join Date: Sep 2005

@ Numa Pompilius: Thanks, your response was exactly what I was looking for when creating this thread. Seems you're one of the few that actually read the OP.

"Simple" packet sniffing, huh? So people went out of their way to exploit the game in most of these cases. Too bad, I guess I naively thought these were stumbled upon by accident.

.defekt

.defekt

Krytan Explorer

Join Date: Aug 2005

Ex Talionis [Law], Schindlers Fist [ouch]

taking the ghostly off the altar after you cap in hoh/courtyard matches and running him around the map was always hilarious

Enko

Forge Runner

Join Date: Jun 2006

VA

Mo/

the dupe exploit was just a simple trade and disconnect. probably inspired from some of the d2 dupes. fenix and i posted it after we reported how it was done and it was patched.

fenix

fenix

Major-General Awesome

Join Date: Aug 2005

Aussie Trolling Crew HQ - Event Organiser and IRC Tiger

Ex Talionis [Law], Trinity of the Ascended [ToA] ????????????????&#

W/

Enko is right, funnily enough it was literally the exact method used in Diablo to dupe things in GW. Anet MADE Diablo...so you'd think they'd have learned....right guys?

Right guys?


Guys?

dilan155

dilan155

Desert Nomad

Join Date: May 2007

living room

N/

gl getting an answer to that fenix, anyway the one that pain mentioned, where you get a blank account thing was creepy as $%#&, i pissed my pants as well, when it happened the first time.

DarkNecrid

Furnace Stoker

Join Date: Jul 2006

Using Protective Bond and certain +energy gain skills to cause an infinite flow of energy loss and gain resulting in the server you were on crashing from overflow.

(note: this is still completely possible but you have to be smart to work around it since they nerfed PBond)

spun ducky

spun ducky

Jungle Guide

Join Date: Nov 2005

WTB: q8 bows

R/N

Quote:
Originally Posted by Lyynyyrd View Post
Best exploit in the world:

Desert wreckages / frozen chest
I have to agree nothing could beat having an inventory full of perfect crystallines with almost no effort from getting junk loot/keyless goodies.

The Red Messenger

The Red Messenger

Krytan Explorer

Join Date: Mar 2008

America

yeah there's been a long list of exploits over the years...

the first pre-searing items exploit was very simple...they allowed travel to guild hall from pre for a short time during the first christmas event.

i personally was able to use the team-increasing glitch. it had to do with party members adding heroes, and the leader couldnt add 3 of his own if i remember correctly. the biggest party we were able to get was 29. i suppose it could have been more in urgoz or the deep but we didnt try.

a lot of times, a glitch that they fix is un-fixed with the following patch, then they do a second patch fixing it again soon after...so if you learn of a glitch after they fix it, just wait till the next update and test it right after they push it. for some reason they forget to add it to whatever it is they need to make it permanent a lot of the time.

of course use a second account when messing around because abusing any glitch or exploit makes you subject to a ban

DarkKnight

Academy Page

Join Date: Mar 2008

The Seven Deadly

W/E

The Mallyx "Exploit" Like several fo the ones you named was more of a hack to start.

Inside the dat file is where all the data is stored such as outposts, maps, quest all the 3d models and textures ect...

There is a available tool to extract files and images from the dat file. Someone figured out that there was a secret outpost and most likely figured out a way, probably by emulating a certain packet sent on logging out, to set that outpost to his last visited outpost when logging in or something of the sort.

After one person did it though he could ferry groups of 8 from a guild hall into this secret outpost and that how it was mostly spread. The outpost itself looked exactly the same as another outpost in the realm of torment but had no NPCs or storage. On the right of the screen was an Enter Mission Button just like there would be in any Mission town. On hitting it your party was taken in to defeat Mallyx Over and Over without the previous 4 quests.


This outpost is one of many interesting little things you can find by snooping through the data file. There is the groundwork for a in game auction house, unused henchman and all other sorts of goodies.

pumpkin pie

pumpkin pie

Furnace Stoker

Join Date: Jul 2006

behind you

bumble bee

E/

Quote:
Originally Posted by fgarvin View Post
I'm sure that they've all been patched, so I'm not too concerned about talking about them now.

How they were done interests me, but how they were discovered/uncovered interests me much more. (I'm not interested in dublicating them)

The Mallyx exploit.
Disconnecting the opposing team in PvP.
~15 members in one party.
And the infamous Armbrace dupe trick.

I've read all of the old posts, but they're mostly full of speculation and have very little in the way of actual fact.

Mostly, I'm curious to find out how they discovered the Mallyx exploit.
Is this thread talking about Exploit(s) in general or just one single exploit, may I please talk about other PvP related exploit? I thought I make sure before getting into trouble again.

fgarvin

fgarvin

Jungle Guide

Join Date: Sep 2005

@ Pumkin Pie: Any glitch or exploit, but mostly about how they're discovered. I've never looked for one, but I've also never been "lucky" enough to discover one either.

Once, during Dunes, the Ghostly wound up in a spot where none of the ranged mobs could hit him, and none of the melee mobs went up the stairs due to getting stuck on the ranged mobs. I just had my H/H flagged on top of the ramp, waiting for the timer to run out. Not really a glitch, just poor AI pathing.

zwei2stein

zwei2stein

Grotto Attendant

Join Date: Jun 2006

Europe

The German Order [GER]

N/

There was "PartyKill" exploit which allowed person in RA leave party and become hostile to them. Hilarity Ensued with Trapper doing this.

Fril Estelin

Fril Estelin

So Serious...

Join Date: Jan 2007

London

Nerfs Are [WHAK]

E/

Guys, there's seriously a good reason why these things are illegal in many countries (ArenaNet could sue you since Guru is hosted in the USA) and banned on a lot of forums: while this information may not be so harmful in the hands of "relatively responsible" people, it's a disaster if it inspires certain "less ethical" people to break stuff, try to trick other people, etc. It may even make a kid want to try it "for fun" and get his account banned.

I know it sounds like a Star Wars or Good vs. Evil story, but the security field does have "white hat" and "black hat" hackers, and they all play with the same techniques and tricks. It's quite "nasty" for the common computer user, to the point of illegality sometimes (but sometimes laws are "wrong"!). Don't come to the dark side or you'll loose your wings .
There are books on these things (e.g. Exploiting Online Games by Hoglund and McGraw, nice high-level overview but unfortunately too centered on WoW), websites (playNoEvil is a very nice, clean blog), etc. Things become very nasty when you no longer play the game as a game, but play it as a software .

On a more ethical ground (and thus open to critics and point of view, it's not about right and wrong), I believe that it's plain wrong to do this stuff for other things than software testing/bug finding. These software bugs will always exist but if we can, as a community, understand that the fun is beyond that (i.e., in actually playing the game, rather than simply winning and accumulate numbers/ranks/titles/virtual achievements), that it's not in our best interest to try to bypass "rules" even if they're virtual, then our game experience is improved, globally. If we let the route of exploits be open, even as a "possibility" in the mind of people, our game experience is weakened, globally. You can' directly change people, but you can set an example.

P.S.: I perfectly understand that the OP question spawns from curiosity, it's human nature and a good quality of a scientist .

MirkoTeran

MirkoTeran

Forge Runner

Join Date: Sep 2005

Slovenia

Scars Meadows [SMS]

Mo/

Quote:
Originally Posted by zwei2stein View Post
There was "PartyKill" exploit which allowed person in RA leave party and become hostile to them. Hilarity Ensued with Trapper doing this.
I don't remember that one, but I do the one where you could disconnect everyone in the instance (by sending specific unicode char as text. I think it was 0xFFFF).

2 more from the top of my hat that I've seen in work:
- There was a tool that let you see stats of unidentified items (that was pre-factions).
- SoA axe. This was more of a bug (2x20%ench FTW).

Numa Pompilius

Numa Pompilius

Grotto Attendant

Join Date: May 2005

At an Insit.. Intis... a house.

Live Forever Or Die Trying [GLHF]

W/Me

Quote:
Originally Posted by fgarvin View Post
So people went out of their way to exploit the game in most of these cases.
Yes.
Quote:
Too bad, I guess I naively thought these were stumbled upon by accident.
Many are, of course. I've found and reported a few, but I've not really been looking. The most impressive I've found was the "Gear Tank" AI exploit (if someone was carrying anything - a book, keg, gear etc - mobs would only target him). I probably wasn't the first to find it, but I was the first to report it.

BenjZee

BenjZee

Forge Runner

Join Date: Dec 2006

The Overacheivers [Club]

Mo/

Sometimes people come across them merly by mistake but when they decide to replicate what happens it where the problem is. People could teleport to the party leaders last location through visiting guild halls ambassadore i believe was the result of a bug in a update. Could be wrong though.
Most as indicated are done by packet sniffers intentionally - some for good ..some not
I don't wanna give people ideas but i assume different combiantions of acessing npcs etc are used and commands with special prefixes when typing messages.
I admire Pablo though, hes got many secret exploits no doubt benefitted from but we'll let him have it just cuz he released the information to get it fixed.

fgarvin

fgarvin

Jungle Guide

Join Date: Sep 2005

Quote:
Originally Posted by MirkoTeran View Post
- SoA axe. This was more of a bug (2x20%ench FTW).
God, I loved my axe...for the few days that I had it. Selling five of them wasn't a bad thing either....

And sending "unicode char as text" sounds so simple. Not. Prolly requires access to whatever crazy voodoo the practitioners of coding use to work their magic.

MirkoTeran

MirkoTeran

Forge Runner

Join Date: Sep 2005

Slovenia

Scars Meadows [SMS]

Mo/

Quote:
Originally Posted by fgarvin View Post
God, I loved my axe...for the few days that I had it.
Yeah. I enjoyed mine for almost 2 days before it turned to crap. Sold enough of un-modded ones to pay for modded one.

Stranger The Ranger

Stranger The Ranger

Wilds Pathfinder

Join Date: Nov 2005

Those Netherlands

Dynasty Warriors [DW]

R/

Or how about the good old Keg/Book trick? : P
Just let the Warrior(with a Tank build) hold it and all the mobs will attack him, making nukers extremely effective xD

[DE]

[DE]

Hugs and Kisses

Join Date: Oct 2005

Scars Meadows

Quote:
Originally Posted by fgarvin View Post
The Mallyx exploit.

I've read all of the old posts, but they're mostly full of speculation and have very little in the way of actual fact.

Mostly, I'm curious to find out how they discovered the Mallyx exploit.
The Mallyx glitches and exploits were the most retarded glitches ever. If people hadn't been dumb and would have not bothered with it and instead adapted there builds to a certain scenario, they could have gone in and beaten mallyx in 20 minutes instead of an hour. (*cough* like rathoh, rob, and trub did [and they did it with 5 heroes]*cough*) That wasn't the PvE communities finest hour.

edit: same mallyx exploit? idk - there was one with glitching the priest and then glitching mallyx in the door. mainly because people were bad. just so we're clear.