{"action":"created","issue":{"url":"https://api.github.com/repos/HerculesWS/Hercules/issues/841","labels_url":"https://api.github.com/repos/HerculesWS/Hercules/issues/841/labels{/name}","comments_url":"https://api.github.com/repos/HerculesWS/Hercules/issues/841/comments","events_url":"https://api.github.com/repos/HerculesWS/Hercules/issues/841/events","html_url":"https://github.com/HerculesWS/Hercules/issues/841","id":114389235,"number":841,"title":"[ SERIOUS EXPLOIT! ] Skill range bypass: 14 cells skills usage","user":{"login":"100percent","id":11407486,"avatar_url":"https://avatars.githubusercontent.com/u/11407486?v=3","gravatar_id":"","url":"https://api.github.com/users/100percent","html_url":"https://github.com/100percent","followers_url":"https://api.github.com/users/100percent/followers","following_url":"https://api.github.com/users/100percent/following{/other_user}","gists_url":"https://api.github.com/users/100percent/gists{/gist_id}","starred_url":"https://api.github.com/users/100percent/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/100percent/subscriptions","organizations_url":"https://api.github.com/users/100percent/orgs","repos_url":"https://api.github.com/users/100percent/repos","events_url":"https://api.github.com/users/100percent/events{/privacy}","received_events_url":"https://api.github.com/users/100percent/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-10-31T05:36:52Z","updated_at":"2015-11-03T08:32:02Z","closed_at":null,"body":"Just a followup to this issue:\r\n\r\nhttp://herc.ws/board/tracker/issue-8302-potnd-bypass-range-skill-delay/\r\n\r\nThis bug is still existent in the present build of Hercules ( and rathena too! ) but not on any eathena servers.\r\n\r\nHow to reproduce:\r\n\r\n1 - Record packet via WPE / RPE.\r\n2 - Send the recorded packet.\r\n3 - Try to send the packet outside the range of skills.\r\n\r\nNOTE: If you followed the temporary fix on the link above...it would only fix the vertical and horizontal range of the skill..but if you try the diagonal way - the bug still persists! I have a screenshot of a guild abusing this, please see screenshot below:\r\n\r\nhttp://i.imgur.com/TPmzNxt.jpg\r\n\r\nAs you can see, their guild programmer made a program that modify the client binaries to prevent the client from sending the move packet when using skills...that's why it turns out to be behaving like it's only sending packets without moving - and the bug shows up! Notice how he is casting dispell outside the correct range. Please fix this, a cheat that is on its way on becoming famous is abusing it ( xrag ) and its not healthy for the competitive WoE community and the whole RO community in general."},"comment":{"url":"https://api.github.com/repos/HerculesWS/Hercules/issues/comments/153287037","html_url":"https://github.com/HerculesWS/Hercules/issues/841#issuecomment-153287037","issue_url":"https://api.github.com/repos/HerculesWS/Hercules/issues/841","id":153287037,"user":{"login":"anacondaqq","id":9905636,"avatar_url":"https://avatars.githubusercontent.com/u/9905636?v=3","gravatar_id":"","url":"https://api.github.com/users/anacondaqq","html_url":"https://github.com/anacondaqq","followers_url":"https://api.github.com/users/anacondaqq/followers","following_url":"https://api.github.com/users/anacondaqq/following{/other_user}","gists_url":"https://api.github.com/users/anacondaqq/gists{/gist_id}","starred_url":"https://api.github.com/users/anacondaqq/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/anacondaqq/subscriptions","organizations_url":"https://api.github.com/users/anacondaqq/orgs","repos_url":"https://api.github.com/users/anacondaqq/repos","events_url":"https://api.github.com/users/anacondaqq/events{/privacy}","received_events_url":"https://api.github.com/users/anacondaqq/received_events","type":"User","site_admin":false},"created_at":"2015-11-03T08:32:02Z","updated_at":"2015-11-03T08:32:02Z","body":"@dastgir I have no negativity towards the developers. You guys good. You rock. Thank you for your works. But, dear devs., if you will have a some amount of time, please improve basic security things for herc / ra. Thx. Reports available above. "}}