Can someone try this:
--
Passworded server work-around (Caspian Border)
merkuralex
I mostly did this so that the devs would be aware of this security hole.. but also a part of me wanted to play Caspian Border.
When you attempt to join a server if it has a password Battlelog will send your attempt to the server to check it, if its right it connects. All that seems fine, but when it tries to connect it doesn't re-verify the password therefore I was able to just bypass the password check part in Battlelog.
Details on how this was done (and source code for the Chrome Extension):
http://www.coderah.com/?p=394 [coderah.com]
Anyone who wants to play Caspian Border head over to the link ahead and install the Chrome Extension (if you don't trust it don't use it, the source is available.)
Or even easier here is the line used to bypass the verifyPassword function:
launcher.verifyPassword = function(game, gameServerGuid, plaintextPassword, callback) { callback(true); }
--
Passworded server work-around (Caspian Border)
merkuralex
I mostly did this so that the devs would be aware of this security hole.. but also a part of me wanted to play Caspian Border.
When you attempt to join a server if it has a password Battlelog will send your attempt to the server to check it, if its right it connects. All that seems fine, but when it tries to connect it doesn't re-verify the password therefore I was able to just bypass the password check part in Battlelog.
Details on how this was done (and source code for the Chrome Extension):
http://www.coderah.com/?p=394 [coderah.com]
Anyone who wants to play Caspian Border head over to the link ahead and install the Chrome Extension (if you don't trust it don't use it, the source is available.)
Or even easier here is the line used to bypass the verifyPassword function:
launcher.verifyPassword = function(game, gameServerGuid, plaintextPassword, callback) { callback(true); }
Comment