Page 2 of 2

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 1:11 pm
by Kent Briggs
pookeer wrote:Maybe Attacker Can Send "1001" Response To Websocket Server As Player


You could only disconnect yourself. Every session ID is tied to the connection thread that created it and that is checked by the server before processing any commands from a client connection. Contact your service provider and make sure they aren't doing it via maintenance or something like that.

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 1:15 pm
by pookeer
Rdp http and all protocols work fine and maven is up but players disconnect 130 player in 7 sec


please check source bro this is bug trust me

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 1:18 pm
by pookeer
attacker can disconnect all players normally without terminate command


server is up and all protocols work fine

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 1:38 pm
by pookeer
I Found Bug


{"Response":"Logout","ID":"00000002","PNum":4}




Now You Send All ID To Websocket Server All Players Disconnected Done.

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 2:13 pm
by Kent Briggs
pookeer wrote:I Found Bug

{"Response":"Logout","ID":"00000002","PNum":4}


Now You Send All ID To Websocket Server All Players Disconnected Done.


No, you can't. The first thing the server does is check the ID against the session thread associated with that ID. If they don't match, then the command is ignored.

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 2:20 pm
by pookeer
Kent I need your help please check source and find vlun


Please

Yes with this command cant disconnect player but attacker can do this

Please check disconnect commands and anything else...

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 3:02 pm
by Kent Briggs
pookeer wrote:Kent I need your help please check source and find vlun


What is vlun?

The buffer flooding and same-origin exploits mentioned yesterday are different matters. I'm still working on those.

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 3:08 pm
by pookeer
TnQ Bro

I shutdown server Now Just For This disconnects

I strat server when you release new version

tnx kent

Re: Poker Mavens Disconnect Players From Lobby Without Reaso

PostPosted: Sun Nov 02, 2014 3:19 pm
by Kent Briggs
pookeer wrote:I strat server when you release new version


Email me with your license key and I'll get a beta version for you to test once I have it ready.