release CPU Flooding Attacks in the Ikarus Offline Shop System

[Black_Rose©]

In the realm of online gaming, especially in private servers, security threats can pose significant challenges. A recent issue concerning flooding attacks has surfaced for users of the Ikarus Offline Shop system. This guide provides a comprehensive solution to mitigate such attacks effectively.

Problem Overview

Users have reported that a malicious individual is attempting to extort servers utilizing the Ikarus Offline Shop system, impacting not only its official clients but also users who have obtained the software from unreliable sources. The aim here is to share a corrective patch to assist the majority of servers affected by this extortion attempt.

Community Discussion

One user questioned the appropriateness of sharing this fix with individuals who are not direct clients of the original software. While it’s recognized that unauthorized users should not benefit, the need to protect the broader community from scams takes precedence. An important point was made: spreading this fix is necessary to prevent further victimization.

Identify the Malicious Actor

The identified perpetrator of this blackmail is linked to the Discord account: Mădălin#2332. The recommendation is clear: do not pay this individual. Users are also encouraged to report any additional accounts associated with this individual.

Implementation Steps

Below are specific changes that should be implemented within the relevant code files to address the flooding issue effectively.

Modifying the Shop Manager

In the new_offlineshop_manager.cpp, search for the RecvShopCreateOfferClientPacket method and make the following adjustments:

// FILE: new_offlineshop_manager.cpp
// SEARCH FOR

This is the hidden content, please

• Sign In
• or
• Sign Up

// ADD UNDER

This is the hidden content, please

• Sign In
• or
• Sign Up

In the same file, locate the ClearSearchTimeMap function:

// SEARCH FOR:

This is the hidden content, please

• Sign In
• or
• Sign Up

// ADD UNDER

This is the hidden content, please

• Sign In
• or
• Sign Up

Adding Cooldown Check

Search again in new_offlineshop_manager.cpp for the section beginning with ClearSearchTimeMap and add the following method to check for cooldowns:

// ADD UNDER

This is the hidden content, please

• Sign In
• or
• Sign Up

Updating the Header File

Now, move to new_offlineshop_manager.h and make the following declaration:

// FILE: new_offlineshop_manager.h
// SEARCH FOR:
// search time map (checking to avoid search abuse)

This is the hidden content, please

• Sign In
• or
• Sign Up

// ADD UNDER:

This is the hidden content, please

• Sign In
• or
• Sign Up

Adding Auction Maps

In the same header file, find the following line and add a new member variable for offer cooldowns:

// SEARCH FOR:

This is the hidden content, please

• Sign In
• or
• Sign Up

// ADD UNDER:

This is the hidden content, please

• Sign In
• or
• Sign Up

Final Checks in Packet Creation

In the OfflineshopPacketCreateNewShop function, add limits on the number of items per shop to prevent flooding:

// SEARCH FOR

This is the hidden content, please

• Sign In
• or
• Sign Up

// ADD UNDER

This is the hidden content, please

• Sign In
• or
• Sign Up

// Your remaining implementation...
}
    

Modify Client Manager

Lastly, adjust the ClientManagerOfflineshop.cpp file. Locate the method RecvOfflineShopOfferAccepted and implement the following code:

// FILE: ClientManagerOfflineshop.cpp
// SEARCH FOR:

This is the hidden content, please

• Sign In
• or
• Sign Up

// ADD UNDER:

This is the hidden content, please

• Sign In
• or
• Sign Up

// Your remaining implementation...
}

By following the provided code modifications, server administrators can enhance security against CPU flooding attacks. This will not only protect their systems but also contribute to a healthier gaming ecosystem.