If you are multiplayer person STAY on GOG! Those PvPGN servers are not safe! They can execute arbitrary code on your machine just because you connected to the server.

Example:

Open warcraft 2
connect to a 3rd party server
BOOM you can now be infected.

This works with almost all blizzard games. The pvpgn server can tell your client to download and execute code from the mpq file.

are you talking about the servers from WAR2.ru?

nice try tupac, hes admin from usa server, they got 10 people maybe online in row sometimes


its a lie :)

so is this some internal War2.ru thing? I suggest you attempt to find a more mature USA server admin.

This is not a joke and before you believe anything these people posted into the thread look for your self. I don't want to say word for word how to recreate this in public

I can also link, setup a POC, etc. You can tell all the clients emulated by pvpgn to download and execute code when they connect. 100% correct!

And server.war2.ru is such a toxic place to play.

1. Virus scanner goes off like crazy just trying to download war2.ru. (Could be false flag but many files need testing to confirm clean.)

2. The server allows many different versions of the game causing conflict and games not to show up for others on clients. I bet this is list huge compared to my notes.

3. Toxic environment where you kick new players from matches, old members that are known to send threats to you as "murder you kids, kill your wife, way much more graphic content".

4. Those admins have been proven over and over and contribute to the dox and release of peoples PI and known to call employers, harass family, etc. The proof can be seen just looking up the servers known old and current forums, websites.

5. The anit cheat is a joke and is a choice to run or not. So of course just turn it off and hack away.

Just start playing on gog where you are safe.

Tupac is hosting a private server that is nothing more legal than what the war2.ru server is.

VirusTotal and 71 scanner say server.war2.ru is clean so nope seems a save place.

The server.war2.ru is here. You notice i never said a name in the first post and they go nuts? See how they all march and gang up here to tell you all this isn't true? Everyone word i have spoke is true and i can prove it all.

If any certified professional / GOG Staff would like to see how pvpgn server can execute code on machines just by using connecting with games i will gladly show you.


@Dreaganos

Virtustotal doesn't help and nor does any virus scanning if the malicious author encrypted the code. It will say clean in any file you scan.... so that prove nothing.

OFC players from RU are here, because there is no other relevant private server for war2 out there.
Who else would you expect to defend what they have if they have nothing to begin with rofl.

Players and fans defend what they have, and what they love. We are many to keep loving and playing this game on war2.ru so yes you can expect them to react to your twisted ways.

As I said before:
Numbers do not lie, the overwhelming majority of war2 players are still playing on RU and have been for years, loving fans kept the game rolling for years before GOG arrived. Maybe gog should have a look at how they did to improve what they have.

Replays of games.
Observer mode,
Hotkeys changer,
Latency fix,
Map scenario triggers,
Windowable ddraw with improved shaders,
Color blind mode,
Server status page and commands to have a quick overview of who is online.
A main landing channel that is the same for everyone no matter the language so that people see each other when they connect to the game.

Not a lot of players are going to give up playing on illegal private servers when the private servers still do a better job than the retail version... (coming from someone that bought the game 4 times now once on gog too)

Stop making that place look pleasant it's not honesty. A few google dorks can prove that toxic environment. Just search some racist or toxic words you see it's filled. Admin abuse, cyber criminals, i bet the main admin il has abused this many times the author told him and me at the same time 5 years ago. This is the atmosphere there just toxic, see for yourself. Be careful logging in as these servers can backdoor your machine by connecting. You know i can have many people here to say the same about your toxic environment. But it's a lot easier to show we aren't lying.

I had a machine connected to war2.ru for like 7 years.

No problems. No viruses.

I never had a reason to look for racist crap in their forums. Never went to their forums period, I went there to play WarCraft.

Also, I think you're fuill of crap. I've edited mpq files for decades, and I fail to see how one could execute code.

Put up or shut up. If there's a security hole, make it public so that the community / GoG / Blizzard can fix it.

Otherwise, you're just a lying punk with his nose bent out of shape.

You catch a WHOLE lot more flies with honey than you do with vinegar. If you are running a US based server, why not team up with war2.ru to help build the community? Offer to admin their forum, and delete the racist crap from their forums.

Oh you mean so blizzard or gog can say ohh that's not an official server.... ofc LOL!

The pvpgn emulates the same packets bnet used to update the game clients, hack detection, even the mpq signatures for bnet are weak and reversed, servers can execute code when you connect.

I will regret to show you all this. Maybe you use it for good maybe not.

https://github.com/pvpgn/ExtraWork/wiki

Btw I did support that place for almost a decade. I created the mods and support threads at ru's forums. The main admin was to busy to do anything and the community is toxic. Be warned play on gog or trusted servers. End of discussion!

PS Look at their current forums for you can see how all the staff involved cyber criminal activity.

Yes, it's true.
Blizzard really provided a hole to let some extra code be executed on the client side if the server requests that.
They protected that code by digital signature... that became weak and could be used to attack clients if the server owners/developers are not trusted.

That's why I never joined RealTuPaC's server and I'd not recommend others to do that.
I stopped deal with him after he (or his friends in contact with him as he said) hacked russian site.
TuPaC attacked sites and servers belongs to war2.ru project from time to time, he confirmed that himself. He said he "helped to find vulnerabilities" in war2.ru, but in fact he hacked it, and then I had to analyze the situation and repair things, restoring the files, fixing the holes, changing all the passwords. That is definitely not something looked like "help to find vulnerabilities".
Some newer attacks keeps happening, TuPaC disclaims his part, but they looks 99% similar to ones he confirmed.

I didn't want to tell about my relation to TuPaC, but he began that himself, talking about "3rd party server". We all know the most popular "3rd party server" is war2.ru, so I regard this thread as an attack against us.

After I stopped deal with TuPaC, he completely moved to the server he provides and began posting messages of hate about war2.ru.

About war2.ru project:
War2.ru works as the only worldwide War2-server since 2008, the whole war2-community uses it as the main place to play war2 all these years till now.
All the time we take care of our reputation. We have hundreds of active players who enjoy war2 all these 25 years from the very beginning, they moved to war2.ru since Blizzard abandoned their official USAs, Europe and Asia servers.
I can't be too active all the time to improve all the features on the server, but I do everything to make it be the safe place to play.
Yes, we really had some problems with security: players' database leaked with all the passwords, after one guy hacked it. That happened about 8-10 years ago, I don't remember the moment. Several years later TuPaC began to act together with that guy...

Yes, our admin team have to make delicate desicions about some unpleasant members sometimes, so war2.ru have haters, same as in every other community I think, some people disagree with such desicions, but we always try to make the community enjoy playing war2.
Toxic environment - yes, some long time played members are toxic, others dislike them, but it's became a subculture or war2 since the very beginning. Our admin team is not glad about such behavior, but here's how the community is. We try to make place for everyone who want to play war2. Most players are friendly to newcomers and other players.

War2.ru server allows all the existing versions of war2 to get maximum coverage, especially newcomers with some other versions. Every version will work, but we strongly recommend to use War2Combat to play as the most compatible with all new windows and containing the most number of useful improvements.

Yes, some virus scanners sometimes causes false-positives, I don't see how to fix that: some heuristic algorythms dislike binaries with injections into war2 executable code (the only way to fix the code keeping it compatible with the original one - one of the main concept of Combat). What I can guarantee: there's no malicious code in War2Combat: I carefully check every single piece of source code before include someting into the project. I also never use code from untrusted developers.

So let's tell the whole truth now.

1. You didn't decide to end our relations. I clearly resigned and moved to a non toxic place. I will gladly post those chat records.

2. I didn't hack you. If I hacked you then told you that would be pointless. When you let your admins and cyber criminals abuse power and post peoples emails, names, addresses, etc. You became no good like them.

3. We all know you know about the dll being executed at login. So you would most likely back door the antihack as it does auto update.

4. You're not allowed on USA that's why you don't connect LOL. Don't try to call my work malicous as we both know that isn't true.

5. They introduced a whole punch software that will overwrite the original .dll file for networking. So now if you use that, they have power over your client even though your not on their server they can see all the traffic from ur game.

6. Here you can see admins admit their cyber criminal activity. You can also see how they pass you info to a cyber criminal. To call ur wife, family, work, etc. They admit to DDOSING players, hacking them, etc.
http://forum.war2.ru/index.php/topic,5806.0.html


YOU ALL KNOW THE TRUTH AND HAVE BEEN WARNED. Hopefully gog takes back the war2 community.

INTRUDER ALERT! INTRUDER ALERT! Red Spy in the base!