barncastle/aio-sandbox

An "All In One" sandbox server supporting pre-Cata builds of WoW

aio-sandbox's Issues

Auth Exploit

While only an issue if anyone wanted to actually use this in production you appear to suffer from at least one of two Mangos/Trinitycore authentication exploits that I know of. One was fixed in this commit TrinityCore/TrinityCore@14abd1f . This exploit allowed arbitrary authentication by abusing the faulty SRP6 implementation in Mangos/Trinitycore that did not ensure that all 3 "safeguards" were implemented, which you can read about here.

Most specifically the check for "The host will abort if it detects that A == 0 (mod N)." Not doing so allows for authentication to occur even when the client produces an invalid private key x.

Looking for 3.0.1.8622

If anyone has a copy of this build or an installer that doesn't crash it'd be greatly appreciated!

License ?

Hello, under what license is this project released under ? I would like to study it to learn from it. Thank you.

Stuck on Authenticating (1.1.2.4125)

Can't get past Authenticating.

Same with 4196 and even 4284

wow classic sandbox

Stuck on authenticating 2.0.0.5610

With the latest release the 2.0.0.5610 sandbox gets stuck on authenticating.