Analyze ShowDialog

[quixote]

In a SAMP server, there are plans to abuse ShowDialog to execute code on the client for various reasons. Since it’s not a trusted server, I don’t trust this RCE. I attempted to use RakLogger to filter the ShowDialog event, but I didn’t find anything relevant other than bytes that don’t overflow (although the packet size was several KB). Is there a way to log these data packets sent by the server in more detail (especially for this event)?

 

[sazzas1978]

Lua - ASI - DialogRCEfix

убирает RCE уязвимость в диалоге со стилем DIALOG_STYLE_LIST сервер мог выполнять любой код на клиенте добавил луа версию и исправленные samp.dll

www.blast.hk

In a SAMP server, there are plans to abuse ShowDialog to execute code on the client for various reasons. Since it’s not a trusted server, I don’t trust this RCE. I attempted to use RakLogger to filter the ShowDialog event, but I didn’t find anything relevant other than bytes that don’t overflow (although the packet size was several KB). Is there a way to log these data packets sent by the server in more detail (especially for this event)?

U can patch samp, and dont fuck with dialogs since it wont be metter

 

[constersuonsis]

In a SAMP server, there are plans to abuse ShowDialog to execute code on the client for various reasons. Since it’s not a trusted server, I don’t trust this RCE. I attempted to use RakLogger to filter the ShowDialog event, but I didn’t find anything relevant other than bytes that don’t overflow (although the packet size was several KB). Is there a way to log these data packets sent by the server in more detail (especially for this event)?

The answer to your question is above, or install the R5 client

 

[quixote]

Lua - ASI - DialogRCEfix

убирает RCE уязвимость в диалоге со стилем DIALOG_STYLE_LIST сервер мог выполнять любой код на клиенте добавил луа версию и исправленные samp.dll

www.blast.hk

U can patch samp, and dont fuck with dialogs since it wont be metter

I think you didn’t read it correctly; I want to analyze it, not patch it.