ZeroTixDev / Darrows

pvp io game that uses bow and arrows - sequel to death arrows
1 stars 3 forks source link

IP limit bypass #28

Open 10maurycy10 opened 2 years ago

10maurycy10 commented 2 years ago

By sending a bougus x-forwardesd-for header to the server, you can fake the origin ip.

This allows bypassing ip limits and, preventing a player with a known ip from joining.

This is the code from dhax that bypasses the ip limit using this.

conheaders['x-forwarded-for'] = uuid.v4();
let con_to_real_server = new WebSocket(config.ADDRESS,["ws","wss"],{headers: conheaders});