Invite spoofer

Posted 8 years ago · Author

It'd be awesome if you guys made an invite spoofer. Basically send yourself an invite from someone else to a room so we can join full public rooms. I've noticed that there's a bug with IMVU where invites are stored or something.

The bug:
1. John invites Bob
2. Bob accepts
3. Bob joins the room
4. After 10 minutes, Bob logout and logs back in (relogging)
5. When he log's in, the gets a room invite that John sent. Even though john didn't send anything after he relogged.

So from this, I think it's possible to spoof invites

The Idea:
1. Spoof an invite from John to join a full public room
2. Bob accepts the invite and joins the full room even though john didn't actually invite him.

Posted 8 years ago

So how exactly do you think we should make this? Where is this invite going to come from?

Posted 8 years ago

D.M wrote:
So how exactly do you think we should make this? Where is this invite going to come from?

good question i noticed this bug too but i dont think its posible to take advantage like that because someone has to first initiate the invite

though it could be usefull to turn this bug in a more permanent addon. sometimes for example my internet crashes and it would be usefull to always have that invite when i come back and not needing to message the person to reinvite me

Posted 8 years ago

Adryan wrote:
D.M wrote:So how exactly do you think we should make this? Where is this invite going to come from?good question i noticed this bug too but i dont think its posible to take advantage like that because someone has to first initiate the invitethough it could be usefull to turn this bug in a more permanent addon. sometimes for example my internet crashes and it would be usefull to always have that invite when i come back and not needing to message the person to reinvite me

There are only 2 ways I know of for inviting, through the use of the IMVU App call linked from the website and the built in client call. Both of these I am pretty sure trigger the same python function.

I mean, I could write a program that lets you invite yourself with the click of a button but I don't see the point because there's no method for me to trick the client into thinking it came from someone else.

At best I could modify the client to make it think an invite is coming from a specific user but that would overwrite all invites and the majority of my T3DE customers would not appreciate that, myself included.

So overall I fail to see how this spoofer would function.

Posted 8 years ago · Author

D.M wrote:
Adryan wrote: D.M wrote:So how exactly do you think we should make this? Where is this invite going to come from?good question i noticed this bug too but i dont think its posible to take advantage like that because someone has to first initiate the invitethough it could be usefull to turn this bug in a more permanent addon. sometimes for example my internet crashes and it would be usefull to always have that invite when i come back and not needing to message the person to reinvite meThere are only 2 ways I know of for inviting, through the use of the IMVU App call linked from the website and the built in client call. Both of these I am pretty sure trigger the same python function.I mean, I could write a program that lets you invite yourself with the click of a button but I don't see the point because there's no method for me to trick the client into thinking it came from someone else.At best I could modify the client to make it think an invite is coming from a specific user but that would overwrite all invites and the majority of my T3DE customers would not appreciate that, myself included.So overall I fail to see how this spoofer would function.

Well the idea is to access rooms which are full, I thought the invite spoofer may work for this. But if you have a method where you can join a full room, then that works too. If you decide to make it, could you make it in an external program, not client based? (paid or free).

Posted 8 years ago

Hydra wrote:
Well the idea is to access rooms which are full, I thought the invite spoofer may work for this. But if you have a method where you can join a full room, then that works too. If you decide to make it, could you make it in an external program, not client based? (paid or free).

I don't know of any way this could be accomplished externally from the client. The room room links on the client (ignoring IMVUNext) are nothing more than links that tell the client to do something, so regardless of whether or not you invite from the web or from within the client, you're going to be dealing with the same occupancy checking code.

That said, I'm not sure if you can do it internally either, I'd have to look at the client code. If it's possible, the best I could offer would be to add this feature to T3DE. There isn't really any way I can make some external program or script to accomplish what you want at this time.

Posted 8 years ago

What if we just removed the full room check from the client?

Posted 8 years ago · Author

Don Von Alpha Dom wrote:
What if we just removed the full room check from the client?

Like the error message? How would that work because you can join full rooms but no one loads in, its just the empty room and then the error message pops up

Posted 8 years ago

Hydra wrote:

Don Von Alpha Dom wrote wrote:
What if we just removed the full room check from the client?
Like the error message? How would that work because you can join full rooms but no one loads in, its just the empty room and then the error message pops up

I haven't actually looked at the code that handles this yet but I would guess that it simply returns if the room is full preventing the code that populates the room from running.

Posted 8 years ago · Author

D.M wrote:
Hydra wrote: Don Von Alpha Dom wrote wrote:What if we just removed the full room check from the client? Like the error message? How would that work because you can join full rooms but no one loads in, its just the empty room and then the error message pops upI haven't actually looked at the code that handles this yet but I would guess that it simply returns if the room is full preventing the code that populates the room from running.

Let me know if you get any progress with it

-- Sat Apr 23, 2016 10:49 am --

@D.M

Just thought of something. If you own the room, you can connect to the room regardless if its full or not (through the chatroom manage tag). So that's probably the way to enter a room if its full.

Product Requests

Create an account or sign in to comment

You need to be a member in order to leave a comment

Sign in

Already have an account? Sign in here

Create an account

Sign up for a new account in our community. It's easy!

Community

Tools

IMVU Black Market

Mafia Credits

Help