so this is a PB 3.121 BR server, source and precompiled binaries (you dont need to run, you can just rebuild it in visual studio).
first, 'If I have seen further, it is by standing on the shoulders of giants', this server is built upon these two sources:

I will never sell anything. All I do will be public; any fool can know. the point is to understand.
whats inside
important: one thing to understand about these bugs: the base we built on is the PointBlank 3.68, and that base already had a lot of this stuff working for its own client. the problems you see here are mostly packet byte drift and wrong opcodes, not missing code. 121 BR is a very different version from 3.68, so a LOT (im serious) of packets moved fields around or changed opcode numbers, and thats what breaks. its a version gap, not a hole in the server. that also means most of it is fixable by lining the packets back up, not by writing whole features from scratch.
about login: the 121 BR client logs in through a web launcher with a token, not a normal user/password. that launcher is not in this drop, so login ships as a test setup, not real auth. right now every client logs in as a fixed test account (testbr0 to testbr255), picked from the login token, and there is no password check. so out of the box you just connect and youre in as a test account. (you can change it and uncomment the real login check etc...)
to launch the create create a launch.bat put this inside and runt it:
Code:
things that must match or the client gets kicked: ClientVersion in ServerConfig.JSON has to equal the client version, the password salt in Settings.ini has to be the same one your db was hashed with, and the client locale/region has to be allowed. AccessUFL should stay false unless you know your file list matches.
Screenshots (rz has 5 attachments limit and i am to lazy to upload somewhere else):
server source:
client:
-
database:
-
please add to git and host elsewhere so it keep alive if any link get down
I'll answer any interesting questions here (I'd love to answer questions about reverse engineering, since PB uses VMProtect. It required dumping from memory and doing many fun things to get to this point! i also doesnt lose my time doing sniffer things on official), so feel free to ask anything BUT don't be stupid, it's 2026 if you can't log in because 1 + 1 != 2 (or you do something like that:
i will not answer, just use Codex/Claude Code/OpenCode/Pi/OMP/Devin or another AI, it might be much easier than you coming here to ask.
first, 'If I have seen further, it is by standing on the shoulders of giants', this server is built upon these two sources:
- I used 'server-dev-v3-cmess' (i saw it on gh), so thanks to DeleteUser2465, whoever you are, it was very useful.
- 'PointBlank 3.68 Server for Development (OSM-Monitor)' (I know there’s some drama surrounding this source, but I don't care), so thanks to empireb, pavel, garry, and all the others I don't know.
- luxtown, without you this will never be possible
- @imchui, you provided some resources here on ragezone that make my life easier
- im sure there is more people to thank (except julianoramos01) but i dont know anyone in the pb scene so thats it.
I will never sell anything. All I do will be public; any fool can know. the point is to understand.
whats inside
- full C# source (.NET 4.8): Plugin.Core, Server.Auth, Server.Game, Server.Match, OSM-Monitor, CryptoLib, and the DEV-Team.sln
- precompiled build in binary/, runs as is (i will not scan on virustotal, you can do it and i recommend. but is better if you build your own binary)
- nuget packages bundled
- client 121 BR with .sif to localhost
- databse
- login into lobby, with nick, gold, rank, nick color/border/card
- shop: grid, buying with gold and cash, periods/variants, goods are loaded from clietn shop.dat (you need fix if want to use db shop)
- create and join rooms
- bots in challenge/AI mode, they spawn and play the match...
- a lot of other things
- back to lobby after a match has some byte drift so if i remember correct cash for example show as 0 until you do other action
- random boxes open and grant, but some reward indices still need checking
- mission/quest panels open without crashing, but the content is still partial (empty presets)
- spectator/GM observer slots are partial idk if this exist on older versions, but is something fun RE
legend:
- [V] works, validated live
- [P] partial (works but incomplete/rough) (P complais bytedrift and opcode problems too!)
- [D] byte drift (packet fields moved, wrong layout)
- [X] broken
- [?] dont know / never tested
- [V] login (token test shim -> testbr accounts)
- [?] auto account creation
- [V] channel / server select screen (nick color + namecard fixed)
- [V] character select / channel screen basic info
- [?] real token auth (web launcher path)
- [V] lobby enter (nick, gold, rank)
- [P] MyInfo refresh (2371 basic-block drift noted)
- [V] lobby user list / waiting list nick source
- [V] toolbar / top menu clickable
- [V] lobby chat
- [V] shop grid / display (server DB push)
- [V] buy with gold
- [V] buy with cash
- [V] periods / variants
- [V] in-session buy display refresh (can need relog)
- [P] random box open + grant (reward indices unverified)
- [P] capsule popup
- [?] gift shop (send / receive)
- [?] repair
- [?] plus point / enchant
- [P] mission card shop (anti-crash bootstrap; real 2521 pending)
- [V] inventory list
- [V] equip weapon
- [V] equip character
- [V] equip persists on relog
- [V] name card / nick color
- [P] use item
- [?] delete item
- [V] create room (rulebook / matchType fixed)
- [P] join room (join crash fixed) but big drift here that cause cause problem on battle start
- [V] room list
- [V] slot change / team balance
- [P] slot state enum (client +2 remap)
- [P] observer / spectator slots
- [?] ready / start gating
- [?] kick vote
- [?] room invite
- [X] match start / loading <- big drift here
- [?] spawn (real players)
- [V] bots spawn + play (challenge / AI)
- [V] bot action UDP (cipher ported)
- [?] fire / hit sync (UDP)
- [?] respawn / death / round end
- [P] back to lobby / post-match
- [V] character preview lobby (blue resource swap)
- [V] weapon-hold animation (HK33 open-arms fix)
- [?] create character
- [V] weapon type cap (HK33 crash fix)
- [?] clan create
- [?] clan list / filter
- [?] clan member info
- [?] clan war / season
- [?] clan medal / mark
- [P] quest list / panel (opens, empty presets)
- [P] mission card panel (tab crash gated)
- [P] battlepass
- [?] season challenge / season pass buy
- [?] competitive / ranking
- [?] titles / tags
- [V] friends
- [V] messenger / notes
- [?] redeem code
- [?] webshop
- [V] rcon (i think it works xd)
- [?] gift system
- [?] event portal
- [?] ticket
about login: the 121 BR client logs in through a web launcher with a token, not a normal user/password. that launcher is not in this drop, so login ships as a test setup, not real auth. right now every client logs in as a fixed test account (testbr0 to testbr255), picked from the login token, and there is no password check. so out of the box you just connect and youre in as a test account. (you can change it and uncomment the real login check etc...)
to launch the create create a launch.bat put this inside and runt it:
Code:
Kod:
@echo off
cd /d "%~dp0"
start "" "PointBlank.exe" /token AAECAwQFBgcICQoLDA0OMg== /launcher PBLauncher
things that must match or the client gets kicked: ClientVersion in ServerConfig.JSON has to equal the client version, the password salt in Settings.ini has to be the same one your db was hashed with, and the client locale/region has to be allowed. AccessUFL should stay false unless you know your file list matches.
Screenshots (rz has 5 attachments limit and i am to lazy to upload somewhere else):
server source:
-
database:
-
please add to git and host elsewhere so it keep alive if any link get down
I'll answer any interesting questions here (I'd love to answer questions about reverse engineering, since PB uses VMProtect. It required dumping from memory and doing many fun things to get to this point! i also doesnt lose my time doing sniffer things on official), so feel free to ask anything BUT don't be stupid, it's 2026 if you can't log in because 1 + 1 != 2 (or you do something like that:
i will not answer, just use Codex/Claude Code/OpenCode/Pi/OMP/Devin or another AI, it might be much easier than you coming here to ask.

