ScriptVessel Protocol?

[Foxsilver]

Protocol SV 1.** (Tested 1.02 to 1.15) Updated
[Client] SV 1st SEND

POST .... HTTP/1.1
Contents-Type: .....
User-Agent: [name exe]
Host: [rand host]
..
g=annnn[v][MD5(ScriptVessel ID)][MD5(Password)][MD5(New Password){*}]

[Server] SV 1st SEND

HTTP/1.1 302
..
Location: [web check]
....

<%
'ASP CODE
Response.Redirect("[web check]")
Response.ContentType = "text/html"
Response.Flush
Response.End
%>

[Client] SV 2nd SEND

GET [web check] HTTP/1.1
Connection: .....
User-Agent: [name exe]
Host: [rand host]
Cookie: ASPSESSIONID[ID]=[Cookie]

[Server] SV 2nd SEND

HTTP/1.1 200 OK
Date: ...
..
<a MD5(UNKNOW)&[Message]>

• Updated at 2007-05-30:
  All Errors: <a MD5(ScriptVessel ID)&{[Client name exe error] |[Client Error version]|[Log Error MSG]} >
  OK Login: <a MD5(UNKNOW)&[Log OK MSG] >

------------------------------
[English]
---------
a=1 (Login) / 3 (Logout) / 4 (Change Password)
nnnn=unknow 4 numbers
[v]=Protocol version Ex.: sv v1.10=110 other sv v1.12=112 other sv v1.02=102

[Message]
->[Client name exe error] Sorry, The client is not accepted, Pls check it!#
->[Client Error version]Sorry, This client is updated, Pls download the new one!#
->[Log OK MSG]Confirms successfully,the Account will be Expired at YYY-mm-dd!#YYY-mm-dd ho:mi:se
->[Log Error MSG]Sorry, Username or Password Error!#

{*}=If this field is no wirte make MD5()=d41d8cd98f00b204e9800998ecf8427e
--------------
[Spanish]
----------
a=1 (Iniciar sessión) / 3 (Salir) / 4 (Cambiar contraseña)
nnnn=4 numeros desconocidos
[v]=Version del Protocolo Ej.: sv v1.10=110 otro sv v1.12=112 otro sv v1.02=102

[Message]
->[Error en nombre del exe] Sorry, The client is not accepted, Pls check it!#
->[Error de Version del Cliente] Sorry, This client is updated, Pls download the new one!#
->[Mensaje de Sessión OK] Confirms successfully,the Account will be Expired at YYY-mm-dd!#YYY-mm-dd ho:mi:se
->[Mensaje de Sessión Erroneo] Sorry, Username or Password Error!#

{*}=Si este campo esta vacio hará MD5()=d41d8cd98f00b204e9800998ecf8427e
---------------------------------------
[English]
---------
My question is in "[Server] SV 2nd SEND" how make "MD5(UNKNOW)"? it's prolly saved on ASPSESSIONID[ID]=[Cookie] with server
Prolly in "[Server] SV 2nd SEND" on "[Message]" check the !# Date and Time but i dont sure =S

can any one help me? thx

[Spanish]
----------
Mi pregunta es en "[Server] SV 2nd SEND" Como hace "MD5(UNKNOW)"? esto puede ser guradrado en ASPSESSIONID[ID]=[Cookie] por el server
Seguramente en "[Server] SV 2nd SEND" en "[Message]" comprueba !# Fecha y Hora pero no estoy seguro =S

Alguien me pude ayudar? gracias

[Foxsilver]

PHP Test Protocol (unfinished)

<?PHP
/*
 * *PHP SV Server Simulator for SV1.*
 * *Powered by Foxsilver (c) 2.007
*/
if (isset($_POST['simul'])) {
 echo "------------- Protocol Client Simulation -----------<br>";
 //Client MD5's
 $md5_id=MD5($_POST['id']);
 $md5_psw=MD5($_POST['pwd']);
 $md5_new_psw=MD5($_POST['new_pwd']);
 //Packed Sender
 $cli_get="g=".$_POST['proto']."????".$_POST['ver']."".$md5_id."".$md5_psw."".$md5_new_psw;
 echo "[Client] ".$cli_get."<br>";
 echo "-----------------------------------------------------<br>";
 echo "------------- Protocol Server Simulation -----------<br>";
 //Server
 *//Version protocol
 $ver_protocol=112;
 //Server Message
 $msg_protocol="Sorry, This client is updated, Pls download the new one!# ";
 $msg_wrong_user_pass="Sorry, Username or Password Error!# ";
 $msg_ok_login="Confirms successfully,the Account will be Expired at ";
 $msg_log_out_correct="Logout successfully!#";
 //Server Date time (-1 Hours for GMT+1 To GMT+0) GMT
 $gmt_time=strtotime("-1 hours", time());
 //MAKE Date Time SV server :O
 $time_part1=strftime("-%m-%d %H:", strtotime("+7 hours",$gmt_time));
 $time_ok=str_replace(0,"", $time_part1);
 //Sv server time
 $sv_time=str_replace("&",$time_ok, strftime("%Y&%M:%S", strtotime("+7 hours",$gmt_time)));
 //SQL simulatro user pass
 $check_usr=MD5("test");
 $check_pws=MD5("123456");
 $date_exp="2007-m-d";
 //PHP Options
 $check_get=explode("=", $cli_get);
 $vars=$check_get[1];
 $long_rand_num=4;
 $check_ver=substr($vars, $long_rand_num+1, strlen($ver_protocol));
 //Check protocol version
 if ($check_ver == $ver_protocol) {
 *$start_md5s=strlen($ver_protocol)+$long_rand_num+1;
 *//LogIn
 *if ($vars[0]== "1") {
 * $long_max=strlen($vars);
 * $long_null_pass=strlen(MD5(""));
 * $client_user_psw=substr($vars, $start_md5s, $long_max-$start_md5s-$long_null_pass);
 * $sql_user_pass=$check_usr."".$check_pws;
 * //WTF fu... MD5 =S isn't MD5(usrpss), *MD5(usr:pss), MD5(usr;pss), ....
 * if ($sql_user_pass == $client_user_psw) { echo "[SERVER] MD5(????)&".$msg_ok_login."".$date_exp."!#".$sv_time; }
 * else { echo "[Server] ".$md5_id."&".$msg_wrong_user_pass.""; }

 *}
 *//LogOut
 *elseif ($vars[0]== "3") { echo "[SERVER] MD5(???)&".$msg_log_out_correct."".$sv_time; }
 *//Change Password
 *elseif ($vars[0]== "4") {
 * $sql_user_pass=$check_usr."".$check_pws;
 * $sql_long=strlen($sql_user_pass);
 * $client_user_psw=substr($vars, $start_md5s, $sql_long);
 * if ($sql_user_pass == $client_user_psw) { echo "[Server] GOT New Pass MD5: ".substr($vars, $sql_long+$start_md5s, strlen($vars)-$sql_long-$start_md5s); }
 * else { echo "[Server] ".$md5_id."&".$msg_wrong_user_pass.""; }
 *}
 *else { echo "[Server] ?? (ERROR protocol WTF)"; }
 }
 else { echo "[Server] ".$md5_id."&".$msg_protocol."";}
 echo "<br>-----------------------------------------------------<br>";
}
?>
<form action="sv_simulator.php" METHOD="POST">
<select name="proto"><option value="1" <?PHP if($_POST['proto'] == 1) { echo "selected"; } ?>>Login</option><option value="3" <?PHP if ($_POST['proto'] == 3) { echo "selected"; } ?>>LogOut</option><option value="4" <?PHP if ($_POST['proto'] == 4) { echo "selected"; } ?>>Change Password</option></select><br>
<input type="hidden" name="ver" value="112">
ScriptVessel ID <input type="text" name="id" value="<?PHP echo $_POST['id']; ?>"><br>
Password <input type="text" name="pwd" value="<?PHP echo $_POST['pwd']; ?>"><br>
New Password <input type="text" name="new_pwd" value="<?PHP echo $_POST['new_pwd']; ?>"><br>
<input type="Submit" name="simul" value="Simule it!"><br></form>

ASP Code (unfinished) Updated
1 form on html and <input type="text" name="g">
value of this input annnn[v][MD5(ScriptVessel ID)][MD5(Password)][MD5(New Password){*}][/CODE]
And u emule SV Client
{*}=If this field is no wirte make MD5()=d41d8cd98f00b204e9800998ecf8427e

Ex.: SVgoto113.aSp

<%
Dim sv_method
If Len(request.form("g")) > 0 Then
 *sv_method = request.form("g")
 *If Len(Session("emulator")) = 0 then
 * * Session("emulator") = sv_method
 * * 'Ex for protocol 112
 * * Response.Redirect("svck112.asp")
 * * Response.ContentType = "text/html"
 * * Response.Flush
 * * Response.End
 *End If
Else
 Response.Write("¬¬ no sv method")
End If
%>

Ex.: svck112.asp

<%
'Define Server Emulator vars
md5_start=9
md5_max_len=32
sv_version="112"
sv_error_version="Sorry, This client is updated, Pls download the new one!#"
sv_error_up="Sorry, Username or Password Error!#"
sv_error_option="SV Emulator, wrong choise man, u are bad ^^!#"
sv_ok_login="Confirms successfully,the Account will be Expired at "
sv_ok_logout="Logout successfully!#"
'Don't know the form =S
sv_ok_chnpss=""
'Adapting server time (Got Error)
locate_time=5
gmt_date=DateAdd("h",locate_time,Now())
locate_time=7
sv_date=DateAdd("h",locate_time,gmt_date)
'Error no got 0 on Len 1 Segs
if Len(second(sv_date)) = 1 Then
Correct_segs = "0" & second(sv_date)
else
Correct_segs=second(sv_date)
End If
'Error no got 0 on Len 1 Minuts
if Len(minute(sv_date)) = 1 Then
Correct_min = "0" & minute(sv_date) 
else
Correct_min = minute(sv_date)
End If
format_date="" & Year(sv_date) & "-" & Month(sv_date) & "-" & Day(sv_date) & " " & hour(sv_date) & ":" & Correct_min & ":" & Correct_segs
If Len(Session("emulator")) <> 0 then
 *g=Session.Contents("emulator")
 *Session.Abandon
 *Action=mid(g,1,1)
 *check_version=mid(g,6,3)
 *Dim user_sql_emul
 *Dim pass_sql_emul
 *'user MD5 = test
 *user_sql_emul="098f6bcd4621d373cade4e832627b4f6"
 *'pass MD5 = 123456
 *pass_sql_emul="e10adc3949ba59abbe56e057f20f883e"
 *' SQL Date user
 *expire_date_client="2007-12-31"
 *'user&pass from sv client
 *check_user=mid(g,md5_start,md5_max_len)
 *check_pass=mid(g,md5_start+md5_max_len,md5_max_len)
 *new_pass=mid(g,md5_start+md5_max_len+md5_max_len,md5_max_len)
 *if sv_version = check_version Then
 * Select Case Action
 * case 1
 * *if user_sql_emul = check_user AND pass_sql_emul = check_pass Then
 * * *Response.Write("<a "&"MD5(??)"&"&"&sv_ok_login&""&expire_date_client&"!#"&format_date&">")
 * *else
 * * Response.Write("<a "&mid(g,md5_start,md5_max_len)&"&"&sv_error_up&" >")
 * *End if
 * case 3
 * *if user_sql_emul = check_user AND pass_sql_emul = check_pass Then
 * * *Response.Write("<a "&"MD5(??)"&"&"&sv_ok_logout&""&format_date&">")
 * *else
 * * Response.Write("<a "&mid(g,md5_start,md5_max_len)&"&"&sv_error_up&" >")
 * *End if * 
 * case 4
 * *if user_sql_emul = check_user AND pass_sql_emul = check_pass Then
 * * *Response.Write("Change Pass value to: "&new_pass)
 * *else
 * * Response.Write("<a "&mid(g,md5_start,md5_max_len)&"&"&sv_error_up&" >")
 * *End if 
 * case else
 * * Response.Write("<a "&mid(g,md5_start,md5_max_len)&"&"&sv_error_option&" >")
 * End Select
 *Else
 * Response.Write("<a "&mid(g,md5_start,md5_max_len)&"&"&sv_error_version&" >")
 *End if
End if
%>

[anantasia]

Did you capture all package for all time?

Sometime it's had timer to selfcheck by verfication again to Server.

After 1.12 every time you activate bot (press F11) it's will check entire program in memory for modify/trap process.

Anyway keepup your work.

[Foxsilver]

Originally posted by anantasia@May 31 2007, 08:22
After 1.12 every time you activate bot (press F11) it's will check entire program in memory for modify/trap process.

thx for the information
But isn't the problem now, when send the last packed: "<a MD5()&Confirms successfully,the Account will be Expired at EXPIRE_DATE!#DATE_TIME_SV>"
Got 2 problems:
1- MD5 i unknow how it make it, and leater SV client check it
2- DATE_TIME_SV, That's from server but when u login into real server with user & pass incorrect only send message balblablab!# and client make the time and show it, prolly when send the last packed and read the time from packed sv client make other time and compare it.

In other versions are very easy, only need make a sniff from a true user & password, modify exe for run in localhost and make a program to run in localhost and send this same packets, but now it change, now need make test, test ... for see whats the problem for this version

[mrlol]

fox gay