TheWarZ Packet enc.

[detCode]

i have some packets


18 192.168.1.8:62576 66.180.197.58:443 53 Send
0000 16 03 01 00 30 8E D0 52 A6 87 A5 C5 6E AB 87 64 ....0..R....n..d
0010 AF 7A 50 69 9B 75 57 A3 AE D6 65 D2 16 7E C4 03 .zPi.uW...e..~..
0020 E5 12 65 FD 52 4B 5B E6 1C 03 C8 F6 67 5A 00 09 ..e.RK[.....gZ..
0030 D1 29 41 17 F2 .)A..


27 192.168.1.8:62576 66.180.197.58:443 213 Send
0000 17 03 01 00 D0 A4 4F 02 6D 50 39 3C 2D C1 5C 57 ......O.mP9<-.\W
0010 43 4D 57 FB 7A 86 AF 2D C2 05 D8 A5 F9 5F AA DC CMW.z..-....._..
0020 41 D0 9C 5A 95 5B 94 30 4E 64 19 73 8B 21 22 95 A..Z.[.0Nd.s.!".
0030 30 DB 56 E5 AF 50 15 29 5B CC CA 63 CB BB 02 E8 0.V..P.)[..c....
0040 D4 1C 27 FA 88 36 7E 53 D5 61 EC 33 38 21 B1 2C ..'..6~S.a.38!.,
0050 81 81 96 15 60 94 58 CD 99 D9 9B CD FE AF 5E 5F ....`.X.......^_
0060 FA DB 48 CE EF E9 63 C7 9D 71 50 01 B7 EE 88 9D ..H...c..qP.....
0070 2C 4D 3E C8 17 B3 EB 95 F7 92 3E 58 ED 63 18 CB ,M>.......>X.c..
0080 04 FB 0A 41 11 08 46 B4 34 D9 A4 CA 7C 25 43 05 ...A..F.4...|%C.
0090 7D 2B 46 04 3C 3E A8 C0 1A 5C 2A 5D C9 0B 2C C2 }+F.<>...\*]..,.
00A0 B2 FC 36 9B 43 9A 5D 82 6C 8B B3 3C F8 E8 27 C0 ..6.C.].l..<..'.
00B0 D3 24 DC 69 6C D1 A0 84 A0 A9 BE A9 E9 64 B5 BE .$.il........d..
00C0 6B 1B DD 1B 62 3E AB EC 5A EE A0 4E 7F 99 45 C6 k...b>..Z..N..E.
00D0 5D A3 0D A1 A8 ]....


Any idea for solve warz packets encryption ?

[Shawak]

Du könntest mal überprüfen ob die Encryption die gleiche wie von War Inc ist. Vielleicht hast du ja Glück.

[detCode]

i dont know german. Please speak english in this thread..

[Shawak]

You could try to compare the encryption with War Inc one, if you are lucky it's the same encryption method.

[detCode]

Originally Posted by Shawak

You could try to compare the encryption with War Inc one, if you are lucky it's the same encryption method.

thank you for reply. I will check

and serverport 443 ssl *.*

[vedmaka]

It is standart https

[Cambios]

you can reverse the encrypt function in ida pro or ollydbg to encrypt the pakets?

[『 』]

Originally Posted by detCode

i have some packets


18 192.168.1.8:62576 66.180.197.58:443 53 Send
0000 16 03 01 00 30 8E D0 52 A6 87 A5 C5 6E AB 87 64 ....0..R....n..d
0010 AF 7A 50 69 9B 75 57 A3 AE D6 65 D2 16 7E C4 03 .zPi.uW...e..~..
0020 E5 12 65 FD 52 4B 5B E6 1C 03 C8 F6 67 5A 00 09 ..e.RK[.....gZ..
0030 D1 29 41 17 F2 .)A..


27 192.168.1.8:62576 66.180.197.58:443 213 Send
0000 17 03 01 00 D0 A4 4F 02 6D 50 39 3C 2D C1 5C 57 ......O.mP9<-.\W
0010 43 4D 57 FB 7A 86 AF 2D C2 05 D8 A5 F9 5F AA DC CMW.z..-....._..
0020 41 D0 9C 5A 95 5B 94 30 4E 64 19 73 8B 21 22 95 A..Z.[.0Nd.s.!".
0030 30 DB 56 E5 AF 50 15 29 5B CC CA 63 CB BB 02 E8 0.V..P.)[..c....
0040 D4 1C 27 FA 88 36 7E 53 D5 61 EC 33 38 21 B1 2C ..'..6~S.a.38!.,
0050 81 81 96 15 60 94 58 CD 99 D9 9B CD FE AF 5E 5F ....`.X.......^_
0060 FA DB 48 CE EF E9 63 C7 9D 71 50 01 B7 EE 88 9D ..H...c..qP.....
0070 2C 4D 3E C8 17 B3 EB 95 F7 92 3E 58 ED 63 18 CB ,M>.......>X.c..
0080 04 FB 0A 41 11 08 46 B4 34 D9 A4 CA 7C 25 43 05 ...A..F.4...|%C.
0090 7D 2B 46 04 3C 3E A8 C0 1A 5C 2A 5D C9 0B 2C C2 }+F.<>...\*]..,.
00A0 B2 FC 36 9B 43 9A 5D 82 6C 8B B3 3C F8 E8 27 C0 ..6.C.].l..<..'.
00B0 D3 24 DC 69 6C D1 A0 84 A0 A9 BE A9 E9 64 B5 BE .$.il........d..
00C0 6B 1B DD 1B 62 3E AB EC 5A EE A0 4E 7F 99 45 C6 k...b>..Z..N..E.
00D0 5D A3 0D A1 A8 ]....


Any idea for solve warz packets encryption ?

This is a standart .aspx Packet.
Well, did u got this if you are in the Survivor Screen?
If yes then its the Profile1.aspx or the ItemInfo.aspx

Well SSL is encrypted with a RSA Key, without this key its useless
to try to decrypt it. You can try to do a Dump of the Game when you get this.