Quote:
Originally Posted by CptSky
On older client, the password was stored as plaintext in the memory and was sent as plaintext in the MsgRegister packet. It was easy to get the password of players :rolleyes:
|
Exactly. You could even run wireshark on a public network and get the password of players by watching the packets carefully.
Quote:
Originally Posted by ahmed104
in latest patch
there is no more Rc5
old Password Cryptography is using for hidden the place of password in HexDump but it decrypt after you login ... old Password Cryptography now isn't useful in last patch
|
That.. makes no sense. There's no reason the password would be stored after login, and especially not decrypted. As far as I know, the variable the password is stored in is nulled after you're forwarded to the game server..
Quote:
Originally Posted by _DreadNought_
I'll throw my few words and confirm, The password is never stored at a static address nor in plain text.
You can however mod the conquer.exe to store the plaintext in a static addr.
|
Well if you understand how to modify the structure of the machine code (not sure if you can do that with Olly, actually) you can just throw in a MOV or etc, or even push it into the free store, can't you?
Quote:
Originally Posted by { Angelius }
I believe that nothing is irreversible/impossible we just have to know how.
And yes the password is never stored as a plain text in the exe at least not in the current patch client's and the screen shoots you saw are not for the last patch.. i can tell by looking at the addresses in the cpu window.
|
I agree, those addresses are way off, and there's nothing like that anywhere around that range either. That's either a modified client, or extremely old client.