[Release]Shaiya Packet Editor

11/13/2009 15:20 Master of Orion#46
so mal für ganz dumme.. mein englich ist mehr als schlecht was kann dieses tool eigentlich
11/15/2009 19:17 hehepwnz#47
I also tried to attack mobs with the use of packets, but server kicks me everytime
is it possible to do it without beeing kicked out of the game??
11/16/2009 18:41 ms​#48
Quote:
Originally Posted by hehepwnz View Post
I also tried to attack mobs with the use of packets, but server kicks me everytime
is it possible to do it without beeing kicked out of the game??
Encrypt them. ;O
11/18/2009 17:05 jes123#49
Hey all plz guys i just want to know wt the useful thing that we can get from this hack just explain it in an example plz cuz i did not get it even after i read all this i mean wt we can do by this thx alot all for ur effort and time u all ROCKS :)
12/10/2009 22:45 sarex3#50
yeah, what can i doo whit the tool XD i didn´t understand at all XD
01/10/2010 02:41 ThePatriarch#51
Quote:
Originally Posted by lucky89 View Post
Mh... i'm still trying to figure out what it is possible to do with the packet sniffer ....
i tried to work on linking lapises but didnt have much luck ... i think i'll need some hints :p

i tried to link 4 different lapis to see the differences on the packets sent

LVL 3 MP lapis -> linked

SEND>>05 26
SEND>>01 08 02 14 00 04 00 00 <== this seems the packet about the lapis *
RECV>>0C 0D 68 F3 F5 1B 00
RECV>>01 05 CF 59 17 00 81 FE 00 75 D9 E9 44 F6 75 5E 41 8A 40 C1 43
RECV>>01 08 01 02 14 00 00 04 03 3B 00 00 00 00 FD 62 0F 00 00 00
RECV>>0B 05 7D 14 1B 00 02 0A 14
RECV>>03 0E 47 00 00 00 00 F7 0C F1 44 70 D0 6F 41 AA 3A AA 43
RECV>>01 05 A8 8A 1E 00 84 6F 00 B8 1E EB 44 E6 C9 6C 41 03 87 BC 43


LVL 5 mp -> broke

SEND>>05 26
SEND>>01 08 01 11 00 01 00 00 <=== **
RECV>>06 05 53 D6 19 00 0B
RECV>>05 05 39 A9 16 00 00 00 4D 00 32 00
RECV>>03 0E 3B 00 00 00 00 DE FA E9 44 80 2F 5E 41 D0 6B B9 43
RECV>>01 05 39 A9 16 00 84 32 01 C6 E4 EB 44 46 E1 6A 41 60 0F B1 43
RECV>>01 02 5C A7 15 00 01 00 01 00 B0 EE 44 7A 14 72 41 D7 E3 C3 43 88 05 00 00 00 00 00 00
RECV>>01 08 00 01 11 00 00 01 01 3D 00 00 00 00 49 D1 09 00 00 00

LVL 3 int -> linked

SEND>>05 26
SEND>>01 08 01 16 00 02 00 00 <== **
RECV>>0C 0D 69 48 D5 19 00
RECV>>01 05 BB AC 1F 00 81 ED 00 D0 1E EE 44 36 62 70 41 82 51 AC 43
RECV>>01 05 5C A7 15 00 81 5F 01 7A C2 EE 44 C6 CC 6C 41 75 2D C0 43
RECV>>05 26 F4 01 00 00
RECV>>01 08 01 01 16 00 00 02 00 11 00 00 00 00 35 A9 09 00 00 00

LVL 3 rec -> broke

RECV>>01 05 A6 27 16 00 84 0D 01 CB 1D EE 44 36 94 6D 41 8A E6 C2 43
RECV>>03 06 B2 F9 88 41 00 28 73 E3 44 98 51 A3 43
SEND>>01 08 02 0D 00 02 00 00 <== **
RECV>>01 08 00 02 0D 00 00 02 01 0A 00 00 00 00 94 4F 09 00 00 00

tried also selling items to npc ... but it just drops connection with server, so i dont know really what to try...

p.s.
btw lilpro the HPviewer is awesome i think it could be improved a lot if u can see also the target element ... something like the ranger/assassin skill :)

Hmm this is a good bace point ill run my own tests to try and expand on it
02/05/2010 22:44 selimersoz#52
Well I think every data has 2 Bytes identifier in front. "01 08" would be "Lapis Linkage". So writing 2 examples of datas of our concern here.

LVL 3 MP lapis -> linked
SEND>>01 08 02 14 00 04 00 00
RECV>>01 08 01 02 14 00 00 04 03 3B 00 00 00 00 FD 62 0F 00 00 00

LVL 5 mp -> broke
SEND>>01 08 01 11 00 01 00 00
RECV>>01 08 00 01 11 00 00 01 01 3D 00 00 00 00 49 D1 09 00 00 00

Game usually adresses items by sending the inventory page and slot no.

So 01 08 02 14 00 04 00 00 means
(01 08)Link (02 14) lapis in 21th slot of page 3 to (00 04) item in 5th slot of page 1 (00 00) ?using hammer in 1st page 1st slot?

14 is in HEX so its 21 in DECIMAL and they start counting from 0. I'm not sure about the hammer part but its obviously that. So there's nothing to increase chance, it just says to link the items in given slots and server itself checks to see if they are linkable and calculates chance for itself.

There re 2 extra bytes (3rd and 6th ones) in the received data which is 01 for success and 00 for failure. They probably tell the client to remove item from inventory. A 01 in front of item data will mean item is also broken etc. I dont know about the rest of the bytes, maybe telling how much money spent but we really dont need to know those since its only received data.

SELLING SHOULD BE LIKE THIS
SEND>>03 07 01 00 01
(03 07 means 'sell' so constant values), inv page,slotno,amount
I was surprised to see this work, because it doesnt mention any npc or such. They can detect buying if they compare your location with the NPC you r buying from but in selling u just sell it xD theres no additional information sent

Good Luck.

ATTACK
SEND>>03 05 F3 56 BF 48
03 05, 4 byte target id
target id is a harder topic which u need to get from RECV datas, I didnt bother doing yet

SKILL USAGE
SEND>>11 05 02 00 00 00 00
11,05,skillno,4byte target id
skillno is the order u learn the skills

SUB SKILL
SEND>>06 05 76
06 05, sub skill no (laugh, victory etc.)

ITEM USAGE
SEND>>0A 05 01 00
0A,05,inventory page,slot of page

PUT ITEM INTO WAREHOUSE
SEND>>04 02 01 00 64 14
04 02,inv page, page slot, warehouse page(starts from 64 i think), page slot

MOVE ITEM INSIDE WAREHOUSE
SEND>>04 02 64 13 64 00
04 02, warehouse page, page slot, destinationpage,dest.slot
I think I tried moving in and out of locked wh pages, didnt work :/

Btw, I really thank u for sharing this wonderful thing. I used to believe this thing would be the ultimate item for various hacks but I think they improved security. I see the files ripped from the game are now encrypted somehow, they werent before. I was trying to do this myself so I guess I'm late :( wish I saw this before.

I found the XOR where game uses to encrypt but not an expert enough to do injection. I use Visual Basic 6.0 so the codes r kinda hard to understand for me. Don't like asking stuff much but if u know basic could you please show me a way to do this in VB6.0?
03/20/2010 13:54 Ajbloody#53
theirs a way to get gold fast with this but the steps are probably hard to do

1.identify the gold amount your recieveing

2.find packet you sent to recieve the gold

3. resend the packet till you have all the gold you want

(you probably could do this for most items)
05/17/2010 16:37 selimersoz#54
Guys sending packets is nice but is there anyway for us to fake received data? It's obviously possible but is there a program around i mean. Such thing would come in handy for those who wanna make movies/comics with shaiya graphics. You could just fake packets and make people/mobs appear, move around etc. You wouldnt need to lvl toons as actors, you will fake your actors.
05/17/2010 19:28 lilprohacker#55
Quote:
Originally Posted by selimersoz View Post
Guys sending packets is nice but is there anyway for us to fake received data? It's obviously possible but is there a program around i mean. Such thing would come in handy for those who wanna make movies/comics with shaiya graphics. You could just fake packets and make people/mobs appear, move around etc. You wouldnt need to lvl toons as actors, you will fake your actors.
[Only registered and activated users can see links. Click Here To Register...]
06/18/2010 04:05 MaLaWarE#56
Quote:
Originally Posted by selimersoz View Post
Guys sending packets is nice but is there anyway for us to fake received data? It's obviously possible but is there a program around i mean. Such thing would come in handy for those who wanna make movies/comics with shaiya graphics. You could just fake packets and make people/mobs appear, move around etc. You wouldnt need to lvl toons as actors, you will fake your actors.
thats why theres somthing called [GM] permissions :p

I need an EP3 packet editor, can anybody help me find one or edit these to fit an EP3 client?
06/20/2010 21:13 annabenni#57
Hey Guys,
when i use the packet editor, to send codes to the server i get disconnected...i also have tried to use an older version of game.exe with the no GG Clientmaker from lilprohacker but it still wont work.is there any chance to send a code to server without GM conditions? thank you for your help
06/21/2010 02:37 shaiyaseller#58
Quote:
Originally Posted by annabenni View Post
Hey Guys,
when i use the packet editor, to send codes to the server i get disconnected...i also have tried to use an older version of game.exe with the no GG Clientmaker from lilprohacker but it still wont work.is there any chance to send a code to server without GM conditions? thank you for your help
take "SEND>>" out of the command. Just put the numbers ^^
06/21/2010 03:42 MaLaWarE#59
a little more details maybe wouldnt hurt
06/21/2010 20:00 shaiyaseller#60
Quote:
Originally Posted by selimersoz View Post
Btw, I really thank u for sharing this wonderful thing. I used to believe this thing would be the ultimate item for various hacks but I think they improved security. I see the files ripped from the game are now encrypted somehow, they werent before. I was trying to do this myself so I guess I'm late :( wish I saw this before.
There is still very you can do with packet injection. I'd rather not give out some details, because it could be catastrophic, but packet injection is still VERY useful in the world of shaiya, and can be used to bring about some wonderful exploits :)