SOLUTION for DC!!!

04/21/2006 01:05 reccaster#91
Quote:
Originally posted by FSBlackDragun+Apr 21 2006, 00:51--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (FSBlackDragun @ Apr 21 2006, 00:51)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin--mijovic@Apr 20 2006, 22:24
FSBlackDragun , wat is the ip for bot server ?
From capturing all packets using Etheral

I got "222.111.150.223"

But Im not totally shure if thats the Only IP it uses... [/b][/quote]
act i'm pretty sure that's the gameserver
04/21/2006 01:08 FSBlackDragun#92
Well, Like I said, Im not totally shure because Etheral just bombards me with IP's to kinda guess about...

I cant even find a DL source for WPE Pro Alpha... :S
04/21/2006 01:12 korroke#93
why do ppl click silk bot? my silk.dll icon is already outside am i doing somthing wrong? and plus the user and password i cant use user-botter pw-bot it dc me >>
04/21/2006 01:12 reccaster#94
Quote:
Originally posted by FSBlackDragun@Apr 21 2006, 01:08
Well, Like I said, Im not totally shure because Etheral just bombards me with IP's to kinda guess about...

I cant even find a DL source for WPE Pro Alpha... :S
Because i'm in a relatively good mood ;P
[Only registered and activated users can see links. Click Here To Register...]
04/21/2006 01:19 FSBlackDragun#95
Thanks alot :D I owe ya one...

Ok with some testing around, I think I found the Right IP this time...

Etheral Picked up my outgoing packet with the "@1@" information going to 202.101.43.216

Also, I recieved the login failed packet from the same IP...

Sorry for being wrong the first time... (Last time I did it Etheral was showing all the packets as the same color, so it really made it confusing, This time around, It even highlighted the right packets for me)

EDIT: although, now I can ditch etheral and use WPE anyways 8D
04/21/2006 01:25 reccaster#96
Now for the tricky part someone logging a sucessfull login
04/21/2006 01:30 korroke#97
plz some1 T.T still dc with all those users and pw >> :cry:
04/21/2006 01:31 reccaster#98
lol you were right on the money
Code:
Name&#58; bot369.com
IP&#58; 202.101.43.47
Domain&#58;	bot369.com

Querying whois.crsnic.net&#58;43 for bot369.com...

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http&#58;//www.internic.net
for detailed information.


  Domain Name&#58; BOT369.COM
  Registrar&#58; XIN NET TECHNOLOGY CORPORATION
  Whois Server&#58; whois.paycenter.com.cn
  Referral URL&#58; http&#58;//www.paycenter.com.cn
  Name Server&#58; NS2.FOCUSDNS.COM
  Name Server&#58; NS1.FOCUSDNS.COM
  Status&#58; REGISTRAR-LOCK
  EPP Status&#58; clientUpdateProhibited
  EPP Status&#58; clientTransferProhibited
  EPP Status&#58; clientDeleteProhibited
  Updated Date&#58; 12-Sep-2005
  Creation Date&#58; 12-Sep-2005
  Expiration Date&#58; 12-Sep-2008
04/21/2006 01:34 FSBlackDragun#99
heh maybe we should recruit one of the somewhat pissed pay users from the bot258 site...

Im shure we could find one who is a little mad at how s**tty the pay system currently works...
04/21/2006 01:37 reccaster#100
@FSBlackDragun
could you post those 2 packets ?
according to some rumors all bots below 1.13 will stop working once released
so i'm wonder if there is some kind of ver auth in there
i'd go and log myself but since you already did no use in reinventing the wheel
04/21/2006 01:46 FSBlackDragun#101
k Let me re-capture the packets.. (didnt save when I exited :P) will only take a minute, then ill Edit them in...

I believe those are the two you were wanting, I found it somewhat nice how the bot reports your username :P lol once again, Good thing I have an old crap account to use...



Code:
1 192.168.2.2&#58;3388 202.101.43.216&#58;5228 137 Send 
0000 B2 11 89 00 00 00 00 00 00 00 0A 01 00 00 00 00  ................
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0020 00 00 00 00 00 00 01 00 00 00 73 68 61 73 6B 61  ..........shaska
0030 66 75 72 72 79 00 00 00 00 00 00 00 00 00 00 2B  furry..........+
0040 3F 40 31 40 00 00 00 00 00 00 00 00 00 00 00 00  ?@1@............
0050 00 00 00 00 00 00 00 00 00 00 65 64 39 36 33 36  ..........ed9636
0060 64 65 32 65 34 37 31 66 39 30 31 34 31 65 30 36  de2e471f90141e06
0070 66 35 34 39 65 30 66 65 34 34 31 61 64 30 37 36  f549e0fe441ad076
0080 36 64 00 00 00 00 00 00 00             6d.......
Code:
2 202.101.43.216&#58;5228 192.168.2.2&#58;3388 25 Recv 
0000 56 EE 19 00 00 00 00 00 00 00 02 01 02 00 00 00  V...............
0010 00 00 00 00 00 00 00 00 00             .........
Edit: Forgot to use the Code brackets :P
04/21/2006 01:47 korroke#102
ok nvm bout anything i said earlier
just wanna know wat u guys are doing xD
04/21/2006 01:58 reccaster#103
just username pw the usual no version auth i can see just a rumor i guess
04/21/2006 01:59 MyS#104
Bot login failed / post pay to use packet:
Code:
202.101.43.216&#58;5228 192.168.2.2&#58;3388 25 Recv 
0000 56 EE 19 00 00 00 00 00 00 00 02 01 02 00 00 00  V...............
0010 00 00 00 00 00 00 00 00 00             .........
Bot test user / pre pay to use packet:
Code:
202.101.43.216&#58;5228 192.168.1.103&#58;1950 25 Recv 
0000 BE 16 19 00 00 00 00 00 00 00 02 01 FF DD 54 00  ..............T.
0010 00 24 F0 FF FF FE 00 00 00             .&#036;.......
04/21/2006 02:02 reccaster#105
Oy thank you my kind sir