CO Packet decryption.

Hi, i recently made a Java proxy, I'm wondering if anyone would like to share with me the CO packet encryption/decryption packet structure.

I wouldn't mind it for testing purposes, thanks.

Umm i cant help you with your packet problem but i wanted to ask you, would you be releasing this in the future?

Sammi

What language did you write the proxy in? So you were able to get pass the Open SSL? The packet structure is the easy part once you are pass the Open SSL.

Which packet structure are you looking for? The older version or the newer version. Are you going to be using your proxy on private servers or the actual CO Servers?

"the Open SSL", as you call it, is a sign that you don't know what Open SSL is.

You don't get past "the Open SSL", you use OpenSSL encryption algorithms to get past the initial handshake and to decrypt/encrypt all other packets.

Of all the algorithms in OpenSSL, only 2 are needed and both are not OpenSSL specific. Both may be ported to Java (I have done this, so it is possible) and used in a proxy written in java (my proxy and CIDProxy are proof). The 2 algorithms that are used are visible in the disassembled client as strings referencing files in the openssl package (can be found on sourceforge.net).

The implementation of these 2 is not quite straightforward (you need to fit them with the packets TQ uses during the initial handshake).

Quote:

Originally Posted by iliveoncaffiene "the Open SSL", as you call it, is a sign that you don't know what Open SSL is. You don't get past "the Open SSL", you use OpenSSL encryption algorithms to get past the initial handshake and to decrypt/encrypt all other packets. Of all the algorithms in OpenSSL, only 2 are needed and both are not OpenSSL specific. Both may be ported to Java (I have done this, so it is possible) and used in a proxy written in java (my proxy and CIDProxy are proof). The 2 algorithms that are used are visible in the disassembled client as strings referencing files in the openssl package (can be found on sourceforge.net). The implementation of these 2 is not quite straightforward (you need to fit them with the packets TQ uses during the initial handshake).

what these 2 algorithms are?
could you explain more in detail?

Quote:

Originally Posted by onpaint what these 2 algorithms are? could you explain more in detail?

He has given you all the information you need to find them....as well as a link to the OpenSSL package, what more detail do you want? short of caff giving the answer out.

Quote:

Originally Posted by iliveoncaffiene "the Open SSL", as you call it, is a sign that you don't know what Open SSL is. You don't get past "the Open SSL", you use OpenSSL encryption algorithms to get past the initial handshake and to decrypt/encrypt all other packets. Of all the algorithms in OpenSSL, only 2 are needed and both are not OpenSSL specific. Both may be ported to Java (I have done this, so it is possible) and used in a proxy written in java (my proxy and CIDProxy are proof). The 2 algorithms that are used are visible in the disassembled client as strings referencing files in the openssl package (can be found on sourceforge.net). The implementation of these 2 is not quite straightforward (you need to fit them with the packets TQ uses during the initial handshake).

How come you used a program to make it windows executable/native code, could have just obfuscated it and left it as java class files :P

I'll take a look into some OpenSSL wrappers for java, if no port it to java myself, thanks for the co-operation.

i write a simple client to connect to Conquer Game Server,
the server sent first packet to me before i send any data.
is that packet a handshake packet?
why not the client should send the first handshake packet?
and what information in that packet?
how can i decode it?
is there any references or docs i can find in the internet?
Thanks

Quote:

Originally Posted by onpaint i write a simple client to connect to Conquer Game Server, the server sent first packet to me before i send any data. is that packet a handshake packet? why not the client should send the first handshake packet? and what information in that packet? how can i decode it? is there any references or docs i can find in the internet? Thanks

Upon connecting is enough to get the server to send data first.

you wont find any wrappers for what you need, and the Java implementations that are already out there are inadequate (poorly coded or not exactly like OpenSSL). I copied a good portion of my implementation from the gnu-crypto package for Java. The function you need is a modification of a block cipher algorithm that allows for any number of bytes to be encrypted/decrypted at a time (block ciphers normally require the array to be a multiple of it's block size).
So you may copy the block cipher method from gnu-crypto, then look into OpenSSL and make your own copy of its function.
I really wish I could tell you the function or at least the algorithm, but it's still closed knowledge so I have to help you help yourself :P

k Disassembled the client, half of the strings found are about cryptography, lots of packages/class names i have no idea where to start.

RSA/DSA may possibly be the 2 algorithm's used, looked through gnu.crypto.cipher.* and i have a feeling Anubis is the one you used.

Before i possibly waste a lot of time attempting, is there any more hints you'd like to throw at me :) would help.

i need it plez