[P.O.C.] Begin hacking on DarkOrbit client..

11/01/2012 11:48 W00dL3cs#1
Well, given that this is my first post in this section, it will probably hard for you to believe to what I'm gonna write right now. But please, just read :D

My name is Alex, and I'm a 18-years-old and self-taught developer.
I came across the hacking scene first time last year, with my Fruit Ninja hacks, but I already had attempted the Habbo Hotel emulation scene before.

Anyway, after this my little presentation, here comes the point.

Few days ago, my friend showed me DarkOrbit, and I thought it was very interesting.

Well, I don't really like the game itself, but since that day, I'm enjoying quite a lot on reversing-engineering it.

I've just given a look at this section, and with the exclusion of some bots, I found that there is not really a great interest in the hacking of this game.

So, I'm here today with some of my proof-of-concepts.

Many of you complained about the fact that usually developers need some day to update packets, and it's frustrating for both: them, and you.

So, what if I told you it's possible to update game messages in just.... few seconds?

Still hard to believe? Just take a look at this:

[Only registered and activated users can see links. Click Here To Register...]

It's an app I wrote in about an hour, and it can update all the messages ids and opcodes in seconds!

I've tested it on the last two builds of the game (13 and 14, if I'm not wrong), and it works like a charm :D

But it's not all: given that I'm also working on the first (I suppose?) Darkorbit emulator, I felt the needing to have all the packet structures on hand, so that I could have consulted them when needed.

Just about packets, I still can't understand why some of you still log them with hex strings, while their structure is so fuc*ing easy!

I'll explain it here, in a few lines.

Every packet is handled as a byte array, in which:
  • The first 2 bytes represent the length of the message
  • The next 2, instead, the message ID
  • The next 2 the version of the protocol
  • The next bytes.. well, they depend on the packet itself

Anyway, back to the topic, I just leave here another couple of images, to better show you the results.

Protocol XML file:

[Only registered and activated users can see links. Click Here To Register...]

Structures XML file:

[Only registered and activated users can see links. Click Here To Register...]

First steps of my emulator...

[Only registered and activated users can see links. Click Here To Register...]

Now that I've started with the talking... want to hear your comments!

Hope the discussion is interesting enough.. ! :D

Cya,

- Alex
11/01/2012 11:54 alien1980#2
I don't know very good programing thing but what you want to do ?? to hack the game and do all accounts your lol ?? or to say to bot developers how to do a very fast update ? or you want to be a "famous" hacker lol

(ma sei italiano??) are you from italy ??
11/01/2012 12:00 W00dL3cs#3
Quote:
Originally Posted by alien1980 View Post
I don't know very good programing thing but what you want to do ?? to hack the game and do all accounts your lol ?? or to say to bot developers how to do a very fast update ? or you want to be a "famous" hacker lol

(ma sei italiano??) are you from italy ??
My intent is just to share knowledge, nothing else.

PS: Si, sono italiano :P
11/01/2012 12:03 Prime.™#4
Quote:
Originally Posted by alien1980 View Post
I don't know very good programing thing but what you want to do ?? to hack the game and do all accounts your lol ?? or to say to bot developers how to do a very fast update ? or you want to be a "famous" hacker lol

(ma sei italiano??) are you from italy ??
No
You think wrong he his doing little hack
Example speeding up Hellstorm Reload ):
11/01/2012 12:04 yusaca#5
humm it´s interesting...
11/01/2012 12:09 Xperia™#6
I don't understand much from hacking, but this look's good,
But, can you explain us, what you want to "hack"?
ACP, items, players or server's?
ok thats all

Greetz Xperia™ ;)
11/01/2012 12:10 alien1980#7
Quote:
Originally Posted by W00dL3cs View Post
My intent is just to share knowledge, nothing else.

PS: Si, sono italiano :P
eh si, si vedeva da google traduttore :P

sorry for italian language

ti invio i dati del ts per pm se vuoi cosi mi spieghi sta roba n'attimo oppure inviami un pm con la traduzione in italiano siccome ci ho capito ma poco LOL
11/01/2012 12:10 TheMiszczu#8
So give us this app + function to send packets :P
11/01/2012 12:11 alien1980#9
Quote:
Originally Posted by Xperia™ View Post
I don't understand much from hacking, but this look's good,
But, can you explain us, what you want to "hack"?
ACP, items, players or server's?
ok thats all

Greetz Xperia™ ;)
ohh this is what i wanted to say :D
11/01/2012 12:16 Requiable#10
Looks pretty nice. I hope it's not fake like the "new server" from the other guy :facepalm:
Hope you finish it quickly and release it ;)
11/01/2012 12:18 cucurigu_cucu#11
and dont post all the bugs just like that in the forum, because those from BP can see then and fix them...
11/01/2012 12:25 bossfong#12
Nice work!
I know that the major bots already have automatically updating packet ids, but awesome stuff though, looks really nice. Where have you got all the names from? Do you still have unnamed structures?

Thanks so much for bringing some quality knowledge to the community :)
11/01/2012 12:40 W00dL3cs#13
Quote:
Originally Posted by bossfong View Post
Nice work!
I know that the major bots already have automatically updating packet ids, but awesome stuff though, looks really nice. Where have you got all the names from? Do you still have unnamed structures?

Thanks so much for bringing some quality knowledge to the community :)
I have my ways to edit AS3 without directly have access to the source code :P
11/01/2012 12:55 bossfong#14
Quote:
Originally Posted by W00dL3cs View Post
I have my ways to edit AS3 without directly have access to the source code :P
Please elaborate. I don't see how you can retrieve those obfuscated names
11/01/2012 12:59 L1m4ro#15
This seems really interesting. Good job!
Can't wait to see DARKORBIT private servers! :D