How to crack authentication for Exiled Bot v0.50f

07/25/2015 21:48 0x029A#1
This fakes authentication for Exiled Bot v0.60
- see post [Only registered and activated users can see links. Click Here To Register...]

# INSTALL
1. Download [Only registered and activated users can see links. Click Here To Register...] and unpack to a folder
2. Install latest [Only registered and activated users can see links. Click Here To Register...]
- make sure to check "Add Python to PATH" when installing
3. Download and install [Only registered and activated users can see links. Click Here To Register...] ([Only registered and activated users can see links. Click Here To Register...])
4. Start "exauth_setup.bat" from ZIP as Administrator
5. Edit hosts-file as Administrator and add a new line "127.0.0.1 exiled-bot.net"
7. Copy config.ini from zip to bot's folder Configuration/default/config.ini.

7. Get the latest offsets from this post and replace the old ones in the script.

# RUN
8. Start "exauth.bat" from ZIP as Administrator (This has to be running while the bot is used.)
9. Start bot and type some username and password.
10. Farm stuff.


NOTES:
- This thread is long and old, if you want infos, read from the back. New stuff starts around page 13-14 or so.
- It is also possible to use one crack for a whole set of VMs, in that case setup the crack on the host machine and use the VMs' hosts-file to redirect exiled-bot.net to the hosts IP. So per VM you only have to change the hosts-file and not install all that stuff.
- You can even run the crack on a linux-host to be used from VMs running windows. (depending on versions some changes may be needed to the script (replace libmproxy with mitmproxy) but it works)
- This is all just for the lulz.

GETTING OFFSETS IF YOU HAVE A LICENSE:
- Use extra copy of bot so to not mess up the cracked config.
- Install and start the crack.
- Use your license to login.
- The crack's log-window will show the offsets.
- Copy and paste the offsets to forum.
- Make sure you do not add any extra spaces, or remove them before posting.
07/26/2015 00:08 maxiaxi#2
I apologize. I understand terribly English. I will be very grateful if you create video. Thanks in advance
07/26/2015 02:16 0x029A#3
i won't make a video, sorry. it wouldn't help you much as i do not use windows anyways. maybe somebody else will.
[Only registered and activated users can see links. Click Here To Register...] here is an edited version of v0.50f dll.
but you still need to setup a server or otherwise spoof the http response with XML from the first post.
07/26/2015 07:51 staber339#4
Quote:
Originally Posted by 0x029A View Post
i won't make a video, sorry. it wouldn't help you much as i do not use windows anyways. maybe somebody else will.
[Only registered and activated users can see links. Click Here To Register...] here is an edited version of v0.50f dll.
but you still need to setup a server or otherwise spoof the http response with XML from the first post.
cant downlaod the file on that and ive tried everythign also can u show me where ur suppose to put that responce in fiddler
07/26/2015 13:38 maxiaxi#5
People if at someone it turned out create video please. It is impossible to me
07/26/2015 17:48 0x029A#6
the download works, but editing the file yourself really isn't that hard. it's one search and replacing 8 characters with 0s. you could use hxd for example to do this ([Only registered and activated users can see links. Click Here To Register...]).

for fiddler you can use the autoresponder to return contents of a file when exiled-bot.net/community/interface/licenses.php is requested. the file returned would contain the above XML.

another method would be to use a webserver. you can run a small free one easily on windows.
miniweb ([Only registered and activated users can see links. Click Here To Register...]) should work, start it with "miniweb.exe -p 443" and create in the miniweb folder htdocs/community/interface/licenses.php with the above XML as content. then set windows's hosts file to resolve exiled-bot.net to localhost.

i know this is a bit complicated if you haven't done something like this before, but it works.
somebody more skilled in reverse-engineering could probably make a fully cracked dll rather easily, but as it works right now i don't really have the ambition.
07/26/2015 18:50 Ronya#7
it's not works on iis.
miniweb won't lauch on 443 port

Code:
Host: 192.168.2.1:443
Web root: htdocs
Max clients (per IP): 32 (16)
URL handlers: 2
Dir listing enabled
Error starting HTTP server
i guess windows blocking 443 port

i got what wrong with server: C:\> netstat -aon | findstr 0.0:443
Wmware service was listen 443 port i stoped it and now it works, but bot shows Elite status as free user i used your dll
also bot stops after 45lvl.

server log: [Only registered and activated users can see links. Click Here To Register...]

seems crack works but im still Free user i typed some shit in user/key and it said unlocked but Elite status still Free user and bot stops after 45lvl.
07/26/2015 20:36 0x029A#8
ronya: have you setup you windows hosts file? i think recent windows versions have it at C:\Windows\System32\Drivers\etc\hosts
you need to add a line to have exiled-bot.net be redirected to your webserver. probably something like
localhost exiled-bot.net
or
192.168.2.1 exiled-bot.net
(the ip miniweb uses)
so that when the bot tries to reach exiled-bot.net it reaches your server instead.
also have you placed the xml in the right directory?

you can verify is the webserver/redirect work by calling [Only registered and activated users can see links. Click Here To Register...] in your browser - it should give you the xml.

that being said i use an external webserver with the following php to respond with the xml above:
<?php
header("Content-type: text/xml; charset=utf-8");
$xml = file_get_contents('php://input');
if(strpos($xml,"activate") !== false) {
echo '<?xml version="1.0" ?>
<methodResponse>
<params>
<param>
<value>
<struct>
<member>
<name>RESPONSE</name>
<value><string>OKAY</string></value>
</member>
<member>
<name>USAGE_ID</name>
<value><int>1</int></value>
</member>
</struct>
</value>
</param>
</params>
</methodResponse>
';
} else {
echo '<?xml version="1.0" ?>
<methodResponse>
<params>
<param>
<value>
<struct>
<member>
<name>STATUS</name>
<value><string>ACTIVE</string></value>
</member>
<member>
<name>USES</name>
<value><int>1</int></value>
</member>

<member>
<name>MAX_USES</name>
<value><int>100</int></value>
</member>
</struct>
</value>
</param>
</params>
</methodResponse>
';
}
?>

but i don't think miniweb can do php - for the above script you have to use a different webserver with php support.

edit: did not see your log on the first read - seems redirection is fine. try a php-enabled webserver with the script above.
07/26/2015 20:43 Ronya#9
in my hosts: 192.168.2.1 exiled-bot.net
path: miniweb\htdocs\community\interface\licenses.php

as you can see on miniweb server screen [Only registered and activated users can see links. Click Here To Register...] the bot connects to licenses.php that's mean everything is correct
07/26/2015 21:02 0x029A#10
see updated answer. i think i forgot in my first post that i return 2 sets of XML depending on the bot's request and used a php-script for that. i thought it wasn't necessary anymore, but it seems it still is. the above php script is what i am currently using as licenses.php and it works. anyway your logs show your redirection working, and you managed to setup a server at all - so you're on the right track. keep trying.
the plus with this method is that it allows the bot to run in hidden mode, instead of normal mode like the other crack. it has to say "elite user" in the status, the message doesn't mean anything.
07/26/2015 21:17 Ronya#11
Its worked with your new xml code in the php server!!!

I used Quick php server: [Only registered and activated users can see links. Click Here To Register...]

Thank you very much!
07/26/2015 21:28 0x029A#12
congrats! you get a thanks for not giving up after 1 try.
07/26/2015 23:27 staber339#13
Quote:
Originally Posted by 0x029A View Post
see updated answer. i think i forgot in my first post that i return 2 sets of XML depending on the bot's request and used a php-script for that. i thought it wasn't necessary anymore, but it seems it still is. the above php script is what i am currently using as licenses.php and it works. anyway your logs show your redirection working, and you managed to setup a server at all - so you're on the right track. keep trying.
the plus with this method is that it allows the bot to run in hidden mode, instead of normal mode like the other crack. it has to say "elite user" in the status, the message doesn't mean anything.
how do u download it says i need premium
07/27/2015 00:59 0x029A#14
click on the left button where it says free user.
07/28/2015 11:30 skygon#15
it's working thx !

edit : here is how it should looks like : [Only registered and activated users can see links. Click Here To Register...]