About bjx stealing accs..

firstly, i dnt know this person well u guys know the previous bjx bot like 1 year ago or so?.. (forgot the date) it has his email there.. so i added him

then 1/2 weeks ago he suddenly signed in.. i asked him who he is (cuz i forgot) and he say i added him, i only played conquer so i asked him if he play conquer, and he ask me if i know chinese cuz he doesn't know english well.

then i remembered he is the one who made bjx, so i asked him if it is possible to make an updated version, he said he will start on it soon maybe finsh in a week or so, then a few days before the actual release he gave me 1.0 and asked me to test it out so i canot post it yet unless its after the release

the one he gave me has his acc not removed from the bjx yet so.. there goes the preview i posted then after 1/2 someone posted the link here..

so i just asked him about the stealing account thing

i asked him this
ta men suo ni de nei ge bjx hui ba wo men de account send gei ni?

it means ( does bjx steals ur acc? )

and i showed him this
<xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx
xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx
xx xx xx xx xx xx xx xx xx xx> c6 cd c7 c7 c7 <xx
xx xx xx xx xx xx xx xx xx> c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 <xx
xx xx xx xx xx xx xx xx xx> c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 <xx
xx xx xx xx xx xx xx> c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7
c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00
and told him about wad meow said and asked him how come?

and his reply was
no
then..
zhi you zhang hao ,mei you password 。 ( only account name no password )

next.. i asked him how come?

he replied : zhang hao wo men xu yao ,yin wei wo men yao yan zheng ( we need the name becoz we need identification ),

wo men shi shou fei ruan jian ( we will need to imply this so we can collect the fees later on )

then i ask him again and again he OR she keep saying only name... only name..

nothing else i know

so ededdyedwardo was correct, anyone really sure it sends password and server name too? to the person? and not login server?

well my noob tros account got the pw changed and couldnt get it back since it was my friends orginal character and he quit. and i dont have the info

its obvious hes going to scam the accounts, why else would he release the program and spam every single server with a link to his site? nothing in it for him if he just gives it away for free except wasted time.

READ!!!

He/she/it is going to later make people pay money to use the bot. That's why it was advertised.

i htink we can make it to not connect to bjx servers and make it still work, emulating bjx server response

If you read the BJX steals your account forum...I read that later on SHE plans to make BJX pay to play and all the money is going to.....charity (surprising isn't it?)

it sends not onli user but user + pw + server name.. something is wrong wif it SHE lied

Peach of u say what is true then can we use the .dll that someone posted on the forum to override the bjx bot...couse i havent done that yet and doesn it even help to block from theft?


--smile--

if u use it.. it will crash always..like the others said..some replaced and cant use it too

well i replaced the .dll with the one i found in the forum and it doesnt crash for me bjx works perfect, but i really dont kno if its working

try using that dll with that 1.0 versino, it's the one i used since bjx came out from mr teenie, and it workss fine for me.

da bien hen chou

I noticed that noone has yet posted a proper proof, so here is it.

Frame 161 (362 bytes on wire, 362 bytes captured)
Ethernet II, Src: 00:11:d8:9b:58:d0, Dst: 00:50:fc:83:84:2c
Internet Protocol, Src Addr: 192.168.1.3 (192.168.1.3), Dst Addr: 205.209.152.249 (205.209.152.249)
User Datagram Protocol, Src Port: 3521 (3521), Dst Port: 17733 (17733)
Data (320 bytes)

0000 00 50 fc 83 84 2c 00 11 d8 9b 58 d0 08 00 45 00 .P...,....X...E.
0010 01 5c 29 f8 00 00 80 11 e7 22 c0 a8 01 03 cd d1 .&#092;)......"......
0020 98 f9 0d c1 45 45 01 48 b9 53 c6 cd c7 c7 c7 a6 ....EE.H.S......
0030 a5 a4 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0040 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0050 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0060 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 a6 ................
0070 a6 a6 a5 a5 a5 a4 a4 a4 c7 c7 c7 c7 c7 c7 c7 c7 ................
0080 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0090 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00a0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 94 ................
00b0 a6 b7 b7 af ae b5 a2 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00c0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00d0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00e0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00f0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0100 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0110 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0120 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 00 00 00 00 00 00 ................
0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0160 00 00 00 00 00 00 00 00 00 00 ..........

Notice that this packet is being sent to 205.209.152.249, which is the BJX server not a Conquer Online related server.

My Info:
login: abc
password: aaabbbccc
server: sapphire

Ok, in the packet you send 3 informations.
1. a6 a5 a4
2. a6 a6 a6 a5 a5 a5 a4 a4 a4
3. 94 a6 b7 b7 af ae b5 a2

According to meow's character table:
a = a6
b = a5
c = a4
s = 94
p = b7
h = af
i = ae
r = b5
e = a2

So the above data decrypted:
1. a b c
2. a a a b b b c c c
3. s a p p h i r e

Which is exactly my login data. Coincidence?

User account and server I can understand, but password I think is a huge no no.

just decrypt it wif meow's char table