XSniff - Silkroad Online packet sniffer

XSniff is a advanced silkroad online packet sniffer / injector.

Current version: **1.0.7 (r7)**

Features
---
Packet analyser features

* Parsing data types on selection (supports decimal / hexadecimal / ascii)

Packet injector features

* Injecting any Client -> Server or Server -> Client packet
* Repeatable packet support (send packet each x specified miliseconds)

Display filter features

* Pause displaying incoming packets
* Display only Client -> Server packets
* Display only Server -> Client packets
* Displaying only packets whose opcodes are within allowed list
* Display only opcodes whose opcodes are not blocked

19.07.2017 update
* Settings are now being saved on change
* Support for changing fonts (will improve this later)

Screenshot
[Only registered and activated users can see links. Click Here To Register...]


Video guide


[Only registered and activated users can see links. Click Here To Register...]
[Only registered and activated users can see links. Click Here To Register...]

Credits:

Chernobyl (XSniff)
B1QB0SS (XSniff)
pushedx (SilkroadSecurityApi), [Only registered and activated users can see links. Click Here To Register...]
Salty (Ideas) [Only registered and activated users can see links. Click Here To Register...]
Valmiki (Ideas) [Only registered and activated users can see links. Click Here To Register...]

I'm open for new ideas.

Please, note that agent redirection packet is currently hardcoded. This is only tested and confirmed to work on vSRO v188 files.

what is that mean ? or what its used for ?

whats the difference between this and exdLoader auto-parser?

Quote:

Originally Posted by Isoline whats the difference between this and exdLoader auto-parser?

you can inject packets....

Add option to auto change packet like in filter.

this tool gonna be useful for Coders

for who will use this tool use Kaspersky Internet Security or any good anti virus
this tool will attack your programs or any .exe file
if you scan your "exe file"
you will get viurs.win23.Hidrag.a
anyway good luck

usefull. but same like edx loader :v

can someone #approve this ?
used virustotal: [Only registered and activated users can see links. Click Here To Register...]

Hey,
can you make it save the IPs and Ports? It doesn't save it for me.

Also can you make it use a monospaced font for the dump? The current one is a mess to read. Also please soften the colors. Hard white on black is a pain to watch at night.

Quote:

Originally Posted by grasvys112 can someone #approve this ? used virustotal: [Only registered and activated users can see links. Click Here To Register...]

we are waiting !

Quote:

Originally Posted by janicka Add option to auto change packet like in filter.

I was thinking about scripting system... Will do bit later.

Quote:

Originally Posted by florian0 Hey, can you make it save the IPs and Ports? It doesn't save it for me. Also can you make it use a monospaced font for the dump? The current one is a mess to read. Also please soften the colors. Hard white on black is a pain to watch at night.

Alright, I'll take care of saving settings. About fonts... I'll just give ability to change them on runtime.

19.07.2017 - 1.0.0.7 update
* Settings are now being saved in xml format
* Support for changing fonts. works on MainForm & PacketAnalyser only

Great work, haven't touched Silkroad in a long while, but thought I may pass some suggestions to you, if you're both looking to add anything:

1. One thing I always wanted included in pushedx tool was being able to replay logs. This could be done with a step button allowing you to send one packet at a time in the sequence. With this, potentially being able to bring this log up in the interface for you to manipulate the packet before you send it. This would allow for better parsing of packets especially with environments such as Fortress Wars or CTF as manually re-simulate them by sending all the movement packets etc. of objects.
2. Being able to label Opcodes

Quote:

Originally Posted by Eckoro Great work, haven't touched Silkroad in a long while, but thought I may pass some suggestions to you, if you're both looking to add anything: One thing I always wanted included in pushedx tool was being able to replay logs. This could be done with a step button allowing you to send one packet at a time in the sequence. With this, potentially being able to bring this log up in the interface for you to manipulate the packet before you send it. This would allow for better parsing of packets especially with environments such as Fortress Wars or CTF as manually re-simulate them by sending all the movement packets etc. of objects. Being able to label Opcodes

thanks for your suggestions.
we'll be sure to include them in the next version