BJX Bot Client is out!

mithril · 08/14/2005, 08:34

and yes. there will not be anymore updates to the program unless it takes off. ($$ rolling in for the owner)
so get yourself together, maybe I can hook up a deal with him for mass accounts registering.
afterall, i'm sure you guys want auto party function right ?:>

DreamWalker · 08/14/2005, 12:10

well so you mean in like maybe 1 month the program stop and work and we haw to pay for it?
thats bad

~~Bountey~~ · 08/14/2005, 13:04

Quote:

Originally posted by mithril@Aug 14 2005, 08:34
and yes. there will not be anymore updates to the program unless it takes off. ($$ rolling in for the owner)
so get yourself together, maybe I can hook up a deal with him for mass accounts registering.
afterall, i'm sure you guys want auto party function right ?:>

Auto party as in Auto joi team?
ehmm yea we would but we gotta pay right?
and can i ask,lets say u dont pay/buy account,can u still use the old versions?

compwiz · 08/14/2005, 13:36

I've had 5 miners mining for more then 24 hours at the TC mines now, I made a good amount of silver. But not one of them had a gem in the warehouse man, so I'm thinking that I might have set it up wrong. Could anyone tell me where I might have gone wrong? Thanks

-Sokhar- · 08/14/2005, 14:43

So, does it contain a keylogger or no?

inSertCoiN · 08/14/2005, 17:40

Quote:

Originally posted by inSertCoiN+--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (inSertCoiN)</td></tr><tr><td id='QUOTE'> Ohhh.... good... well if u are the person which u claim to be and comunicate with the creator on regular basis then u should be able to provide us with answers...
1. What the hell is trojan doing in the program?
2. Why the hell username & passwords are send to an private IP adress?
And pls dont give me the "will use it in future to identify users" **** cause i could think of more than 10 diferent ways to do that.1 simple way is to send only username which is always a constant. <!--QuoteBegin--mithril

there is no trojan. the only thing that is inside, is used to send ID and not PASSWORD to the creator.
the reason why it is used to identify user is because in future when the program is PAY TO USE, it is only allowed to registered Account IDs. which is to say if the program send the ID to the server and it is not in its list, it will not function.

[/b][/quote]
Well can u pls ask him why does he need the password??? Username is complitly enough for that purpose cause its a constant that canot change and the user can change his pass every 5 min. so it doesent meen a **** when identifying.

mithril · 08/14/2005, 18:07

Quote:

Originally posted by DreamWalker@Aug 14 2005, 12:10
well so you mean in like maybe 1 month the program stop and work and we haw to pay for it?
thats bad

it's till the 20th August 2005.
and my date showss 15 August 2005 now :>
actually it's just 5 more days

mithril · 08/14/2005, 18:11

Well can u pls ask him why does he need the password??? Username is complitly enough for that purpose cause its a constant that canot change and the user can change his pass every 5 min. so it doesent meen a **** when identifying.

the program does not have a keylogger, neither does it sends ur password to their server. what it only requires is account ID for verfication for future paying users

inSertCoiN · 08/14/2005, 18:24

Quote:

the program does not have a keylogger, neither does it sends ur password to their server. what it only requires is account ID for verfication for future paying users

Well i may not know much about packages and encription but someone here does.

Quote:
Hi all,
i just gone to try this tool and made some verification, this program isn't clean, it send ur account information in an encrypt way.
bjx is wpe proof so if u try to catch the trame with wpe, it modify the original ip and port to something like 0.0.0.0
try to capture ur network with an other sniffer and u'll get some first trame initialise by bjx on 205.209.152.249:177333 like this:

Code:

<xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx xx> c6 cd c7 c7 c7 <xx xx xx xx xx xx xx xx xx xx> c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 <xx xx xx xx xx xx xx xx xx xx> c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 <xx xx xx xx xx xx xx xx> c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

1st xx bytes:
is the trame structure

2nd xx bytes:
is the login

3nd xx bytes:
is the password

4nd xx bytes:
is the server name

shinichikudo · 08/14/2005, 21:58

Or this one.... Much clearer from chocolate2k

Quote:

Frame 161 (362 bytes on wire, 362 bytes captured)
Ethernet II, Src: 00:11:d8:9b:58:d0, Dst: 00:50:fc:83:84:2c
Internet Protocol, Src Addr: 192.168.1.3 (192.168.1.3), Dst Addr: 205.209.152.249 (205.209.152.249)
User Datagram Protocol, Src Port: 3521 (3521), Dst Port: 17733 (17733)
Data (320 bytes)

0000 00 50 fc 83 84 2c 00 11 d8 9b 58 d0 08 00 45 00 .P...,....X...E.
0010 01 5c 29 f8 00 00 80 11 e7 22 c0 a8 01 03 cd d1 .&#092......"......
0020 98 f9 0d c1 45 45 01 48 b9 53 c6 cd c7 c7 c7 a6 ....EE.H.S......
0030 a5 a4 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0040 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0050 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0060 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 a6 ................
0070 a6 a6 a5 a5 a5 a4 a4 a4 c7 c7 c7 c7 c7 c7 c7 c7 ................
0080 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0090 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00a0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 94 ................
00b0 a6 b7 b7 af ae b5 a2 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00c0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00d0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00e0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
00f0 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0100 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0110 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 ................
0120 c7 c7 c7 c7 c7 c7 c7 c7 c7 c7 00 00 00 00 00 00 ................
0130 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0160 00 00 00 00 00 00 00 00 00 00 ..........

Notice that this packet is being sent to 205.209.152.249, which is the BJX server not a Conquer Online related server.

My Info:
login: abc
password: aaabbbccc
server: sapphire

Ok, in the packet you send 3 informations.
1. a6 a5 a4
2. a6 a6 a6 a5 a5 a5 a4 a4 a4
3. 94 a6 b7 b7 af ae b5 a2

According to meow's character table:
a = a6
b = a5
c = a4
s = 94
p = b7
h = af
i = ae
r = b5
e = a2

So the above data decrypted:
1. a b c
2. a a a b b b c c c
3. s a p p h i r e

Which is exactly my login data. Coincidence?

krepu · 08/15/2005, 01:41

Quote:

Originally posted by mithril@Aug 14 2005, 08:34
and yes. there will not be anymore updates to the program unless it takes off. ($$ rolling in for the owner)
so get yourself together, maybe I can hook up a deal with him for mass accounts registering.
afterall, i'm sure you guys want auto party function right ?:>

paying for this bot? r u out of ur mind? we r not paying for the real game (tq might be a bunch of lazzy *** programmers, but at least the made the game), so im not gonna pay for a cheat. in fact i think no one should pay for this. just lets think in a way of cracking the bot, i still think that re-routing the packet to some local port and then validating from there can be a good way to bypass the check.

MrTeenie · 08/15/2005, 02:50

Guys no discusing the sending of username in and password in this topic please, I'd like to keep this thread clean for working Guides, Patches and fixes for the bot... ONLY. If a MOD could remove the post about the account data being sent I'd really appritiate it.

ultimatedestroyer · 08/15/2005, 03:14

Yeah I did think people shouldnt spam a pinned topic..This will be my last post on here to limit your spam on the thread.

monkeyleader · 08/15/2005, 10:06

Quote:

Originally posted by MrTeenie@Aug 15 2005, 02:50
Guys no discusing the sending of username in and password in this topic please, I'd like to keep this thread clean for working Guides, Patches and fixes for the bot... ONLY. If a MOD could remove the post about the account data being sent I'd really appritiate it.

what are u trying to keep people from finding out that this program might be sending somebody our account names AND passwords? or is that completely legit?

Linux · 08/15/2005, 10:32

No but there is other threads for that,this is for the program itself and what updates for it.