Register for your free account! | Forgot your password?

You last visited: Today at 09:57

  • Please register to post and access all features, it's quick, easy and FREE!


BJX bot unpacked

Discussion on BJX bot unpacked within the CO2 Exploits, Hacks & Tools forum part of the Conquer Online 2 category.

Reply
 
Old   #1
 
elite*gold: 0
Join Date: Jun 2005
Posts: 99
Received Thanks: 0
I've unpacked the UPX packing on the BJX 1.1 bot, and as of now this unpacked version wont execute but whenever I get around to making this one run i'll post up the final one. Anyone who cares to can go ahead and do so, it only takes a simple bit of knowledge to do so... there's just no real need till the app goes P2P.

Though.. you can open it in IDA or your fav disasm app and browse around and find things and such, as all of the strings and functions are intact.
Attached Files
File Type: ibf post-85-1123981533.ibf (102.2 KB, 218 views)



jMerliN is offline  
Old 08/14/2005, 03:09   #2
 
elite*gold: 0
Join Date: Jun 2005
Posts: 113
Received Thanks: 0
Quote:
Originally posted by jMerliN@Aug 14 2005, 03:05
I've unpacked the UPX packing on the RJX 1.1 bot, and as of now this unpacked version wont execute but whenever I get around to making this one run i'll post up the final one. Anyone who cares to can go ahead and do so, it only takes a simple bit of knowledge to do so... there's just no real need till the app goes P2P.
Well done. Don't you mean BJX?
In that case, we need to look into the source code. Remove the US/PW sending to BJX and response-requiring mechanism. Then, we need to find out where we're getting Trojan.Bat.Deltree.m from, as well as any other suspicious code.
With that, one of our better coders might be able to make a little EPVP Version using a few similar ideas or code.


Cryptic is offline  
Old 08/14/2005, 03:14   #3
 
elite*gold: 0
Join Date: Jun 2005
Posts: 99
Received Thanks: 0
Quote:
Originally posted by Cryptic+Aug 13 2005, 20:09--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Cryptic @ Aug 13 2005, 20:09)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin--jMerliN@Aug 14 2005, 03:05
I&#39;ve unpacked the UPX packing on the RJX 1.1 bot, and as of now this unpacked version wont execute but whenever I get around to making this one run i&#39;ll post up the final one. Anyone who cares to can go ahead and do so, it only takes a simple bit of knowledge to do so... there&#39;s just no real need till the app goes P2P.
Well done. Don&#39;t you mean BJX?
In that case, we need to look into the source code. Remove the US/PW sending to BJX and response-requiring mechanism. Then, we need to find out where we&#39;re getting Trojan.Bat.Deltree.m from, as well as any other suspicious code.
With that, one of our better coders might be able to make a little EPVP Version using a few similar ideas or code. [/b][/quote]
Some of us from FuckGaming working on one that will have a public version

Also, the &#39;trojan&#39; that was supposedly detected is probably nothing more than a false positive. Many known trojans and viruses use a variant of UPX packing ( with a modified stub.. which is what this uses ) and something that is poorly written may see the packing method as a possible positive for a known trojan that uses the same UPX variant. If anything other than that, it may have detected the sending of information to the private IP address as a trojan-like act and matched it to a known trojan&#39;s behaviour but I am quite positive there is no virus or trojan in this bot.
jMerliN is offline  
Old 08/14/2005, 03:25   #4
 
elite*gold: 0
Join Date: Jul 2005
Posts: 639
Received Thanks: 43
Quote:
Originally posted by jMerliN@Aug 14 2005, 03:05
I&#39;ve unpacked the UPX packing on the BJX 1.1 bot, and as of now this unpacked version wont execute but whenever I get around to making this one run i&#39;ll post up the final one. Anyone who cares to can go ahead and do so, it only takes a simple bit of knowledge to do so... there&#39;s just no real need till the app goes P2P.

Though.. you can open it in IDA or your fav disasm app and browse around and find things and such, as all of the strings and functions are intact.
Great work, you got that done in less then an hour and you had to figure out how to unpack an exe that was packed with a modified UPX. Now, once it goes pay to use, we should be able to easily crack the bot, and jMerlin has already said he will do so.

karma +


Matt.dk is offline  
Old 08/14/2005, 06:11   #5
 
elite*gold: 0
Join Date: Jul 2004
Posts: 981
Received Thanks: 46
Quote:
Originally posted by Matt.dk+Aug 14 2005, 03:25--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Matt.dk @ Aug 14 2005, 03:25)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin--jMerliN@Aug 14 2005, 03:05
I&#39;ve unpacked the UPX packing on the BJX 1.1 bot, and as of now this unpacked version wont execute but whenever I get around to making this one run i&#39;ll post up the final one. Anyone who cares to can go ahead and do so, it only takes a simple bit of knowledge to do so... there&#39;s just no real need till the app goes P2P.

Though.. you can open it in IDA or your fav disasm app and browse around and find things and such, as all of the strings and functions are intact.
Great work, you got that done in less then an hour and you had to figure out how to unpack an exe that was packed with a modified UPX. Now, once it goes pay to use, we should be able to easily crack the bot, and jMerlin has already said he will do so.

karma + [/b][/quote]
oO

lol how lame all he did was dumping the process he hasnt fixed the OEP or the tables so the prog doesnt work and thats the main part dumping is easy fixing is the art
Ultima is offline  
Old 08/14/2005, 06:18   #6
 
elite*gold: 0
Join Date: Jun 2005
Posts: 99
Received Thanks: 0
Quote:
Originally posted by Ultima@Aug 13 2005, 23:11

oO

lol how lame all he did was dumping the process he hasnt fixed the OEP or the tables so the prog doesnt work and thats the main part dumping is easy fixing is the art
xD
jMerliN is offline  
Old 08/14/2005, 06:29   #7
 
elite*gold: 0
Join Date: Jul 2005
Posts: 639
Received Thanks: 43
Quote:
Originally posted by Ultima+Aug 14 2005, 06:11--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Ultima @ Aug 14 2005, 06:11)</td></tr><tr><td id='QUOTE'>
Quote:
Originally posted by [email protected] 14 2005, 03:25
<!--QuoteBegin--jMerliN
Quote:
@Aug 14 2005, 03:05
I&#39;ve unpacked the UPX packing on the BJX 1.1 bot, and as of now this unpacked version wont execute but whenever I get around to making this one run i&#39;ll post up the final one.* Anyone who cares to can go ahead and do so, it only takes a simple bit of knowledge to do so... there&#39;s just no real need till the app goes P2P.

Though.. you can open it in IDA or your fav disasm app and browse around and find things and such, as all of the strings and functions are intact.

Great work, you got that done in less then an hour and you had to figure out how to unpack an exe that was packed with a modified UPX. Now, once it goes pay to use, we should be able to easily crack the bot, and jMerlin has already said he will do so.

karma +
oO

lol how lame all he did was dumping the process he hasnt fixed the OEP or the tables so the prog doesnt work and thats the main part dumping is easy fixing is the art [/b][/quote]
The oem/tables have not been fixed yet, any person who can read a dumped exe knows that. The fact that its now dumped is what counts right now. Besides, as I type this I am talkin&#39; to him, he is fixing the oem/tables right now. And it will be cracked the day the bot turns to pay to use mode, which is rumored to be, August 10th.

I didn&#39;t think it was lame, I was talking to him in TS the whole time, I&#39;d personally like to see you go dump an exe that is packed with a modified UPX, when you don&#39;t know immidiately how to do it.
Matt.dk is offline  
Old 08/14/2005, 06:42   #8
 
elite*gold: 0
Join Date: Jul 2004
Posts: 981
Received Thanks: 46
Quote:
Originally posted by Matt.dk+Aug 14 2005, 06:29--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Matt.dk @ Aug 14 2005, 06:29)</td></tr><tr><td id='QUOTE'>
Quote:
Originally posted by [email protected] 14 2005, 06:11
Quote:
Originally posted by [email protected] 14 2005, 03:25
<!--QuoteBegin--jMerliN
Quote:
Quote:
@Aug 14 2005, 03:05
I&#39;ve unpacked the UPX packing on the BJX 1.1 bot, and as of now this unpacked version wont execute but whenever I get around to making this one run i&#39;ll post up the final one. Anyone who cares to can go ahead and do so, it only takes a simple bit of knowledge to do so... there&#39;s just no real need till the app goes P2P.

Though.. you can open it in IDA or your fav disasm app and browse around and find things and such, as all of the strings and functions are intact.

Great work, you got that done in less then an hour and you had to figure out how to unpack an exe that was packed with a modified UPX. Now, once it goes pay to use, we should be able to easily crack the bot, and jMerlin has already said he will do so.

karma +

oO

lol how lame all he did was dumping the process he hasnt fixed the OEP or the tables so the prog doesnt work and thats the main part dumping is easy fixing is the art
The oem/tables have not been fixed yet, any person who can read a dumped exe knows that. The fact that its now dumped is what counts right now. Besides, as I type this I am talkin&#39; to him, he is fixing the oem/tables right now. And it will be cracked the day the bot turns to pay to use mode, which is rumored to be, August 10th.

I didn&#39;t think it was lame, I was talking to him in TS the whole time, I&#39;d personally like to see you go dump an exe that is packed with a modified UPX, when you don&#39;t know immidiately how to do it. [/b][/quote]
lol that shows that you don`t know what you are talking about

its decrypted and unpacked in memory when its loaded it takes about 10 seconds to load and dump it and i already did it the day i got the bot like i said its no big deal to dump it to fix the oep and the tables is the art
Ultima is offline  
Old 08/14/2005, 06:45   #9
 
elite*gold: 0
Join Date: Jul 2005
Posts: 639
Received Thanks: 43
Quote:
Originally posted by Ultima+Aug 14 2005, 06:42--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (Ultima @ Aug 14 2005, 06:42)</td></tr><tr><td id='QUOTE'>
Quote:
Originally posted by [email protected] 14 2005, 06:29
Quote:
Originally posted by [email protected] 14 2005, 06:11
Quote:
Originally posted by [email protected] 14 2005, 03:25
<!--QuoteBegin--jMerliN
Quote:
Quote:
Quote:
@Aug 14 2005, 03:05
I&#39;ve unpacked the UPX packing on the BJX 1.1 bot, and as of now this unpacked version wont execute but whenever I get around to making this one run i&#39;ll post up the final one.* Anyone who cares to can go ahead and do so, it only takes a simple bit of knowledge to do so... there&#39;s just no real need till the app goes P2P.

Though.. you can open it in IDA or your fav disasm app and browse around and find things and such, as all of the strings and functions are intact.

Great work, you got that done in less then an hour and you had to figure out how to unpack an exe that was packed with a modified UPX. Now, once it goes pay to use, we should be able to easily crack the bot, and jMerlin has already said he will do so.

karma +

oO

lol how lame all he did was dumping the process he hasnt fixed the OEP or the tables so the prog doesnt work and thats the main part dumping is easy fixing is the art

The oem/tables have not been fixed yet, any person who can read a dumped exe knows that. The fact that its now dumped is what counts right now. Besides, as I type this I am talkin&#39; to him, he is fixing the oem/tables right now. And it will be cracked the day the bot turns to pay to use mode, which is rumored to be, August 10th.

I didn&#39;t think it was lame, I was talking to him in TS the whole time, I&#39;d personally like to see you go dump an exe that is packed with a modified UPX, when you don&#39;t know immidiately how to do it.
lol that shows that you don`t know what you are talking about

its decrypted and unpacked in memory when its loaded it takes about 10 seconds to load and dump it and i already did it the day i got the bot like i said its no big deal to dump it to fix the oep and the tables is the art [/b][/quote]
Actually, I do know what I&#39;m talking about. First he took a upx unpacker and tried to unpack it, he couldn&#39;t compensate for the modification so he searched online for unpacking a packed + modded upx exe, and he ended up doing what you said, dumping it from the memory using ollydbg.
Matt.dk is offline  
Old 08/14/2005, 06:46   #10
 
elite*gold: 0
Join Date: Jun 2005
Posts: 99
Received Thanks: 0
It&#39;s almost done anyway so stop fighting ladies >.<
jMerliN is offline  
Old 08/14/2005, 07:13   #11
 
elite*gold: 0
Join Date: Jul 2005
Posts: 664
Received Thanks: 13
Loving to see that it&#39;ll be cracked before it is even pay to use.

Oh yea and I think I read somewhere Aug 24th is when it will be.
MrTeenie is offline  
Old 08/14/2005, 08:51   #12
 
elite*gold: 0
Join Date: Apr 2005
Posts: 689
Received Thanks: 212
Here is my unpacked BJX 1.1 bot .exe. Should work OK.
I finished with a router and UDP server but can&#39;t get over a little UDP protocol related bug, hope I can finish it before anyone else does :P
Attached Files
File Type: ibf post-85-1124002266.ibf (102.6 KB, 135 views)
chocoman4k is offline  
Old 08/14/2005, 09:45   #13
 
elite*gold: 0
Join Date: Apr 2005
Posts: 198
Received Thanks: 6
Quote:
Originally posted by chocoman4k@Aug 13 2005, 23:51
Here is my unpacked BJX 1.1 bot .exe. Should work OK.
I finished with a router and UDP server but can&#39;t get over a little UDP protocol related bug, hope I can finish it before anyone else does :P
thats why i love you and ur job :P
sabbathin is offline  
Old 08/14/2005, 15:31   #14
 
elite*gold: 0
Join Date: Jan 2005
Posts: 296
Received Thanks: 12
Quote:
Originally posted by chocoman4k@Aug 14 2005, 08:51
Here is my unpacked BJX 1.1 bot .exe. Should work OK.
I finished with a router and UDP server but can&#39;t get over a little UDP protocol related bug, hope I can finish it before anyone else does :P
+ lots of karma if it works =) man you rox =D


nickel is offline  
Reply



« How to Sort of HACK People | Market scam »

Similar Threads
New Vip Unpacked
11/01/2009 - WarRock Hacks, Bots, Cheats & Exploits - 16 Replies
http://i35.tinypic.com/b6pmxs.jpg Rules to start Hack: #1: Start WarRock #2: Press The 1st OK #3: Press the 2nd OK #4: Fast as you can open the Injector Just after you press on OK. #5: It will be Injected.
How to use Unpacked?
10/21/2009 - Dekaron - 3 Replies
I just started this game looks good but I'm not really sure what I'm suppose to do with these unpacked stuff....I've been reading tutorial but it's not helping very will if any one willing to offer me help I'll will be greatful....PM me will be helpful as will..thanks yall...
anyone got unpacked 4.7.4 ?
09/30/2009 - Dekaron - 11 Replies
anyone unpacked it yet? or should i give it a go and unpack it?
4.6.19 unpacked???
04/18/2009 - Dekaron - 12 Replies
as you know form previous post my unpacked files don't work well with other peoples pc. So I was wondering if the old unpacked still works and if not if someone can post one that does so I can readd it to my guide witch I will keep up and running.
what to do after unpacked..
05/07/2008 - Dekaron - 5 Replies
i unpacked data file, but it make a new folder named "data" also inside is another file called "data.pak file" and its over 2gig... my question is, do you guys use the unpack files as reference? or do u guys just replace the old data folder with new one created by unpacker?



All times are GMT +2. The time now is 09:57.


Powered by vBulletin®
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.

BTC: 3KeUpz52VCbhmLwuwydqxu6U1xsgbT8YT5
ETH: 0xc6ec801B7563A4376751F33b0573308aDa611E05

Support | Contact Us | FAQ | Advertising | Privacy Policy | Terms of Service | Abuse
Copyright ©2019 elitepvpers All Rights Reserved.