[Teaching Units] ProxyParadise! A step by step proxy tutorial!

[pro4never]

open the properties and allow unsafe code.

[OELABOELA]

Why try to use it? It doesn't connect anyways because of the new password encryption.

[pro4never]

Originally Posted by OELABOELA

Why try to use it? It doesn't connect anyways because of the new password encryption.

If it was password encryption it wouldn't make any difference to this proxy...

This does not even touch the auth request packet.

[KraHen]

Ripped the encryption classes from this one for my proxy, thanks for that. Though I don't like how you handled networking here, though that may only be the frustration coming from coding my socket system for 2 hours lol.

EDIT : Encryption change lol.

[pro4never]

Originally Posted by KraHen

Ripped the encryption classes from this one for my proxy, thanks for that. Though I don't like how you handled networking here, though that may only be the frustration coming from coding my socket system for 2 hours lol.

EDIT : Encryption change lol.

I can vouch for the 'server' side of the networking being very stable (although I think this is an older version of our code). The original networking base was written by saint for our albetros pserver project and has never experienced any issues. As for the client side of the networking I agree it sucks. It was just a stripped down version of hybrids socket network that I used cause I was too lazy to write a new socket system at the time

[andrewxxx]

edit no. 12 !! lol
after i was crying to get it login , here
it sucked at logging to account server , so its wrong port ? ill try o-0 why im asking Lol im an idiot


grrrr fuck thats silly but i like it xD well umm with wpe i figured out that
login server is : 9958
game port is : 5816
as when he try to login he sent to 9958 and recive from it and
once u r in game it keep sending much stuff and receiving about players coords and mine too from 5816 and to it
got a question , i send with a port , what is the use of this port o-0 lol sorry if the question was too stupid
umm another thing , it always stucks in login to game server , so whats wrong with connection ?
im working with that since today morning faced 26 error which lead to 13 time editing

edit :
here , when i try to login aimbotexample cp. says client connected , connected to auth server successfully , then client disconnect o-0 ! why its disconnecting ?

another edit :
when i changed game port to 5000 it comes up with logging to account server (stuck there)
and a accounts say wrong passwords
at command prop. it says something about line 163 then connected to auth succ.
about line 163 in gui it was

void login1_AnnounceReceive(byte[] data, Network.Wrapper arg2, byte[] arg3)
{
try
{
LoginUser role = arg2.connector as LoginUser;
//So, we've received data, we've pulled which user it was received for... we need to decrypt it, perform any actions needed and send to server!
lock (role.ClientAuthCryptography)
role.ClientAuthCryptography.Decrypt(data);
role.SendToServer(data);
}
catch (Exception P) { Console.WriteLine(P); }//just incase something goes wrong.
}

the 163 is lock (role.clientauthcryptography)

exact log on command prop. here

[LoginServer] Client connected to Porxy
System.NullReferenceException: Object reference not set to an instance of an object.
at proxyparadise.GUI.login1_AnnounceReceive<Byte[] data, Wrapper arg2, Byte[] arg3>
in E:\plaplapla\GUI.cs:line 163

thats it :@ please help me :@

after trying more than a hundred time here what i figured out
if the port is
GamePort=5816
the result is
it stuck if wrong password
if right password IT STUCK TOO ! O-O
and else the port is
GamePort=5000
the result is
it says wrong password even if its right password and client disconnect
so is that a bug in this client ? should i try it on a clean client ? what the hell wrong with this :@ , ill setup a ps with clean client to figure that out BUT will there be any problem if the server ip is the same as hamachi ? guess there will be -.- Lol , ill try a clean client anyway

============
well again cuz im start getting insane , here
im trying to put the proxy inside the client and server connection
so
if the client and server was like
client <====> server it will be
client <===> Proxy <===> server
well how the client server works ?
it works like this
like what ? lets fucking trace that with wpe
here the result
client of my ip and port 54441 send to server with ip 212.113.36.91 with port 9958
what this port is for ? this port im sending from is the client and the port im sending to is the login server which let u loggin right ?
well to successful login server of 212.113.36.91:9958 should send conf. for myip:54441 (client) right ?
then we receive packets from the game server of 212.113.36.91:5816 (this 5816 is the fucking game port !!! right ?)
so that our game port is 5816 and login port is 9958 both for ip 212.113.36.91
and my hamachi ip is 5.53.163.222
so to add the proxy inside this u should send to 5.53.163.222 from conquerloader(nullablev5) to proxy and the proxy will send to the auth ip which is server ip , well thats going well till now
then the server sends to the proxy (HOW IT SEND TO THE PROXY ? CUZ ITS THE ONE WHO SENT TO IT ?) well then the proxy should send to client , right ?
my settings is above the ==== and its all the same as client says , i have wrote down my logic, if something wrong please tell me -.- else ill burn myself lol
ill go to translate the packets and figure out if the seal is EncryptionKey = "DR654dt34trg4UI6" cuz i dont have an idea about the enc key but guess no cuz there is 2 seal one to send to client and one to send to server , so what the enc key for ? "i guess its some key in client anyway"
ill translate packets to check why it refuse to let me in
well it only say some key when i login successfully and it say another which always pop up invaild pass
i wont give up but someone help me cuz my english is fucking poor and begging for food =))
P.S im trying the new enc EncryptionKey = "BC234xs45nme7HU9" maybe yes the proxy cant send to the client
Edit:
well i was right the the new encryptionkey cant be find in this client which means im on the only encryption so back to the old encryption and lets dance with it (i like talking to myself )
grrr that became too fucking long to anyone to read :\ anyway i was thinking and figured out some
at ur proxy it login the auth server then disconnect then login game server and it should keep being stable , what i get it stuck at logging auth server , umm trying to think but i guess i need google more atm :\

fuck lets addd one more edit as no one even reading
umm i did a stupid smart thing i powered hamachi off , it gave same result ! so what the hell wrong ? ports isnt on at this hamachi ip ? well its something wrong with hamachi thing so ill try to ping hamachi ports that i should be using then if it was off ill try to use another ip away from hamachi -.-.
===
umm here is the result , the both ports 5816 , 9958 is closed on hamachi and opened on the server ip
umm on my ip both r off , guess this one make sense cuz i dont receive with those ports i revice with the client port which is opened (else client wont connect LOL) , well so i send to proxy and proxy send to server , server send to proxy and proxy send to me , how the hell im sending to the proxy on a port which isnt even on ! ?


=====================================
after all i know that trying in something i dont really know is only making fool out of myself but i see it with another eye which is i like that way of learning , keep bugging and fixing which may teach me what tuts will never do -.- but not at this one lmao !


after some dance with wpe i figured out while checking packets on my settings , 1 pack send from hamachi ip to itself from port 56044 to port 9958 -.- guess to connect should be myclient sending to hamachi and hamachi to server (wont see this one) , server to hamachi (wont see this one too) , then hamachi to me saying its ok u may login or u may not o-0

================================================== ================================================== ================================================== ================================================== ====
after all im still stucked at this step on my own computer but with my mind im still learning some stuff and trust me if i havent made that proxy any time near to today ill still be thankful for pro4never cuz he teached me alot and with the problems im facing i made my own logic and what i have failed at wasnt a real failture it was just a start of learning something new i havent failed i just figured out some ways not to let it work , thanks for everything and sorry if i bothered u guys
================================================== ================================================== ================================================== ================================================== ====
studying will be back in couple of days with new questions =))

[pro4never]

I'm impressed with all the things you've tried :P

So I heard that it's not a full encryption change, just pass encryption and login sequence... because of this and my immense desire to avoid studying, I may update this tonight.

That being said... This proxy is simply not compatible with current version of conquer without you modifying quite a few things.

[andrewxxx]

hey all that was at 5095 ps not co current patch so the old encryption is actually right

[pro4never]

Originally Posted by andrewxxx

hey all that was at 5095 ps not co current patch so the old encryption is actually right

You'll need to change it back to blowfish if you want to have it work on 5095. You can just copy the encryption from the original version I uploaded and change the encryption key. Should work then.

<edit>

Strange just took a look at it and the issue does pop up during game encryption.. I don't touch password cryptography so I'm guessing that they definitely did change the encryption at least slightly and people are just more focused on the password encryption for their clientless bots to work again.

[andrewxxx]

u mean to copy old encryption which is DR654dt34trg4UI6 to the new version o-0 ? sorry a bit lost , well the old encryption Pproxy contain blowfish (sorry dont understand what it is)
sorry i know my question is like wasting time on a helpless noob -.-

EDIT:
fine anyway here is the problem on new enc (with changing enc to old one) or with unit2part2 (with changing enc to old enc)

Enc key = DR654dt34trg4UI6
finished starting up : accepting connection on all ports
System.NullReferenceExpection: Object reference not set to an instance of an object.
at ProxyParadise.GUI.login1_announcerecive<Byte[] data, Warpper arg2, byte[] arg3> plapla at line 165 which is
lock (role.ClientAuthCryptography)

same problem with all versions (by changing the enc key to something else or newer it gives error saying that it cant find the key in client)

it stuck at logging

[Loader]
IPAddress=5.53.163.222
LoginPort=9959
GamePort=5816
Website=http://www.elitepvpers.com
Force=TRUE

EDIT: umm fine i have read all links u mentioned and all was too useful , guess i need more about blowfish ,crypto and connecting server-proxy-client , like i need to know what u searched for or tut u learned to be able to do this , not lazy to search but my english land me on nothing plus dont have tags or info for what to search for

[pro4never]

Originally Posted by andrewxxx

u mean to copy old encryption which is DR654dt34trg4UI6 to the new version o-0 ? sorry a bit lost , well the old encryption Pproxy contain blowfish (sorry dont understand what it is)
sorry i know my question is like wasting time on a helpless noob -.-

EDIT:
fine anyway here is the problem on new enc (with changing enc to old one) or with unit2part2 (with changing enc to old enc)


same problem with all versions (by changing the enc key to something else or newer it gives error saying that it cant find the key in client)

it stuck at logging



EDIT: umm fine i have read all links u mentioned and all was too useful , guess i need more about blowfish ,crypto and connecting server-proxy-client , like i need to know what u searched for or tut u learned to be able to do this , not lazy to search but my english land me on nothing plus dont have tags or info for what to search for

You need to change the actual contents of the Blowfish file, not just the encryption key.

The newest version I uploaded is using the CAST encryption that tq changed to in recent patches. If you swap out the entire Cryptography/Blowfish.cs file with the one from an earlier version as well as using the correct encryption key for your server which you can find it from inside the conquer.exe assuming the server you're playing on hasn't protected the file. Just open conquer.exe with notepad and search for TQServer. Tge key should be right after it.

[andrewxxx]

umm is it confusing ? lol i dont have older version for crypto , i have the 4 version that u released , the first one u said is for 5010 or tho till 5100 so it includes 5095 , ill search for the tge key with hexworkshop but i cant type a crypto/blow but ill get the key first

first try
is it any way near this ?

I.n.t.e.l. .H.a.r.d.w.a.r.e. .C.r.y.p.t.o.g.r.a.p.h.i.c. .S.e.r.v.i.c.e. .P.r.o.v.i.d.e.r...CryptReleaseContext.CryptGenRandom..CryptAcquireContextW....L.a.n.m.a.n.S.e.r .v.e.r.....L.a.n.m.a.n.W.o.r.k.s.t.a.t.i.o.n...Net ApiBufferFree....NetStatisticsGet....

49006E00740065006C00200048006100720064007700610072 0065002000430072007900700074006F006700720061007000 68006900630020005300650072007600690063006500200050 0072006F00760069006400650072000000437279707452656C 65617365436F6E7465787400437279707447656E52616E646F6D0000437279707441637175697265436F6E74 65787457000000004C0061006E006D0061006E005300650072 00760065007200000000004C0061006E006D0061006E005700 6F0072006B00730074006100740069006F006E000000

Edit:
second try
with notepad

rocess32Next Process32First Heap32ListNext Heap32ListFirst Heap32Next Heap32First CloseToolhelp32Snapshot GetQueueStatus GetCursorInfo GetForegroundWindow USER32.DLL I n t e l H a r d w a r e C r y p t o g r a p h i c S e r v i c e P r o v i d e r CryptReleaseContext CryptGenRandom CryptAcquireContextW

so lemme put u in pic
here is everything im working on
ur proxy edited with my ips
conquer.exe and client files (server.dat/more)
its all just 1 mbs
link here :
ill add a virus scan as soon as possiable


i figured out something i should search for TQServer not tge Lol sorry and fuck who teach english in egy schools =))

i found the key pro4never thanks for being nice to me
QpWoEaZuazZmXnS3 << the key credits to pro4never

[pro4never]

you search for TQServer... not tge...

Tge = typo of 'the'.. as in THE encryption key directly follows the string TQServer"

And yes, any of the first two versions of this framework should work. Just take the contents of blowfish.cs and you'll be on old encryption. Then just change the encryption key and you should be good to go.

ooh and you'll possibly need to change the auth response packet cause that changed definitely.

<Edit> see you found it. You'll still need to swap over the contents of blowfish.cs. You will likely need to modify the auth response packet in a different place. As it is right now the proxy writes your own ip to the packet at offset 20... it might be different in earlier versions (cause I remember it changing)

[andrewxxx]

well after like 10 more posts it will likely works but ill still be a leecher so may u please if u dont mind give me useful links for those or even useful tags to search for ?
1- how to send from client to the proxy , from proxy to server , receive from server to proxy , send them back to client
2- cryptography,network,objects (stuff inside sorry poor english)
3- an advanced packets analysis (cuz conquer packets isnt plain text or even static xor)
4- some stuff which will help me about ports and connections
and in general the most useful links i need to work on the proxy
in the end im so thankful for u and wishing u good luck and again if u cant give me useful posts just give me tags or info so i can search with 'em , thank u so much for everything i appreciate all the help u done for me

[shitboi]

Point 9 answers your question 1 and 4. You simply have to read more information on point 9. As for your question 2 and 3. Those requires a lot of knowledge from text books, and depends on a lot of experience to be able to identify the cracks.

When i asked Sparkie how he realized the 27th byte in attack packet is xor'ed with timer, he mentioned that he directly observed it without even reversing it.

Anyways, if you want to get a feel of how proxy works. you have 2 choices.

1. work on a proxy that works for a ps server that uses the old encryption.
2. set up a proxy for the login in procedure that does not interfere with the content passed in between client and server. Though this is quite useless to do, it does help you understand how important lack of encryption mechanism is.

Good luck