Injection, crypt/decrypt and IP packets

[H47cH]

Here are some interesting things I think. If any of you has answer, feel free to post, or PM me if you think this is not public discussion (no noob PM pls). Mod, move my topic if I'm not in the right forum
1/ Is injection (through a dll and modifyed loader) in CO2 encrypted/decrypted packets possible ? About encryption and decryption of CO2 packets, I'd like to speak with unknowone, if possible.
2/ About decrypted packets : editing ./Socket.h, ./server.dat, ./ini/fuse.ini and all others ini or dat files like Armor, Common, ItemAdd, ItemType, LevelExp, ProgressHP/MP/Xp, res.dat, etc, modifying values of such variables as hereunder should be possible through injection ?
ActionID
BodyType=%d
BornAction=%d
Delay=%d
DieDelay=%u
DisableThreadLibraryCalls
Effect=%s
EffectId%d=%s
EffectIndex=%s
Index%d
ItemDefault
ItemFlash
ItemUse
Jump
Ko
KoShowRecord
Level=%d
LevelUp
MaxLife=%d
Transform%d
XpSkillType%d

And many others that are available to modify.
Seems like there is sort of dbg protection in routines:
\.\NTICE
\.\SICE
\.\SIWDEBUG
\.\SIWVID
Though, not hard to find a bypass.

3/ Some other functions can be used by hooking wininet API:
InternetQueryDataAvailable
InternetSetFilePointer
InternetSetStatusCallback
InternetWriteFile

And many others (too much to report here) through Kernel32 API.
Anyone can help (I mean those who knows what I'm talking about !) ?

[H47cH]

I'm very surprised none can answer at any questions ...
Nobody at all ?

[tsu]

Check with some of the programmers / LVL 2 of epvp CO forum.
Like, Ultimation, unknownone, Hojo (?), chocoman4k, Ultima (?)
There are for sure more of them, but these are the ones I could think of right now.

[Hojo]

Er, its not very clrear on exactly what your asking for?

But yes, most of the list things can be found in memory, most will likely by DMA protected, and even getting your hands on those values is mostly pointless, unless your building a bot and want the information or something...

Please re word some of your questions.

I think you mean is DLL hooking posible to fine the encryption decption method? or find the encrypted or decrypted packets

Well yes you can, this is how COpac works with DLL injections I believe. You will probably want to chocoman4k about that not unknownone, although hes also a clever little cookie...

Well, laters :P

[Ultima]

Originally posted by H47cH@Mar 10 2006, 17:38
Here are some interesting things I think. If any of you has answer, feel free to post, or PM me if you think this is not public discussion (no noob PM pls). Mod, move my topic if I'm not in the right forum
1/ Is injection (through a dll and modifyed loader) in CO2 encrypted/decrypted packets possible ? About encryption and decryption of CO2 packets, I'd like to speak with unknowone, if possible.
2/ About decrypted packets : editing ./Socket.h, ./server.dat, ./ini/fuse.ini and all others ini or dat files like Armor, Common, ItemAdd, ItemType, LevelExp, ProgressHP/MP/Xp, res.dat, etc, modifying values of such variables as hereunder should be possible through injection ?
ActionID
BodyType=%d
BornAction=%d
Delay=%d
DieDelay=%u
DisableThreadLibraryCalls
Effect=%s
EffectId%d=%s
EffectIndex=%s
Index%d
ItemDefault
ItemFlash
ItemUse
Jump
Ko
KoShowRecord
Level=%d
LevelUp
MaxLife=%d
Transform%d
XpSkillType%d

And many others that are available to modify.
Seems like there is sort of dbg protection in routines:
\.\NTICE
\.\SICE
\.\SIWDEBUG
\.\SIWVID
Though, not hard to find a bypass.

3/ Some other functions can be used by hooking wininet API:
InternetQueryDataAvailable
InternetSetFilePointer
InternetSetStatusCallback
InternetWriteFile

And many others (too much to report here) through Kernel32 API.
Anyone can help (I mean those who knows what I'm talking about !) ?

to 1 injection is posible but the encryption is well known so no injection is necesarry to decrypt or encrypt packets

to 2 all the stuff is server side so there is no effect when you modify it
and the protctions are realy no problem

to 3 i dont know what you want^^ if you ask how to hook and use those there are hooking tutorials and the MSDN is very helpful^^

[H47cH]

Thanks for all your replyies and sorry if it wasn't clear.
Though, Ultima answered mostly what I wanted to know.

[Hojo]

Originally posted by H47cH@Mar 13 2006, 14:31
Thanks for all your replyies and sorry if it wasn't clear.
Though, Ultima answered mostly what I wanted to know.

D=

Ultima pwned me