[Question]Sniff real send function / sent packets

nonosocr1986 · 03/30/2013, 14:51

hello again ^^ , sorry for posting too much threads but i really need some help here xD , how can i hook real send function (where packets are still unencrypted) ?

thanks =]

syntex · 03/30/2013, 16:24

where is the difference between real send and send hahahahhaha? so funny

bloodx · 03/30/2013, 17:10

oh my gosh it's a syntex :O!

DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourAttach(&(PVOID&)send, yoursend);
DetourTransactionCommit();

nonosocr1986 · 03/30/2013, 21:26

Quote:

Originally Posted by bloodx

oh my gosh it's a syntex :O!

DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourAttach(&(PVOID&)send, yoursend);
DetourTransactionCommit();

I'll be a liar if I told u I understood xD , but tnx for replying , can I sniff sent packet via ollydbg ? , I've tried that already but I dunno where to breakpoint :/

just like meak1 in this post :

meak1 · 03/30/2013, 23:47

just breakpoint on send lol

RunzelEier · 03/30/2013, 23:54

Quote:

Originally Posted by bloodx

oh my gosh it's a syntex :O!

DetourTransactionBegin();
DetourUpdateThread(GetCurrentThread());
DetourAttach(&(PVOID&)send, yoursend);
DetourTransactionCommit();

ohhhhh ms detours 3.0

nonosocr1986 · 03/31/2013, 00:54

Quote:

Originally Posted by meak1

just breakpoint on send lol

ye i know i have to breakpoint on send but i'm having troubles finding send address :S , i'm trying it on p.server btw

meak1 · 03/31/2013, 01:55

strg + g and type 'send' ? so hard? lol

EddyGER · 03/31/2013, 03:26

Quote:

Originally Posted by meak1

strg + g and type 'send' ? so hard? lol

ctrl

meak1 · 03/31/2013, 03:51

its denglish

nonosocr1986 · 03/31/2013, 17:12

Quote:

Originally Posted by meak1

strg + g and type 'send' ? so hard? lol

Sorry for being so rude xD , but I've tried that already , it's throwing me to send @ ws2 , where packets are encrypted I believe, and in the picture you posted it's send @ engine where packets still unencrypted , Ty again =]

meak1 · 03/31/2013, 17:41

write in chat and breakpoint 'send' jump backwards and watch Arg's till its uncrypted.

nonosocr1986 · 04/02/2013, 14:59

Quote:

Originally Posted by meak1

write in chat and breakpoint 'send' jump backwards and watch Arg's till its uncrypted.

thank you again , but i'm trying to breakpoint send for 2 days with no luck -.- , my engine is always crashing (look @ image) , i've tried all ollydbg editions :S

meak1 · 04/02/2013, 19:20

lol u cant english?

u just need to start ollydbg with admin rights -.-#

nonosocr1986 · 04/02/2013, 19:25

Quote:

Originally Posted by meak1

lol u cant english?

u just need to start ollydbg with admin rights -.-#

lol i did xD , with no luck :\