[Ideas] Packet Editing

[rawk0r]

I have experimented a little bit with packet editing on Mabinogi, a few things worked, a few things didn't. One of the things that worked was sending the packet that teleports you using the Mana Tunnels, without being a near a mana tunnel. Everything I tried item based just didn't seem to work. It would be nice to try and compile a list of things that do and do not work. If something like this is only to be posted in the Underground, you can go ahead and delete this thread.

Working:

• Using Mana Tunnel teleportation when not near a Mana Tunnel (Work is Uladh as well, requires you to have the Mana Tunnel marked first)

Not working:

• Depositing/Withdrawing more gold than you have
• Depositing/Withdrawing an item you don't have
• Dropping an item you don't have
• Picking up a large amount from a stack than you have
• Moongate Packets being sent
• Using a Mana Tunnel packet without having it unlocked first
• Casting a spell before the current one has finished
• Using a spell charge while there are none
• Equipping an item you don't have
• Sending a Wax Dungeon/Waxen Wing teleport packet
• Changing titles twice in one day
• Change to a title you do not have

Ideas, I has lots o' them.

[cloudkiller2006]

try making a moongate teleport you overdays, or to somewhere different :O

[rawk0r]

Originally Posted by cloudkiller2006

try making a moongate teleport you overdays, or to somewhere different :O

Nice thinking, I shall try that shortly. As for the teleporting me somewhere different, I would have to teleport to the location at least once to record the sent packet, so that could be time consuming.

EDIT: Nothing I did with the Moongates seemed to work, so only the Mana Tunnels work
EDIT #2: Tried picking up more items than are in the stack I am taking from, that didn't work. I also tried using a magic skill before the previous one had finished, that was a no as well.

[Dark Raccoon]

Working:
Using Mana Tunnel teleportation when not near a Mana Tunnel

Sweet.

Mind pming me some Info?

Ill try coding a Hack that does all the work for the user.

[rawk0r]

Originally Posted by Dark Raccoon

Sweet.

Mind pming me some Info?

Ill try coding a Hack that does all the work for the user.

PM sent, I included some extra information in it.

On a side note: Back to playing Risen while I think of ideas.

[lostmage333]

Clever idea, I had thought that the packets were encrypted.

Some ideas that I have:
Landing above 15m
Landing in a no-land zone
Taking off in a no-fly zone
Opening dungeon doors without the corresponding key
Attacking props without stamina
Picking up item XYZ in the vicinity
Using a berry as a waxen wing (as a packet edit mod, not as a itemdb.xml mod)
Using skills before cooldown timer is up (such as FH, Charge, Trans?)
Using a skill while using another skill (Super herb picking XD)
Loading a skill while executing another skill (Super WM spam)

I'm sure I'll come up with more.

If you don't mind, could you also give me some pointers on how you did what you've done so far? (such as what software, and related info?). Thanks!

[rawk0r]

Originally Posted by lostmage333

Landing above 15m
Landing in a no-land zone
Taking off in a no-fly zone
Opening dungeon doors without the corresponding key
Attacking props without stamina
Picking up item XYZ in the vicinity
Using a berry as a waxen wing (as a packet edit mod, not as a itemdb.xml mod)
Using skills before cooldown timer is up (such as FH, Charge, Trans?)
Using a skill while using another skill (Super herb picking XD)
Loading a skill while executing another skill (Super WM spam)

I think each door would have a different ID on the server, and each dungeon is random, so I don't think that would work (Worth a shot though). Using the wings themselves doesn't send a packet, being as opening them is client-side (Reason why changing an item into it opens the map, but won't click). Using a skill while using another skill may be difficult unless it's hotkeyed. Will try some others.

Originally Posted by lostmage333

If you don't mind, could you also give me some pointers on how you did what you've done so far? (such as what software, and related info?). Thanks!

I have just been using WPE Pro, it D/Cs after a while, but I get about 5-10 minutes per shot. Generally I just perform an action in game while recording, and re-send the packet (don't forget send list with he updated socket if you are saving the packets) and see what response I get. Sometimes it works, most of the time it does nothing.

[lostmage333]

Oh, I get it, so you're not actually capturing the packet and looking at what's inside, but rather getting an instance of Packet X, and sending it whenever you want to do action X?

You are a clever one =P I wish I could think like you do more often =D Thanks!

[rawk0r]

Originally Posted by lostmage333

Oh, I get it, so you're not actually capturing the packet and looking at what's inside, but rather getting an instance of Packet X, and sending it whenever you want to do action X?

You are a clever one =P I wish I could think like you do more often =D Thanks!

Until I find some way to decrypt the packet table, like the packet editor for MapleStory (The one that injects into the game itself), I really have no way of finding out too much about the packets. This is all just trial and error.

EDIT:Here is two of the packets I have:
The packet from Filia to Qilla:
88 3F 00 00 00 00 5C 4C 11 E9 49 DD 29 56 DB 0A 3F 4D 4E 87 CD 6D B8 FA E5 E4 2A 7F 21 AC 03 19 39 5F EF 48 0B 24 CB 1D AE C1 03 96 8E A4 10 1F B6 B4 84 CD D0 47 9B B0 E5 E9 1F 38 5E 71 0F

The packet from Qilla to Filia:
88 3F 00 00 00 00 5C 4C 11 E9 49 DD 29 56 DB 0A 3F 4D 4E 87 CD 6D 63 28 C0 07 25 11 AB 51 DC 7E FB F2 9F 1C 90 3A E9 D0 EC 32 15 87 8D 89 F7 CF C8 0C 8F 8B 84 DC 9B B0 E5 FE 1F 38 5B 71 0F

I highlighted what I believe to be the headers and functions.

EDIT EDIT: I have tried changing the 5B and 5E, but alas, the character I was using did not have all the Mana Tunnels so I cannot confirm that it would switch which Mana Tunnel you are going to (Although I bet it will).

[cloudkiller2006]

Originally Posted by lostmage333

Clever idea, I had thought that the packets were encrypted.

Some ideas that I have:
Landing above 15m
Landing in a no-land zone
Taking off in a no-fly zone
Opening dungeon doors without the corresponding key
Attacking props without stamina
Picking up item XYZ in the vicinity
Using a berry as a waxen wing (as a packet edit mod, not as a itemdb.xml mod)
Using skills before cooldown timer is up (such as FH, Charge, Trans?)
Using a skill while using another skill (Super herb picking XD)
Loading a skill while executing another skill (Super WM spam)

I'm sure I'll come up with more.

If you don't mind, could you also give me some pointers on how you did what you've done so far? (such as what software, and related info?). Thanks!

-landing above 15meters
i already have that one from the previous tiara pack (it's not in the last one, or it doesnt work for me in the last one)

Originally Posted by rawk0r

I think each door would have a different ID on the server, and each dungeon is random, so I don't think that would work (Worth a shot though). Using the wings themselves doesn't send a packet, being as opening them is client-side (Reason why changing an item into it opens the map, but won't click). Using a skill while using another skill may be difficult unless it's hotkeyed. Will try some others.

there are only a few doors and keys, not a whole bunch of random ones

orange opens orange, blue opens blue, etc.

i think there were...

-orange-
-yellow-
-(light and dark)blue-
-green(ish)-

[rawk0r]

Originally Posted by cloudkiller2006

there are only a few doors and keys, not a whole bunch of random ones

orange opens orange, blue opens blue, etc.

i think there were...

-orange-
-yellow-
-(light and dark)blue-
-green(ish)-

I will have to try something like this out sometime

[lostmage333]

Originally Posted by rawk0r

EDIT EDIT: I have tried changing the 5B and 5E, but alas, the character I was using did not have all the Mana Tunnels so I cannot confirm that it would switch which Mana Tunnel you are going to (Although I bet it will).

If you need to hit all the mana tunnels, give me a shout (lostmage333), I have them all. (You are in tarlach, right?)

[shockrashana]

1....Why not try changing/recieving a title with packet editing o.O? You could use title number 3 ( 3 = GM Status Effects: Str +200, Defense +10, and Protection +10.)

2. Use Hide when you're a human/giant.

3. Try Refreshing the items underground, Like chests in Cor that appear every {random time :P} appear when you send the spawn data

4. Re-Hide a dungeon then discover it and gain the dungeon discovery title.

[cloudkiller2006]

Originally Posted by shockrashana

1....Why not try changing/recieving a title with packet editing o.O? You could use title number 3 ( 3 = GM Status Effects: Str +200, Defense +10, and Protection +10.)

2. Use Hide when you're a human/giant.

3. Try Refreshing the items underground, Like chests in Cor that appear every {random time :P} appear when you send the spawn data

4. Re-Hide a dungeon then discover it and gain the dungeon discovery title.

1. might be possible, but the effects wont work i think

2. i'd so want THAT, heck even play dead as giant, or stone lobbing XD

3. that's every 0.66666666 minutes in cor, and (i think) every 6 minutes in the other parts

4. if you want the title it's in #1 O-o

[shockrashana]

Originally Posted by cloudkiller2006

1. might be possible, but the effects wont work i think

2. i'd so want THAT, heck even play dead as giant, or stone lobbing XD

3. that's every 0.66666666 minutes in cor, and (i think) every 6 minutes in the other parts

4. if you want the title it's in #1 O-o

Yes I know that but it's just a last resort incase the title isn't changeable. And you could always show off to your friends or something :P