SOLUTION for DC!!!

reccaster · 04/21/2006, 01:05

Quote:

Originally posted by FSBlackDragun+Apr 21 2006, 00:51--></span><table border='0' align='center' width='95%' cellpadding='3' cellspacing='1'><tr><td>QUOTE (FSBlackDragun @ Apr 21 2006, 00:51)</td></tr><tr><td id='QUOTE'> <!--QuoteBegin--mijovic@Apr 20 2006, 22:24
FSBlackDragun , wat is the ip for bot server ?

From capturing all packets using Etheral

I got "222.111.150.223"

But Im not totally shure if thats the Only IP it uses... [/b][/quote]
act i'm pretty sure that's the gameserver

FSBlackDragun · 04/21/2006, 01:08

Well, Like I said, Im not totally shure because Etheral just bombards me with IP's to kinda guess about...

I cant even find a DL source for WPE Pro Alpha... :S

korroke · 04/21/2006, 01:12

why do ppl click silk bot? my silk.dll icon is already outside am i doing somthing wrong? and plus the user and password i cant use user-botter pw-bot it dc me >>

reccaster · 04/21/2006, 01:12

Quote:

Originally posted by FSBlackDragun@Apr 21 2006, 01:08
Well, Like I said, Im not totally shure because Etheral just bombards me with IP's to kinda guess about...

I cant even find a DL source for WPE Pro Alpha... :S

Because i'm in a relatively good mood ;P

FSBlackDragun · 04/21/2006, 01:19

Thanks alot

I owe ya one...

Ok with some testing around, I think I found the Right IP this time...

Etheral Picked up my outgoing packet with the "@1@" information going to 202.101.43.216

Also, I recieved the login failed packet from the same IP...

Sorry for being wrong the first time... (Last time I did it Etheral was showing all the packets as the same color, so it really made it confusing, This time around, It even highlighted the right packets for me)

EDIT: although, now I can ditch etheral and use WPE anyways 8D

reccaster · 04/21/2006, 01:25

Now for the tricky part someone logging a sucessfull login

korroke · 04/21/2006, 01:30

plz some1 T.T still dc with all those users and pw >>

reccaster · 04/21/2006, 01:31

lol you were right on the money

Code:

Name&#58; bot369.com
IP&#58; 202.101.43.47
Domain&#58;	bot369.com

Querying whois.crsnic.net&#58;43 for bot369.com...

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go to http&#58;//www.internic.net
for detailed information.


  Domain Name&#58; BOT369.COM
  Registrar&#58; XIN NET TECHNOLOGY CORPORATION
  Whois Server&#58; whois.paycenter.com.cn
  Referral URL&#58; http&#58;//www.paycenter.com.cn
  Name Server&#58; NS2.FOCUSDNS.COM
  Name Server&#58; NS1.FOCUSDNS.COM
  Status&#58; REGISTRAR-LOCK
  EPP Status&#58; clientUpdateProhibited
  EPP Status&#58; clientTransferProhibited
  EPP Status&#58; clientDeleteProhibited
  Updated Date&#58; 12-Sep-2005
  Creation Date&#58; 12-Sep-2005
  Expiration Date&#58; 12-Sep-2008

FSBlackDragun · 04/21/2006, 01:34

heh maybe we should recruit one of the somewhat ****** pay users from the bot258 site...

Im shure we could find one who is a little mad at how s**tty the pay system currently works...

reccaster · 04/21/2006, 01:37

@FSBlackDragun
could you post those 2 packets ?
according to some rumors all bots below 1.13 will stop working once released
so i'm wonder if there is some kind of ver auth in there
i'd go and log myself but since you already did no use in reinventing the wheel

FSBlackDragun · 04/21/2006, 01:46

k Let me re-capture the packets.. (didnt save when I exited :P) will only take a minute, then ill Edit them in...

I believe those are the two you were wanting, I found it somewhat nice how the bot reports your username :P lol once again, Good thing I have an old **** account to use...

Code:

1 192.168.2.2&#58;3388 202.101.43.216&#58;5228 137 Send 
0000 B2 11 89 00 00 00 00 00 00 00 0A 01 00 00 00 00  ................
0010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0020 00 00 00 00 00 00 01 00 00 00 73 68 61 73 6B 61  ..........shaska
0030 66 75 72 72 79 00 00 00 00 00 00 00 00 00 00 2B  furry..........+
0040 3F 40 31 40 00 00 00 00 00 00 00 00 00 00 00 00  ?@1@............
0050 00 00 00 00 00 00 00 00 00 00 65 64 39 36 33 36  ..........ed9636
0060 64 65 32 65 34 37 31 66 39 30 31 34 31 65 30 36  de2e471f90141e06
0070 66 35 34 39 65 30 66 65 34 34 31 61 64 30 37 36  f549e0fe441ad076
0080 36 64 00 00 00 00 00 00 00             6d.......

Code:

2 202.101.43.216&#58;5228 192.168.2.2&#58;3388 25 Recv 
0000 56 EE 19 00 00 00 00 00 00 00 02 01 02 00 00 00  V...............
0010 00 00 00 00 00 00 00 00 00             .........

Edit: Forgot to use the Code brackets :P

korroke · 04/21/2006, 01:47

ok nvm bout anything i said earlier
just wanna know wat u guys are doing xD

reccaster · 04/21/2006, 01:58

just username pw the usual no version auth i can see just a rumor i guess

MyS · 04/21/2006, 01:59

Bot login failed / post pay to use packet:

Code:

202.101.43.216&#58;5228 192.168.2.2&#58;3388 25 Recv 
0000 56 EE 19 00 00 00 00 00 00 00 02 01 02 00 00 00  V...............
0010 00 00 00 00 00 00 00 00 00             .........

Bot test user / pre pay to use packet:

Code:

202.101.43.216&#58;5228 192.168.1.103&#58;1950 25 Recv 
0000 BE 16 19 00 00 00 00 00 00 00 02 01 FF DD 54 00  ..............T.
0010 00 24 F0 FF FF FE 00 00 00             .&#036;.......

reccaster · 04/21/2006, 02:02

Oy thank you my kind sir