[Guide] Using Windows Detours to Redirect Silkroad to a Proxy

[onlyforsourcethx]

Can anyone answer me, please?

[marius1000]

u cant belive how much this helped me.....

[zius]

Originally Posted by pushedx

The Silkroad security system involves setting up blowfish and a packet count and crc byte embedded in the packets themselves. If the packet count byte or crc byte is incorrect for any packet, you will get disconnected. Likewise, you need the blowfish correctly setup to decrypt the encrypted packets to be able to modify them.

The initial Silkroad security process involves using the Diffie-Hellman key exchange. In the picture on that page, Alice is the server and Bob is the client. Normally, the client generates the value b, which I referred to as the 'security seed'.

However, when I wrote the Silkroad Security API, I did not understand this entire process, so I hard coded the 'b' value in my API (well it's configurable, not hardcoded, but not dynamically generated) so everything would 'work'.

If you do not make the client use a value of 0x33 for the 'b' value, the security api will fail the handshake process. That is just a limitation of that api version. It is possible to avoid this altogether by using a classic man in the middle attack on the D-H exchange, which is was SR33, edx33, edxSilkroadProxy are meant to do, but the API itself has to be rewritten to support generating the 'server' and 'client' aspects of the exchange whereas the current API only supports a known 'b' value 'client' aspect.

Hopefully, that makes more sense!

ARE YOU : Drew Benton????????????

[moderiz11]

Bump. And yes he is. This program still works

[jack11111]

Nice TuT. THX.

[.Bara.]

WTF it dosent Work !

[Fhemai]

It works for me, searched it for a while thanks

[Bl0wFish]

THX for sharing.

[Harkat]

Originally Posted by pushedx

Here's a package of CSRO, JSRO, ISRO, TSRO, and KSRO precreated detour files so you don't have to create them yourself.

In this file there isn't a jSRO one. Can you make a jSRO package?

[pushedx]

Originally Posted by Harkat

In this file there isn't a jSRO one. Can you make a jSRO package?

Using the tool is really simple, but I do not have JSRO's divisioninfo.txt file to make a package. All you have to do is enter the resolved host name!

[thieef]

Originally Posted by pushedx

Using the tool is really simple, but I do not have JSRO's divisioninfo.txt file to make a package. All you have to do is enter the resolved host name!

hey dude i want to change ZSZC gate port to 15777
could you help me with this?

[baracoudaking]

by the way this could also be usefull to crack bots

[pushedx]

Originally Posted by thieef

hey dude i want to change ZSZC gate port to 15777
could you help me with this?

Those files are patched to localhost, they are not the originals. It's ok though because I do have ZSZC 1.680 installed.

FIRE - 72.55.143.209
WATER - 67.205.76.42

So your editor would look like this:


Attached is that file.

NOTE: If the program you are redirecting to does not support AgentServer redirection (i.e., editing packet 0xA102), then you will need to add the AgentServer IP to that list as well if it is not already there.

For example, when connecting to Water, I got sent to an AgentServer at address: 174.142.240.54:15884. So if the program you are using doesn't automatically take care of that, you would need to get all the IPs and ports used and add them to the list as well.

You could also just add a wildcard instead as well. Use Original IP as 255.255.255.255 and set Original Port to -1. Then in the New IP, use 127.0.0.1 and set the New Port to your AgentServer port. That information is covered in the guide though!

Also, I did not forget about making a better version. I have just been really busy updating other things. I don't know when I'll post another update that improves upon this program, but I eventually will!

[markram987]

hi drew.. how can i use edxLoader with edxProxy in updating the opcodes?.. cuz im gonna try clientless work..