XSniff - Silkroad Online packet sniffer

[Chernobyl*]

XSniff is a advanced silkroad online packet sniffer / injector.

Current version: **1.0.7 (r7)**

Features
---
Packet analyser features

* Parsing data types on selection (supports decimal / hexadecimal / ascii)

Packet injector features

* Injecting any Client -> Server or Server -> Client packet
* Repeatable packet support (send packet each x specified miliseconds)

Display filter features

* Pause displaying incoming packets
* Display only Client -> Server packets
* Display only Server -> Client packets
* Displaying only packets whose opcodes are within allowed list
* Display only opcodes whose opcodes are not blocked

19.07.2017 update
* Settings are now being saved on change
* Support for changing fonts (will improve this later)

Screenshot



Video guide

Credits:

Chernobyl (XSniff)
B1QB0SS (XSniff)
pushedx (SilkroadSecurityApi),
Salty (Ideas)
Valmiki (Ideas)

I'm open for new ideas.

Please, note that agent redirection packet is currently hardcoded. This is only tested and confirmed to work on vSRO v188 files.

[hanofastar]

what is that mean ? or what its used for ?

[Isoline]

whats the difference between this and exdLoader auto-parser?

[B1Q]

Originally Posted by Isoline

whats the difference between this and exdLoader auto-parser?

you can inject packets....

[janicka]

Add option to auto change packet like in filter.

[EdwardTeach+-]

this tool gonna be useful for Coders

[SubZero**]

for who will use this tool use Kaspersky Internet Security or any good anti virus
this tool will attack your programs or any .exe file
if you scan your "exe file"
you will get viurs.win23.Hidrag.a
anyway good luck

[hoangphan7]

usefull. but same like edx loader :v

[grasvys112]

can someone #approve this ?
used virustotal:

[florian0]

Hey,
can you make it save the IPs and Ports? It doesn't save it for me.

Also can you make it use a monospaced font for the dump? The current one is a mess to read. Also please soften the colors. Hard white on black is a pain to watch at night.

[xantos1]

Originally Posted by grasvys112

can someone #approve this ?
used virustotal:

we are waiting !

[Chernobyl*]

Originally Posted by janicka

Add option to auto change packet like in filter.

I was thinking about scripting system... Will do bit later.

Originally Posted by florian0

Hey,
can you make it save the IPs and Ports? It doesn't save it for me.

Also can you make it use a monospaced font for the dump? The current one is a mess to read. Also please soften the colors. Hard white on black is a pain to watch at night.

Alright, I'll take care of saving settings. About fonts... I'll just give ability to change them on runtime.

[B1Q]

19.07.2017 - 1.0.0.7 update
* Settings are now being saved in xml format
* Support for changing fonts. works on MainForm & PacketAnalyser only

[Eckoro]

Great work, haven't touched Silkroad in a long while, but thought I may pass some suggestions to you, if you're both looking to add anything:

1. One thing I always wanted included in pushedx tool was being able to replay logs. This could be done with a step button allowing you to send one packet at a time in the sequence. With this, potentially being able to bring this log up in the interface for you to manipulate the packet before you send it. This would allow for better parsing of packets especially with environments such as Fortress Wars or CTF as manually re-simulate them by sending all the movement packets etc. of objects.
2. Being able to label Opcodes

[B1Q]

Originally Posted by Eckoro

Great work, haven't touched Silkroad in a long while, but thought I may pass some suggestions to you, if you're both looking to add anything:

1. One thing I always wanted included in pushedx tool was being able to replay logs. This could be done with a step button allowing you to send one packet at a time in the sequence. With this, potentially being able to bring this log up in the interface for you to manipulate the packet before you send it. This would allow for better parsing of packets especially with environments such as Fortress Wars or CTF as manually re-simulate them by sending all the movement packets etc. of objects.
2. Being able to label Opcodes

thanks for your suggestions.
we'll be sure to include them in the next version