+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C#] [Preview] Lineage2 Man-In-The-Middle [Spoofing RSA-1024, Blowfish and more] (/showthread.php?tid=3166960)
Pages: Pages
1
2
[Preview] Lineage2 Man-In-The-Middle [Spoofing RSA-1024, Blowfish and more] - DragonHunter - Jan 10, 2013
just a beta preview of my new program L2MITM
Lineage2 - Man In The Middle
This program is able to dump the username and password of the person who is going to login
The program decrypts the RSA-1024bit, Blowfish, Xor encryption of the game
Just a early stage of the project,
It's also having a simple plugin system so you're able to do a lot and have fun with scripting different stuff
For now I made a plugin that will dump the username and password to a file
And a other plugin that would attack the next monster when you killed it (bot)
You could make a lot outta this :)
Haven't been doing some gamehacks for such time so why not
I thought I'd be also funny to break to spoof the RSA Key so I was able to decrypt the username and password hehe ^_^
Haven't seen anyone so far breaking the RSA for this game so maybe I'm the first 1 🤝
Breaking the RSA 1024bit costed me 2 full days messing around with spoofing it and setting all the offsets correct etc
Note: No game hooks are being used, the program is written 100% in C#
* - tweety - Jan 10, 2013
Seen some of this stop. This newb know's what his doing. Did you manage to write the bot to auto target people yet?
* - DragonHunter - Jan 10, 2013
(Jan 10, 2013 05:07 PM)Tweety. Wrote: Seen some of this stop. This newb know's what his doing. Did you manage to write the bot to auto target people yet?Ye could do that ye but it's just a very basic bot plugin more like a POC 😝
* - xSilent - Jan 10, 2013
Well, this proves even if you use encryption; Nothing is secure.
Nice job, Dragon. 🤝
* - marvinn - Jan 11, 2013
Nice one, were you thinking about an opensource framework for capturing the packets so people can customize it to an other game?
* - tweety - Jan 11, 2013
(Jan 11, 2013 06:04 AM)marvinn Wrote: Nice one, were you thinking about an opensource framework for capturing the packets so people can customize it to an other game?
I believe that's what the plugin system is made for.
* - Meerkat. - Jan 11, 2013
Holy shit Anguis, you're the fucking boss.
* - CyNecx - Jan 11, 2013
Hey Dragon !
Could you please tell us whats new in your cool new ssp 2 proto ?
Anyways this looks very nice !
* - facebookdoom - Jan 11, 2013
Excellent work! I myself have written packet bots years ago for the MMORPG "Silkroad Online". You can bank hard if you come up with the first bot for a up-coming MMORPG.
* - pr3fix - Jan 11, 2013
Pretty cool and unique project.
Always interesting stuff from you Dragon :D
* - The-One - Jan 12, 2013
I keep wondering how you are everytime able to amaze me... :)
* - Callum. - Jan 12, 2013
Can you explain exactly what you're doing?
I'm quite confused, are you logging everyone who joins the servers, password?
Can you give an explaination to someone who hasnt played the game and doesnt understand what you did(minus the auto attack bot)
* - Coiner - Jan 12, 2013
(Jan 12, 2013 05:03 AM)Callum. Wrote: Can you explain exactly what you're doing?
I'm quite confused, are you logging everyone who joins the servers, password?
Can you give an explaination to someone who hasnt played the game and doesnt understand what you did(minus the auto attack bot)
He setted up in other words a proxy. Normal way of packets transfer: Client -> Server; Server -> Client. With his app: Client -> App -> Server; Server -> App -> Client. Thus he can control the packets, sniff the packets and so on. This has been already done in Mu-Online for ages, but first time seeing this for L2. Good job DragonHunter.
* - iVision - Jan 12, 2013
Cool Dragon, will you ever release something that doesn't amaze us all?
Goodjob DragonHunter.
ps: tbh I like DragonHunter more then your new name.
* - DragonHunter - Jan 12, 2013
Thanks for the nice comments guys ^_^
Just wanted to post this also because I think it's funny
CockWave challenged me to do this also for world of warcraft but appearently... 1 picture sais a thousand wurds
U notice anything ? no encryption... lol so boring doing wow .__.