• Welcome to Valhalla Legends Archive.
 

Anyone willing to read!

Started by VB_Newb, January 01, 2003, 11:09 AM

Previous topic - Next topic

VB_Newb

umm i am a newb to making bots and i just used my packetsniffer and did "/stats VBNewb" just to see what the packet would be and i got:

SEND-> 0000   FF 15 14 00 36 38 58 49 50 58 45 53 9B 00 00 00    ....68XIPXES....
SEND-> 0010   08 59 13 3E                                        .Y.>
SEND-> 0000   FF 0E 12 00 2F 73 74 61 74 73 20 56 42 4E 65 77    ..../stats VBNew
SEND-> 0010   62 00                                              b.
RECV-> 0000   FF 0F 34 00 12 00 00 00 00 00 00 00 2F 00 00 00    ..4........./...
RECV-> 0010   00 00 00 00 0D F0 AD BA 0D F0 AD BA 56 42 4E 65    ............VBNe
RECV-> 0020   77 62 00 56 42 4E 65 77 62 27 73 20 72 65 63 6F    wb.VBNewb's reco
RECV-> 0030   72 64 3A 00 FF 0F 37 00 12 00 00 00 00 00 00 00    rd:...7.........
RECV-> 0040   2F 00 00 00 00 00 00 00 0D F0 AD BA 0D F0 AD BA    /...............
RECV-> 0050   56 42 4E 65 77 62 00 4E 6F 72 6D 61 6C 20 67 61    VBNewb.Normal ga
RECV-> 0060   6D 65 73 3A                                        mes:

Anyone willing to tell me what the packet would be in all of that? please and thanks ahead of time.

warz

#1
Read that 0x0f documentation by some person on botdev, or visit http://tks.slacktech.com

VB_Newb

#2
So the packet for /stats would be 0x0000002f?

iago

#3
This is something different, can be ignored
SEND-> 0000   FF 15 14 00 36 38 58 49 50 58 45 53 9B 00 00 00    ....68XIPXES....
SEND-> 0010   08 59 13 3E                                        .Y.>

This is sending the /stats to battle.net, the event is 0x0E
SEND-> 0000   FF 0E 12 00 2F 73 74 61 74 73 20 56 42 4E 65 77    ..../stats VBNew
SEND-> 0010   62 00                                              b.

Here you are recieving a chat message (0x0F) with the id of 12, flags 0, ping 47, the account is "VBNewb", and the message is "VBNewb's record:[...etc]" then another 0x0F packet, and similar stuff...
RECV-> 0000   FF 0F 34 00 12 00 00 00 00 00 00 00 2F 00 00 00    ..4........./...
RECV-> 0010   00 00 00 00 0D F0 AD BA 0D F0 AD BA 56 42 4E 65    ............VBNe
RECV-> 0020   77 62 00 56 42 4E 65 77 62 27 73 20 72 65 63 6F    wb.VBNewb's reco
RECV-> 0030   72 64 3A 00 FF 0F 37 00 12 00 00 00 00 00 00 00    rd:...7.........
RECV-> 0040   2F 00 00 00 00 00 00 00 0D F0 AD BA 0D F0 AD BA    /...............
RECV-> 0050   56 42 4E 65 77 62 00 4E 6F 72 6D 61 6C 20 67 61    VBNewb.Normal ga
RECV-> 0060   6D 65 73 3A                                        mes:
This'll make an interesting test for broken AV:
QuoteX5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*


MrRaza

#4
I always couldn't figure out how to find all the information from that. Could you tell us how you do that?

Etheran

#5
It's all explain in the 0x0f packet education document written by SphT here: http://botdev.valhallalegends.com/documents/0x0feducation.html

haZe

#6
VB_Newb could you give me a link on where u got WPE (winsock packet editor) from? thanks

UserLoser

#7
Hm, i noticed after warz posted his link to his site, there are still people asking for help, i did say thats not going to teach anyone anything...... :-X

:-X = im done in this thread

Etheran

#8
... Seriously come on now, that document is well written and easy to understand...

MrRaza

#9
Figure 2.5 - 0x00000007RECV-> 0000   FF 0F 2F 00 07 00 00 00 00 00 00 00 52 02 00 00    ../.........R...RECV-> 0010   00 00 00 00 0D F0 AD BA 0D F0 AD BA 53 61 72 63    ............SarcRECV-> 0020   61 73 74 69 63 00 43 6C 61 6E 20 2B 44 2B 00       astic.Clan +D+.Flags: 0x00000000, ping: 594, account: Sarcastic, text: Clan +D+. How do you determine what ping the user has from that?

Eibro

#10
QuoteHow do you determine what ping the user has from that?

QuoteFF 0F 34 00 12 00 00 00 00 00 00 00 2F 00 00 00

Look what iago said, ping is 47.
0x2F is 47 in decimal.

Eibro of Yeti Lovers.

warz

#11
I can supply help, but dear lord.. who do you think I am? Jesus?
I'll never be able to balance to overwhelmingly lopsided dumb:smart ratio.

Arta

#12
Warz, stop being a wanker.

SiMi

#13
hrm i dont know how you got that, were you hexing?

RhiNo

#14
Simi that is the output of a packet sniffer lol