Cheat Engine

Disto · Newbie cheater Reputation: 0 Joined: 07 Dec 2006 Posts: 23

Hello, im currently working on hacking Eudemons Online and it has no gameguard whatsoever, meaning CE is useless and it requires WPE to hack. my problem is that when sending a packet it disconects from server, i was informed that to prevent this you use RKunhooker, but i have no clue how to use it via helping WPE to send the packet.

please give me some tips or a mini-tut on how to prevent disconection when sending a packet.

much thanks in advance

Fuzz

Disto · Newbie cheater Reputation: 0 Joined: 07 Dec 2006 Posts: 23

what i meant was that its all server side. therefor CE is useless..
any tips?

jackyyll · Posted: Sun Sep 14, 2008 5:28 pm Post subject:

Packets are encrypted... Need to decrypt/encrypt first.. The encryption methods are available on the internet already... Go look.

nog_lorp · Posted: Sun Sep 14, 2008 5:30 pm Post subject:

Whether or not it uses a Gameguard style program doesn't directly lead to whether CE is useful or not.

Also, CE can be used to influence the sending of packets (modify the code responsible for sending the packet).

If you are disconnecting when you send packets, that means the packets are stateful. Try this. Jump, look at the packet. Jump again, look at the packet. They will probably be different, meaning if you resend a packet it is clearly not legitimate, the packets are encrypted with a stream encryption algorithm, or have a field to represent packet number or something similar.

jackyyll · Posted: Sun Sep 14, 2008 6:05 pm Post subject:

Disto · Newbie cheater Reputation: 0 Joined: 07 Dec 2006 Posts: 23

so ur saying, for eg: drop 10,000 gold or w.e and recording the packet of picking it up and resending it wont work because there is a counter and u need to increase it for it to not DC?

im hella nuub to packets in general so my bad lol..

rapion124 · Posted: Mon Sep 15, 2008 8:01 pm Post subject:

There's an encryption. Sometimes, it's not even that complex, it's just a GetTickCount value inside the packet. Other times, the packet is actually encrypted using CryptDecrypt. However, most of the time, the author of the game uses his/her own algorithm. Here's how I find encryption.

Assuming there's no protection, open the game with a debugger such as OllyDbg. Get ingame with your character and put a breakpoint on recv(). Run till return (Ctrl+F9) and see what's happening. That will probably get you onto the encryption/decryption routine.

Flyte · Posted: Mon Sep 15, 2008 8:48 pm Post subject:

nog_lorp · Posted: Mon Sep 15, 2008 8:53 pm Post subject:

pkedpker · Posted: Wed Sep 17, 2008 8:31 pm Post subject:

wanna hack a game without gg then make a dll injection re-route decrypted recv buffer to your dll proggy (using ollydbg to find it in the first place)

find the function in ollydbg thats used to send packets (so it accepts decrypted packets) make a typedef{} in C++ to that access get the parameters correct and you could call the ingame function for sending packets.. pretty much same way as the game works but you are controlling it a little..

like here was for a game I've hacked.. this is what I used

jackyyll · Posted: Thu Sep 18, 2008 7:26 am Post subject:

Eudemons online has a function for sending packets. It takes a pointer to a buffer that contains an unencrypted packet. It will then encrypt it, and send it. So hooking the send function would be double the work. The smart thing to do, is find the encryption routine and see what's calling it. It's most likely the same function that sends the packet. The function which called that function should be the one which you want to hook.

WolfDm3 · Posted: Thu Sep 18, 2008 12:43 pm Post subject: