View previous topic :: View next topic |
Author |
Message |
Bizarro I post too much
Reputation: 0
Joined: 01 May 2007 Posts: 2648
|
Posted: Tue Apr 07, 2009 3:51 am Post subject: [Q] ip connect packet |
|
|
hi
im trying to figure out what information was sent from a game client to a server
the following packet was intercepted and decrypted when connected the server.
Code: |
translation:[header] [character id] [size] [00-0C-29-3F-37-41 ]
packet: 13 00 A3 0D 04 00 11 00 30 30 2D 30 43 2D 32 39 2D 33 46 2D 33 37 2D 34 31
[size] [000C293F3741_63E7A20C ]
15 00 30 30 30 43 32 39 33 46 33 37 34 31 5F 36 33 45 37 41 32 30 43
|
as you can probably see, the MAC address info 00-0C-29-3F-37-41 was sent through this packet
but i'm kinda confused with the last part of information 000C293F3741_63E7A20C. what is the DWORD 63E7A20C for at the end?
anyone has any ideas
Thanks in advance _________________
w8 baby.com Banner contest, Come join NOW!!
Check us out for Prize deatils |
|
Back to top |
|
 |
Flyte Peanuts!!!!
Reputation: 6
Joined: 19 Apr 2006 Posts: 1887 Location: Canada
|
Posted: Tue Apr 07, 2009 7:56 am Post subject: |
|
|
Without knowing anything about the game, it would be next to impossible to "guess". Though, it would make sense if they were the results of a hash. Why they are stored plain text, I have no idea (maybe for easy storage on the server with less work done on the server). If it is more than one, one of them could be used to salt a hashing function on the client, or for the packet decryption/encryption itself. |
|
Back to top |
|
 |
Bizarro I post too much
Reputation: 0
Joined: 01 May 2007 Posts: 2648
|
Posted: Tue Apr 07, 2009 8:12 am Post subject: |
|
|
i changed both MACaddress part and last DWORD to 0.
it still worked without a crash.
yea i have no idea, maybe just a hash.
i guess i can just grab user's MAC address and make last DWORD random when automate this packet myself _________________
w8 baby.com Banner contest, Come join NOW!!
Check us out for Prize deatils |
|
Back to top |
|
 |
|