Official Habbo Changed RSA

[vista4life]

Heya Guys! seems habbo changing alot of security stuff, if you look into the swf you see the RSA is totaly changed, i wonder how long it will take if the people around here could crack it -

it seems it sends 2 strings by init crypto (before string - bool) Well guys what you think? how long it will take who will the first who going to release the RSA patch

Well personal i think joopie will be the very fast one!

 

[Droppy]

Well, I think it would be better for them if they had updated everything in one simple release, would just keep us confuse, and it would take a while to update.
But anyway, most of hotels ain't in mood for updating (a lot of them are turning into phoenix), so it could mean that they are planning to release something big...

 

[James]

Well, I think it would be better for them if they had updated everything in one simple release, would just keep us confuse, and it would take a while to update.
But anyway, most of hotels ain't in mood for updating (a lot of them are turning into phoenix), so it could mean that they are planning to release something big...

I wouldn't say that's because they're not in the mood for updating, most people just don't have the knowledge, and there's not really any "stable" emulators for the newer releases. Plus is alright, but all these "bug-fixes" and "patches" have once again made a good source into poop

 

[Droppy]

I wouldn't say that's because they're not in the mood for updating, most people just don't have the knowledge, and there's not really any "stable" emulators for the newer releases. Plus is alright, but all these "bug-fixes" and "patches" have once again made a good source into poop

Can't agree more about that they aren't in mood for updating (yes, camera ain't a big deal after all these years without years folks, let's be realistic. Where's trax?). They just want to patch our ways to update what they don't do at all. What is the point of us to update if they don't update poop? XD

Sulake makes me laught sometimes.

 

[Moogly]

Camera wont be back, due to the porn pictures people took when scripting was common, why would they risk such things? ;P

 

[academic]

i've just been playing around with wireshark and habbo, as far as I can tell, packets seems to still be the same, in respect to changing the habbo's position, however I have noticed that wireshark detects the protocol (coming from server) to be using OpenWire?

Isn't OpenWire a binary protocol for a certain type of communication? Anything important?

 

[EliteRoyal]

The owner of this hotel has cracked it:

You must be registered to see links

His name in this forum is: Pudding

 

[Hejula]

The owner of this hotel has cracked it:

You must be registered to see links

His name in this forum is: Pudding

Didn't he just remove the encryption from the SWF?

 

[academic]

I found something interesting, Habbo are using a specific library, I think to generate their RSA keys! That library is also open source!

 

[The General]

Didn't he just remove the encryption from the SWF?

I guess that is the easy way.

I found something interesting, Habbo are using a specific library, I think to generate their RSA keys! That library is also open source!

Maybe post that library. We should do more research on this tbh. In the end it might pay off if we know the way the headers get shuffled and the keys are generated.

 

[Joopie]

That library is like forever linked in their helptool. Lol

 

[academic]

That library is like forever linked in their helptool. Lol

Oh really? There help tool? Which library are you talking about?

 

[Moogly]

i've just been playing around with wireshark and habbo, as far as I can tell, packets seems to still be the same, in respect to changing the habbo's position, however I have noticed that wireshark detects the protocol (coming from server) to be using OpenWire?

Isn't OpenWire a binary protocol for a certain type of communication? Anything important?

Digging a little further takes you here:

You must be registered to see links

You must be registered to see links

You must be registered to see links

We've known for years that Sulake uses a cluster of servers to powerhouse Habbo. Guess you found something they use.

 

[Joopie]

Oh really? There help tool? Which library are you talking about?

You must be registered to see links

Lol, where I found the RSA ;p

 

[academic]

The one I know isn't there

The one I'm talking about is:

You must be registered to see links

 

[Joopie]

The one I know isn't there

The one I'm talking about is:

You must be registered to see links

That one is all over the place in the SWF

 

[vista4life]

Didn't he just remove the encryption from the SWF?

Yes he did remove the encryption, the current status from the RSA is that the padding is changed, joopie/jordan is currenlty doing some research about the new method. so let's wait until we got some new information or like before new method for the encryption who knows who can help ? like capostrike for example

 

[Emily]

Well, I hate to say but well they did a good job for the upcoming few days for stopping us. But in the end, the 'legendary' crackers always find a way to bypass it (people like capostrike, LittleJ, vista4life, Joopie or whoever also has experience with it). But it's a good job to stop us at least a few days.

 

[Matthew-the-man]

Well, I hate to say but well they did a good job for the upcoming few days for stopping us. But in the end, the 'legendary' crackers always find a way to bypass it (people like capostrike, LittleJ, vista4life, Joopie or whoever also has experience with it). But it's a good job to stop us at least a few days.

Sledmore also has experience with it, He'll prob crack it and release it

 

[Glee]

I notice that to that Habbo did change their RSA, I compared 2 swf and looked at the RSA Encryption, I know I am not good at this stuff but I did notice that..