Password Hashing

I have sent to gunner the PDB and the exe a few days ago, here is the dump of the functions.

http://rapidshare.com/files/26250600...PDB___Dump.rar

You need to add the imagebase of the exe (0x400000) to each function, so for example for the OnMatchLogin the function address is 0x006A130, so 0x400000 + 0x006A130= 0x46A130 = OnMatchLogin.


Enjoy it.

00436B40 (ZPostCommand)
00437027 (Login Case)
004328E0 (OnResponseLogin)

Quote:

---

Originally Posted by -Lambda-

I have sent to gunner the PDB and the exe a few days ago, here is the dump of the functions.

http://rapidshare.com/files/26250600...PDB___Dump.rar

You need to add the imagebase of the exe (0x400000) to each function, so for example for the OnMatchLogin the function address is 0x006A130, so 0x400000 + 0x006A130= 0x46A130 = OnMatchLogin.


Enjoy it.

---

Thanks, didn't know you have it.

Hmm. Well MatchServer keeps crashing when I try to login with my DLL injected, so I don't know what's up. I'll try to get it figured out.

Quote:

---

Originally Posted by Team Zebra

Hmm. Well MatchServer keeps crashing when I try to login with my DLL injected, so I don't know what's up. I'll try to get it figured out.

---

For me too, it works well with 10-50 clients but with more it crashes the matchserver, i had to write my own class hook library to hook the function without crash the matchserver

Well for me it crashes no matter what. I think the address you gave me is for the wrong version of MatchServer, I'm testing with the June 2007 files. Because no matter what code I put in my hook, it crashes. Or it could be a variety of stuff. I found out through this little project that the version of Detours I'm using doesn't allow you to call the original function without a crash, and Lance's detour class doesn't compile under VC2005. It's a work in progress, lmao.

The address is for the June 2007 files, it works fine for me :S

its just the function is old :p i asked phail why i couldn't use what was in the pdb i have the new one now works fine thats how fatal's antihack hasnt been bypassed i got a hashed password on long

there:
DWORD ZPostLoginAddress = 0x004C3E20;
CDetour ZPostLoginDet;

@ownprox: That's for the client.

I got it working, but it's giving me Cannot Access Server and I have no idea on what to return on what conditions.

Did you make sure your MatchServer didn't crash?

And you shouldn't be returning anything yourself. Just return the original function, but pass it the hashed password and keep everything else the same.

So, do I make my function a void or bool?

Also, PM me your msn. I may need your help from there since it's easier. >.<

RepublicOfAstra@hotmail.com

PHP Code:

---

DWORD OnMatchLogin = 0x004328E0;
CDetour OnMatchLoginDet;
bool __stdcall OnMatchLoginHook(struct MUID, char *UserID, const char *Password, int CommandVersion, DWORD ChecksumPack, BYTE MD5Value[]) {
 Password = Encrypt(Password);
 return true;
} 


---

Works fine with over 80 players.

Gunz won't read the hashed password: it will use the original function.

Even though I did not hash the password in the db and kept my password there in its original form, I still could log on.

Quote:

---

Originally Posted by Wizkidje

PHP Code:

---

DWORD OnMatchLogin = 0x004328E0;
CDetour OnMatchLoginDet;
bool __stdcall OnMatchLoginHook(struct MUID, char *UserID, const char *Password, int CommandVersion, DWORD ChecksumPack, BYTE MD5Value[]) {
 Password = Encrypt(Password);
 return true;
} 


---

Works fine with over 80 players.

---

OnMatchLoginDet.Org(CommUID,szUserID,szPassword,nCommandVersion,nChecksumPack,MD5Value);
I used that and the login don't work :s