Probably the first as I highly doubt Burak would delete things he just released.Quote:
Originally Posted by Droppy
Printable View
Probably the first as I highly doubt Burak would delete things he just released.Quote:
Originally Posted by Droppy
I fixed it, I added cloudflare to domain now.
I will release new build tomorrow. And I work on final version, retro support and recoded some parts (more noob-friendly)
Download link is down? Can you please upload it to mediafire?
Download link is down, please upload it again.Quote:
Originally Posted by BurakDev
What I like even more is making the SWF outputting the packets.. :):
New release this night, using math exploit to execute man in the middle attack
New release :
MEGA : https://mega.co.nz/#!dFcQiLzL!7ib8Jq...4d7BEuuSReIbqM
Mediafire : http://www.mediafire.com/download/m3...r_release4.rar
Mirror : http://logger.burak.fr/BurakLogger_release4.rar
Please read README.txt ! Thanks to @anthony93260 for HostPatcher :P:
Now we don't use patched Habbo.swf, using math exploit to execute man in the middle.
You do know you can't actually obfuscate JavaScript, yeah? It just passes things through eval() until your source code is actually in plain text.
Source, if anyone needs it: http://pastie.org/pastes/9657312/tex...acbjkrubvlhsew
Damn fine work, though. I'm seriously impressed, by you and by how seemingly hard Sulake's trying to keep you all out. Clever crowd all around.
edit: My bad, heh, VERY clever. Burak's actually fetching the crypto functions from his server on the fly to keep them from getting swiped. Oh wait... what did I say about JavaScript? http://pastie.org/pastes/9657412/tex...ruhb2jui3nbbaa
Is impossible to protect Javascript go death, are you fucking kidding me ? My girlfriend can de-obfuscate it.. but I think you don't have a girlfriend.
Okay now let's go Sulake will patch it, n ^ x % n = 0.
Lol, it took five minutes, why would that make you think I'm not a sociable person? I don't even come on here anymore, just stopped in to see who was up to what for the first time in weeks.
Also... patch it? It's encryption. All they need to do is change it, which they would do as soon as they noticed a packet logger had working crypto. They don't care about your code. Which is pretty messy... why are you including all the libraries for BigInt/RSA/MD5 in the main file? They're public, and technically you're in violation of the license agreement of the original projects.
He don't need change encryption, just block "0" sharedkey and bye bye packetlogger.
Only me, @Arachis @LittleJ @capostrike93 executed the man in the middle attack, you are just stupid because you fuck Retro development.
Actually, Burak. You're the stupid one. You're releasing something that is available to the community - and is able to be decrypted as easy as it is. You passed it on to Sulake. Thanks.Quote:
Originally Posted by BurakDev
Also, hinty hinty, I knew it too :)
Edit: Why do I have to keep stating this... This community is not what is has been. Nagging on everybody because of simple statements. Burak; you went personal in a virtual community. Yet to ask you - do you even know who Scott is? I guess not.
HOW CAN I PROTECT JAVASCRIPT CODE ? Is impossible, if Sulake patch this I will use my second math exploit and keep it private for me.Quote:
Originally Posted by Aquel
I would stop using JavaScript.Quote:
Originally Posted by BurakDev
Ok I will make packetlogger using vb6Quote:
Originally Posted by Aquel
Yep. That's reliable. /sarcasmQuote:
Originally Posted by BurakDev
http://i.imgur.com/n57hQkW.png
lololololo
Honestly, that wouldn't be a bad idea. VB6 is really difficult to decompile since it's compiled to a native specification. JavaScript on the other hand, well, it's a scripting language. It's as exposed as handing somebody a PHP source file. C# even has problems with decompilation because it's a managed language.
Point is, your code isn't going to help Sulake patch shit all. If you don't think they can run a program and see exactly what it's communicating to their servers, you're insane. >_>
Yeah, let's make it closed source, because that always helps in growing a community.
Now using source you can do this :
http://i.gyazo.com/62238c77fb41911c7061dca83e8e459f.png
Did you create 100 accounts manually?Quote:
Originally Posted by BurakDev
Have them all shout at the same time :P
O my fucking god.... that's fucking NICE LOL!Quote:
Originally Posted by The General
- - - Updated - - -
By the way it doesn't work for me on Habbo.nl? It shows the client and then it disconnects me and Habbo gives error #0
Fix download link?
Burak's new releaseQuote:
Originally Posted by TeunNL
MEGA : https://mega.co.nz/#!dFcQiLzL!7ib8Jq...4d7BEuuSReIbqM
Mediafire : http://www.mediafire.com/download/m3...r_release4.rar
Mirror : http://logger.burak.fr/BurakLogger_release4.rar
Here you go. :)
Yep. Let's do that. Seems like a clever idea, as it is a pain to keep updated on exploits :)Quote:
Originally Posted by Hoshiko