Printable View
Well, I would like to do password hashing on MatchServer.
I found out that it was fairly easier on the client since I knew what to hook and do a detour on, but anyone could just take it and copy it.
Could anyone tell me what function I should hook on the MatchServer with the address (if possible), or provide the detour details/detour?
Can't think of the exact function or address off the top of my head, but what I would do is change your register page to encrypt the password, then hook the function in MatchServer that does the Match.ResponseLogin packet. Once it receives the packet from the client, encrypt it before you compare it to the password that's in the DB using the same algo as what's in your register page. I might look into it when I get time, but I'm not promising anything. It shouldn't be too hard to do.
Could you show me how the detour for the MatchServer would look like?
It'd work the same as a detour for any other program. I don't know the address or function to detour, I haven't looked at Matchserver or any dumps of it for this sort of thing, I'm just talking off the top of my head. I'd have to investigate it.
MatchServer - Hook OnResponseLogin, edit size of string check.
PHP - the algorithm you want to use. ie: md5(), sha1()
I've looked into the dumps.
I know what algorithm I'd use, I just need to find out the detour and stuff.
Are the parameters for this function related to the detour? If it is, I'll have to find its address of this function. May take me some time.
Code:Function : static, [0x0005f870][0x0001:0x0005e870], len = 0000043c, protected: void __thiscall MMatchServer::OnMatchLogin(struct MUID,char const *,char const *,int,unsigned long)
FuncDebugStart : static, [0x0005f89d][0x0001:0x0005e89d]
FuncDebugEnd : static, [0x0005fc85][0x0001:0x0005ec85]
Data : enregistered edx, Object Ptr, Type: class MMatchServer * const, this
Data : ebp Relative, [0x00000004], Param, Type: struct MUID, CommUID
Data : ebp Relative, [0x0000000c], Param, Type: const char *, szUserID
Data : ebp Relative, [0x00000010], Param, Type: const char *, szPassword
Data : ebp Relative, [0x00000014], Param, Type: int, nCommandVersion
Data : ebp Relative, [0x00000018], Param, Type: unsigned long, nChecksumPack
Data : ebp Relative, [0xffffff70], Local, Type: unsigned int, nAID
Data : ebp Relative, [0xffffff6c], Local, Type: class MCommObject *, pCommObj
Data : ebp Relative, [0xffffff88], Local, Type: class std::basic_string<char,std::char_traits<char>,std::allocator<char> >, strCountryCode3
Data : ebp Relative, [0xffffff78], Local, Type: struct MUID, AllocUID
Data : ebp Relative, [0xffffffc4], Local, Type: struct MMatchAccountInfo, accountInfo
Data : ebp Relative, [0xffffffa4], Local, Type: char[0x20], szDBPassword
Data : ebp Relative, [0xffffff6b], Local, Type: bool, bFreeLoginIP
Data : ebp Relative, [0xffffff6c], Local, Type: bool, bIsPremiumIP
u should find OnResponseLogin D: and i think edit that vars too mmmQuote:
Originally Posted by Linear88
The function is called OnMatchLogin.
bool __stdcall OnMatchLoginHook(struct MUID, char *UserID, const char *Password, int CommandVersion, DWORD ChecksumPack, BYTE MD5Value[]) {
}
Have fun.
I would need to find the address now.
Do I return true in my detour?
Well I got a DLL written up but I can't really find the address to OnMatchLogin in the newer versions, even though I have an older address I can't seem to update this one. I suck with Olly lol. If someone has the address, I can test my DLL and if it works, I'll post it.
Code:#define MMATCHSERVER_ONMATCHLOGIN 0x004328E0
Thanks Lambda! My DLL should be working now. I will need to test it.
How did you find the address anyway?
I was looking for it and I passed that. =/
I had the function address for a long time, but to find an address just copy a few unique bytes of the function and search for those bytes in the other exe.
The problem is, where do I get the unique bytes/signatures?
I have the test.txt and it's for the client, but there isn't any for MatchServer.
There is one for the MatchServer, I had it a while back but lost it. Nobody will share it as everyone is being ego here at the community. Gunner might have it, I'll ask him whenever I talk to him.