0.83 localhost

Newbie Spellweaver
Joined
Jan 15, 2009
Messages
17
Reaction score
66
HS Removed
Any IP
127.0.0.1 by default

Credits do not goes to me.

DL Link:

Mirror 1:
Mirror 2:

FIXED!
Works 100%.

Modified the client so it sends user/pass
 
Last edited:
Re: 0.83 localhost client working

it's illegal, why do you think it was removed in the first place.
And why are you doing this anyways?

Btw, i suggest people scan this before using...
 
Last edited:
Re: 0.83 localhost client working

Code:
Antivirus Version Latest Updated Result 
a-squared 4.5.0.50 2010.03.07 - 
AhnLab-V3 5.0.0.2 2010.03.07 - 
AntiVir 8.2.1.180 2010.03.05 TR/Spy.Gen 
Antiy-AVL 2.0.3.7 2010.03.05 - 
Authentium 5.2.0.5 2010.03.06 - 
Avast 4.8.1351.0 2010.03.07 - 
Avast5 5.0.332.0 2010.03.07 - 
AVG 9.0.0.787 2010.03.07 Win32/Themida 
BitDefender 7.2 2010.03.07 - 
CAT-QuickHeal 10.00 2010.03.06 - 
ClamAV 0.96.0.0-git 2010.03.06 - 
Comodo 4091 2010.02.28 Heur.Pck.Themida 
DrWeb 5.0.1.12222 2010.03.07 Trojan.Packed.650 
eSafe 7.0.17.0 2010.03.04 Suspicious File 
eTrust-Vet 35.2.7342 2010.03.05 - 
F-Prot 4.5.1.85 2010.03.06 - 
F-Secure 9.0.15370.0 2010.03.07 - 
Fortinet 4.0.14.0 2010.03.07 - 
GData 19 2010.03.07 - 
Ikarus T3.1.1.80.0 2010.03.07 Trojan.Crypt 
Jiangmin 13.0.900 2010.03.07 - 
K7AntiVirus 7.10.990 2010.03.04 - 
Kaspersky 7.0.0.125 2010.03.07 Packed.Win32.Black.a 
McAfee 5912 2010.03.06 New Malware.jn 
McAfee+Artemis 5912 2010.03.06 New Malware.jn 
McAfee-GW-Edition 6.8.5 2010.03.07 Trojan.Spy.Gen 
Microsoft 1.5502 2010.03.07 VirTool:Win32/Obfuscator.XX 
NOD32 4922 2010.03.07 - 
Norman 6.04.08 2010.03.07 - 
nProtect 2009.1.8.0 2010.03.07 - 
Panda 10.0.2.2 2010.03.07 - 
PCTools 7.0.3.5 2010.03.04 - 
Prevx 3.0 2010.03.08 - 
Rising 22.37.06.04 2010.03.07 - 
Sophos 4.51.0 2010.03.07 Sus/ComPack-C 
Sunbelt 5780 2010.03.07 - 
Symantec 20091.2.0.41 2010.03.07 Suspicious.Insight 
TheHacker 6.5.1.9.223 2010.03.07 - 
TrendMicro 9.120.0.1004 2010.03.07 - 
VBA32 3.12.12.2 2010.03.05 - 
ViRobot 2010.3.5.2214 2010.03.05 - 
VirusBuster 5.0.27.0 2010.03.06 - 
Extra information 
File size: 4523023 bytes 
MD5...: 256c09e25ea65e58243ae9e7a4429a59 
SHA1..: 539be3dd5062e13a07d0a7aa994061ed30c01381 
SHA256: d75065d4c2556daffbc924be03920a3554eb4412e81b3488b19964f06cd39cc0 
ssdeep: 98304:EEGh+RrQ6KTm2FIWsx2bzfajV/gTBBg+zrn:ETOc6bWKjV/gdSArn
 
PEiD..: - 
PEInfo: - 
RDS...: NSRL Reference Data Set
- 
pdfid.: - 
trid..: RAR Archive (83.3%)
REALbasic Project (16.6%) 
sigcheck:
publisher....: n/a
copyright....: n/a
product......: n/a
description..: n/a
original name: n/a
internal name: n/a
file version.: n/a
comments.....: n/a
signers......: -
signing date.: -
verified.....: Unsigned
 
packers (F-Prot): Themida
 
Re: 0.83 localhost client working

spugdy good job!!

can you give me v82 localhost please???
send me private message or post here please..
 
Re: 0.83 localhost client working

Ty hunneh:):
 
Re: 0.83 localhost client working

Spudgy, did you also figure out that client <-> auth-server (63.251.217.192) communication? Because with the login-information sent encrypted to that server, we won't be able to login :/
 
Re: 0.83 localhost client working

Spudgy, did you also figure out that client <-> auth-server (63.251.217.192) communication? Because with the login-information sent encrypted to that server, we won't be able to login :/
Wow sherlock, did you figure that out all by yourself?
That's probably why it's only 127.0.0.*
 
Re: 0.83 localhost client working

Wow sherlock, did you figure that out all by yourself?
That's probably why it's only 127.0.0.*

Lol, YOU have no idea what I'm talking about.
spudgy - 0.83 localhost - RaGEZONE Forums

As you can see, there's only the password (admin) in the logged packet - no account name.

From 0.83 on, Nexon lets their client connect to another server when pressing the Login button and probably sends the username & password encrypted (I made a topic about that on KDev).
The 'normal' client sends some kind of session (example: NP12:auth03:42:3608843:qyFH3j4h_guMPshXJKbbKeWy9NUhz1_q4OXFrlhfgCqgHFyggfym~81ND9OHf6mnnXnc6x0JvJy22wuVbe7pQi8D~HsSXKosn3gxDZALTv7sq9NzxWAA77Eu0VIMA48HK~ow0YREfF4hP9BTRyBVN_rE2PZJKILqHuwWo~M_S7WddD7AlEMeldZlSRnfD7h4AnIeFI9kJ8Q37P6_qt3Ukgy6PFs7IW) after the password, but in my screenshot you can see there are only useless bytes after the password with this client.
 
Last edited:
Back