New Habbo Packets Private

[academic]

Hi,

I've been playing around with Wireshark and Habbo and finding interesting packets as I want to find out more about Habbo Encryption/Packets and eventually start somewhere. However, I don't really know what I'm looking at? Is this new with the new encryption/encoding or am I just being a **cking idiot and this is how its always been?

If anybody would care to explain to me what I'm looking at, I would be very greatful too. Anyhow, these are just some captured packets from Wireshark, in readable text.

[WALKING]

[Packet 1]
oeMs7E(3@'rB
>7r*P-}t

[Packet 2]
oeMs7Ee3@'qB
>7r*P9C0.0/flatctrl 4/mv 5,7,0.0//

[Packet 3]
oeMs7EZ3@'qB
>tr*PB.C0.0/flatctrl 4//

[/WALKING]

[TALKING]

[Packet 1]
oeMs7EF3@'qB
>r	P_#Hi

[Packet 2]
oeMs7EF3@'qB
>r	P^Hi

[Packet 3]
oeMs7EF3@'qB
>r	&P^Hi

[Packet 4]
oeMs7EF3@'qB
>"r	8P^Hi

[Packet 5]
oeMs7EF3@'qB
>@r	JP^_Hi

[Packet 6]
oeMs7EF3@'qB
>^r	\P^.Hi

[Packet 7]
oeMs7EI3@'qB
>|r	qPyHello

[/TALKING]

 

[The General]

As far as I know encryption didn't change?

 

[Emily]

As far as I know encryption didn't change?

I think he did mean from R63 old crypto to new crypto

OT: http://forum.ragezone.com/showthread.php?t=928075 I got a nice tutorial for new crypto just look at the bottom of full tutorial

 

[Droppy]

I think he did mean from R63 old crypto to new crypto

OT: http://forum.ragezone.com/showthread.php?t=928075 I got a nice tutorial for new crypto just look at the bottom of full tutorial

I think he meant because Wireshark doesn't understand Habbo protocol properly, then it just result chars, or whatever...
OP: I would recommend you to make some kind of plugin to it you wish to work further on with Wireshark + Habbo, but I wouldn't recommend. NovoFatum does a great job already sniffing packets and stuff.

 

[academic]

I think he meant because Wireshark doesn't understand Habbo protocol properly, then it just result chars, or whatever...
OP: I would recommend you to make some kind of plugin to it you wish to work further on with Wireshark + Habbo, but I wouldn't recommend. NovoFatum does a great job already sniffing packets and stuff.

Yeah that's what I'm referring to, as well as the protocol as well. I'm a complete novice when its comes to understanding how packets are formed/structed. I do have a basic understanding, however, I wouldn't call that knowledge or call it knowing/understanding packets.

I understand the Habbo protocol, but I was wondering why they appear, as they have appeared.

For example:

[Packet 2]
oeMs7Ee3@'qB
>7r*P9C0.0/[B]flatctrl 4/mv 5,7,0.0//[/B]

Packet 2 appears with that, obviously the bold part, is the coordinates, but whats the data behind that, is that encrypted data, and if so, is that RSA cipher text or is that just an encoding? It would be great if you could explain!

I'm just trying to build my knowledge upon Habbo protocol, and I'm very interested in learning more about it. I do know a little, but I'm missing the basic necessities to understand and maybe build/improve upon a Habbo project in the future. I don't really know what to ask, as I don't really know where to start to ask.

I know they appear differently, because NovaFatum (although doesn't work now) used a exploit, in which NovaFatum actually communicated to the Habbo client, by sending a fake public key at login to disable security (if i'm not mistaken?). But why do they appear differently in Wireshark?

 

[The General]

I think he meant because Wireshark doesn't understand Habbo protocol properly, then it just result chars, or whatever...
OP: I would recommend you to make some kind of plugin to it you wish to work further on with Wireshark + Habbo, but I wouldn't recommend. NovoFatum does a great job already sniffing packets and stuff.

Isn't novofatum patched? Atleast, the exploit it used?

Yeah that's what I'm referring to, as well as the protocol as well. I'm a complete novice when its comes to understanding how packets are formed/structed. I do have a basic understanding, however, I wouldn't call that knowledge or call it knowing/understanding packets.

I understand the Habbo protocol, but I was wondering why they appear, as they have appeared.

For example:

[Packet 2]
oeMs7Ee3@'qB
>7r*P9C0.0/[B]flatctrl 4/mv 5,7,0.0//[/B]

Packet 2 appears with that, obviously the bold part, is the coordinates, but whats the data behind that, is that encrypted data, and if so, is that RSA cipher text or is that just an encoding? It would be great if you could explain!

I'm just trying to build my knowledge upon Habbo protocol, and I'm very interested in learning more about it. I do know a little, but I'm missing the basic necessities to understand and maybe build/improve upon a Habbo project in the future. I don't really know what to ask, as I don't really know where to start to ask.

I know they appear differently, because NovaFatum (although doesn't work now) used a exploit, in which NovaFatum actually communicated to the Habbo client, by sending a fake public key at login to disable security (if i'm not mistaken?). But why do they appear differently in Wireshark?

RC4 encoding with shared key.

 

[academic]

Isn't novofatum patched? Atleast, the exploit it used?





RC4 encoding with shared key.

Yeah the exploit it used is patched and it doesn't work.

RC4 encoding is a Sulake encoding right? As in, they implemented their own version?

 

[The General]

Yeah the exploit it used is patched and it doesn't work.

RC4 encoding is a Sulake encoding right? As in, they implemented their own version?

Do some research. I mean by assuming you will never get things for 100% sure.

If I rename it, it will be my version.

 

[Caustik]

Yeah the exploit it used is patched and it doesn't work.

RC4 encoding is a Sulake encoding right? As in, they implemented their own version?

RC4 is a standard encryption algorithm used in many things.