TCP Packet Decrypting

[mike0631]

Removed.

 

[Taiga]

Can you please provide the name of the game or anything related to the game? Most games use a encryption on their packets to prevent people from making private servers but can be figured out or replaced. We need to know the game before we can help you with this.

 

[GHOST107]

Could you also provide more packets, because lookng at the length of data is 16 bytes long(could be a block cypher)

assuming this is the header - 14 00 03 03
this is 16 bytes length - E3 42 0D 9C D7 50 03 AA 3B 83 D7 21 9C 5B 0B 63

 

[mike0631]

Removed.

 

[Hilia]

[COLOR=#0000BB]14000303E3420D9CD75003AA3B83D7219C5B0B63  [/COLOR]

The header is a short indicating the length of the packet 14 00 , means size = 20 bytes (20 bytes inclusive the header). This means there are 18 unidentified bytes.

303E3420D9CD75003AA3B83D7219C5B0B63

Are those bytes static or do they change every time the packet is sent?
So yes what part is static

Also what is the version of the game ,this could maybe be found back in the packet.

Game is called QPang , for those who care.

 

[mike0631]

Removed.

 

[Hilia]

The reaming bytes do in that case contain the encryption key and maybe some other things. Its not to me to figure that out though.

 

[mike0631]

Removed.

 

[Hilia]

No hackshield isn't doing that.
The best you could do is find a working emulator and get the encryption from that or, open the client in a debugger and nop out the encryption and decryption and eventually hackshield

 

[mike0631]

Removed.

 

[sunnyboy]

There is no emulator available for this game, nobody made one while the game was there.

Better start debugging then, grab a copy of ollydbg and see what you can find. You can ultimately, if you don't care, get a copy of Hex Rays IDA and look through it better.

 

[mike0631]

Removed.