Cheat Engine

cooljay · How do I cheat? Reputation: 0 Joined: 08 Mar 2009 Posts: 2

hey guys i m just wondering what programm this dude was using on the ss

edit: attached those ss, since i cant post URL's atm =(

since winsocketeditor doesnt work on this game, my only option was using wireshark, but wireshark is sniffs all packets and i just want to sniff special type of packets (game packets)

and does any1 know a good decryption programm?
like a programm where i can type in the actual data, the sniffed code and then it somehow figures out the key?

the packets of this game are somehow pretty well encrypted and i dont think that i m able to decrypt it on my own Sad

thanks in advance

Monkeys · Posted: Sat Mar 14, 2009 10:30 am Post subject:

It's a homemade sniffer Wink

Also, it's not encrypted that bad.
Only has a checksum as far as I see.

As you can see, that last part is always the same, and when you convert it, you get EXACTLY hello with nulltermination.

cooljay · How do I cheat? Reputation: 0 Joined: 08 Mar 2009 Posts: 2

mhh right, well i m still a noob in these stuffs, but i m workin on it ^^

thanks for your reply, i ll play around with it later when i m back

sven3107 · Posted: Sat Mar 14, 2009 11:02 am Post subject:

It not really encrypted, its just ascii code, hex and some assembler commands heres an image to help you decrypt texts

41 = A
5A = Z

cooljay · How do I cheat? Reputation: 0 Joined: 08 Mar 2009 Posts: 2

thx for your help,

this is what i got when decoding
05 0d 00 03 df a9 00 10 06 00 c0 13 68 65 6c 6c 6f 00
->

�ß©��Àhello�

so, yeah, i dont think there are any assemblercode parts now, cuz it would be too extensive
maybe there are only some byte of information, that tells what kind of code it is (in our case a simple chat message)
and the rest are checksumms

well the guy who i got the screenshots from, mentioned something abt 16 byte header.... maybe the first 16 byte are the checksumms?

edit2:
lol i have sniffed a packet myself now, sending exactly the same message "hello" in chat and i got those codes:

2d 10 af 92 0e 81 22 aa 37 27 8d 00 39 a7 10 85 3b 89 5f d9 6c fc 46 d0 29 b2 01 97 37 ce

8f db 11 8f 0e ca 22 aa 37 27 8d 00 39 a7 10 85 3b 89 5f d9 6c fc 46 d0 29 b2 01 97 37 ce

so the packet typ i sniffed and the packettype on the ss are kinda diffrent, maybe his homemade programm already has decoded/decrypt those packets in human readable codes lol...

from the codes i sniffed, i get weired senseless stuff if just simply decoded, so i assume there is a encryption... damn

also, by sending once the message i got 2 packets, maybe the second packet is just for confirmation or something? but still those 2 packets arent kinda the same... so i guess its somehow affected by the time maybe .... damn questions after questions