Cheat Engine

Instantflash · Posted: Sat Jun 14, 2008 10:55 am Post subject: Encrypted Hex

Is there anyway to decrypt a hex that is encrypted? The following hex is for a java based, server sided, MMORPG

00 00 00 21 00 42 FF FF 00 43 00 00 A8 99 01 00 0A 62 69 6C 67 65 4C 65 76 65 6C 00 B3 41 B1 C7 1C

When I used "TRANSLATOR, BINARY" I got

!BÿÿC¨™
bilgeLevel³A±Ç

But I dont really think that that is the right info the packet is sending, leading me to think that the hex is encrypted... is there anyway to get the actual value?

STN · Posted: Sat Jun 14, 2008 12:49 pm Post subject:

yes for that, you will have to know how was it encrypted. You won't have a chance of decrypting it if you don't even know whats the encryption.

You can hopefully find the encryption by debugging the program and tracing what it does to the packets before sending.

Hope it helps Smile

.

Symbol · Posted: Sat Jun 14, 2008 1:23 pm Post subject:

Packet data isn't always string data, you know, it could also be integer data.

This packet might even not be encrypted, since there's an actual word (Level) in there.

Instantflash · Posted: Sat Jun 14, 2008 5:23 pm Post subject:

STN · Posted: Sat Jun 14, 2008 11:47 pm Post subject:

OllyDBG > http://www.ollydbg.de/ the only tool you'll need Very Happy

AoiMasamune · Posted: Mon Jun 16, 2008 5:42 am Post subject:

I seriously doubt that any part of that hex is encrypted.

The string data is preceded by 0A, which is the same length as the string.

There are plenty of numbers there if you know how an Integer is structured in memory. Find an Hex->Int converter.

For example,
00 00 00 21
Int32 = 33

00 42
Int16 = 66

FF FF
Int16 = 65535

00 43
Int16 = 67

Etc...

You have to guess at the length of each field unless you reverse it's structure using Olly or IDA, but I hope you get the point.

Instantflash · Posted: Wed Jun 18, 2008 12:15 pm Post subject:

any good online Hex->Int converters?

and then once i edit the int... convert it back to hex

AoiMasamune · Posted: Thu Jun 19, 2008 12:37 am Post subject:

The calculator that comes built into windows xp has one. Just switch it into scientific mode.

Instantflash · Posted: Fri Jun 20, 2008 1:10 pm Post subject:

Alright, Im a bit clueless on this, the calculator on XP is not working for me. So I got my hex (which is base 16 if I belive), all I want to do is just decode it, when using translator, binary i found out two words, but as I said before there has to be some sort of value included with those words. Would I have to convert it to base 10? Or what would I have to do to find out that value of that hex, edit it, and encode it to a hex, base 16 again. Explain in noob speak please Very Happy

AoiMasamune · Posted: Fri Jun 20, 2008 11:21 pm Post subject:

You'll have to explain a bit more about how exactly it's not working. I assume your calculator program is working fine, but that you don't know how to use it. If this is the case, then step by step:

1) Open calculator.
2) Click View->Scientific.
3) Toggle to Hex mode.
4) Enter Hex number to convert.
5) Toggle to Dec mode. The number will convert to Decimal.
6) Perform math on number.
7) Toggle back to Hex mode to convert back again.

And yes, Hex is base 16. It works like this...

Dec 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
16 17 18 19 20 etc.

Hex 0 1 2 3 4 5 6 7 8 9 A B C D E F
10 11 12 13 14 etc.

Chaosis13 · Posted: Sat Jun 21, 2008 5:38 pm Post subject: Re: Encrypted Hex