Usage: Packet Extractor v3

Wrote new code? Fixed a bug? Want to discuss technical stuff? Feel free to post it here.

Moderator: Moderators

Message
Author
turmoil
Noob
Noob
Posts: 6
Joined: 25 Mar 2011, 17:38
Noob?: No

Re: Usage: Packet Extractor v3

#51 Post by turmoil »

extractor v3 cannot extract recvpackets from protected clients...

User avatar
kLabMouse
Administrator
Administrator
Posts: 1301
Joined: 24 Apr 2008, 12:02

Re: Usage: Packet Extractor v3

#52 Post by kLabMouse »

turmoil wrote:extractor v3 cannot extract recvpackets from protected clients...
It cannot do it directly. You need to make a Memory Dump of process.

Motivus
Developers
Developers
Posts: 157
Joined: 04 Apr 2008, 13:33
Noob?: Yes

Re: Usage: Packet Extractor v3

#53 Post by Motivus »

Extractor.exe is not working with the latest iRO Ragexe.exe. extractor.exe makes recvpackets.txt, puts nothing in it, and stops working. Ragexe.zip

We also dump the PacketLenMap with our packet extractor and it required some minor updates, but the method used is quite a bit different from yours. They compiled the exe with a newer version of MSVC, and the function we used to traverse was infinitely looping. The hackish fix I did was to check if node->key >= ourarrays_maxlen (~0x999) and node->key == 0 (because in a running exe there will be lots of non-NULL pointers with key == 0.)

I am terrible at reverse engineering and I am jealous of what I saw in your program when I took a peek just now. I've tried to learn quite a bit, but I'm never sure how to learn and tackling an exe like Ragexe seems overwhelming to me. ;)
Oh no.

turmoil
Noob
Noob
Posts: 6
Joined: 25 Mar 2011, 17:38
Noob?: No

Re: Usage: Packet Extractor v3

#54 Post by turmoil »

kLabMouse wrote:
turmoil wrote:extractor v3 cannot extract recvpackets from protected clients...
It cannot do it directly. You need to make a Memory Dump of process.

sounds too technical for an average person like me...

can you provide a step by step procedure on Memory Dumping? or a brief overview of the process you are talking about...

im sure i can catch up easily..

tnx in advanced!!

yayik
Noob
Noob
Posts: 7
Joined: 13 Apr 2011, 11:31
Noob?: Yes

Re: Usage: Packet Extractor v3

#55 Post by yayik »

botty wrote:there were no msg,
D:\.....\v3> start.exe ! packet_extract.pl xxx.exe
_

then for how many seconds,

D:\.....\v3> start.exe ! packet_extract.pl xxx.exe
D:\.....\v3>_

so i thought it was successful then i tried to check the folders,
there was no extractor.exe.

inside the src folder has 2 files: extractor.exe and extractor.asm
i've use the extractor.exe > test.txt command
when i open the test.txt it shows:
# Packet Extractor by kLabMouse
# Extracted from ppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppppp
I have also the same problem.. the start.exe opens for 1 sec then close itself Pls help us

User avatar
kLabMouse
Administrator
Administrator
Posts: 1301
Joined: 24 Apr 2008, 12:02

Re: Usage: Packet Extractor v3

#56 Post by kLabMouse »

I'm currently working on a new version. please be patient.

gamepro9
Noob
Noob
Posts: 2
Joined: 10 May 2010, 04:38
Noob?: No

Re: Usage: Packet Extractor v3

#57 Post by gamepro9 »

i cant find the server type for Cookie RO oso..
i jst play back ro recently.. can we still bot?

b0y3t01
Noob
Noob
Posts: 3
Joined: 03 May 2011, 20:38
Noob?: Yes

Re: Usage: Packet Extractor v3

#58 Post by b0y3t01 »

:( Hello...... :(

I have a problem using Packet_length Extractor & JVC TOOLS in getting recvpackets in a private server


Packet length extraction started...
==================[ ERROR ]==================
Sorry I cant find the offset of the packet length function.
The executable file might be compressed/protected.
=============================================

so i follow this instruction base on my reseacrh

From last time, when all known Packet Extractors failed on kRO targets... I came out with a little PoC code to make more universal way of extracting packets.
It's called 'PacketExtractor v3'. ;)

Well, As It says, it's just a Proof of Concept. So I need Reports on targets where it fails to Extract packets. :D

Usage:
1) Download and unpack http://openkore.svn.sourceforge.net/vie ... /?view=tar
2) Download start.exe and XSTools.dll from http://misc.openkore.com and unpack to the same folder where packet_extract.pl is placed (optional)
3) copy target .exe file to the same folder where packet_extract.pl is placed
4) run "start.exe ! packet_extract.pl your_exe_name.exe" or "perl packet_extract.pl your_exe_name.exe" to generate extractor.exe
5) run "extractor.exe > recvpackets.txt" to save extracted packets to text file.

... but stil got an error
i can extract recvpackets here............. anyone can help me about this?

turmoil
Noob
Noob
Posts: 6
Joined: 25 Mar 2011, 17:38
Noob?: No

Re: Usage: Packet Extractor v3

#59 Post by turmoil »

tnx dude... i wish i could be of any help to you.. ;)

b0y3t01
Noob
Noob
Posts: 3
Joined: 03 May 2011, 20:38
Noob?: Yes

Re: Usage: Packet Extractor v3

#60 Post by b0y3t01 »

is there any update in getting recvpacket?

Post Reply