[05/29/15] AevaRO Bot - we're doomed

[procurando]

You just need download the "lite" version and put it on older client full. Its only 100mb.

I tried to take info from serv but its all confuse, look:

It should be like it:

1 version (4-byte , in hex)
2 IP
3 port
4 master version (1-byte, in hex)

Aeva Serv info:

1 version (4-byte , in hex) - (dont know where is it? if i convert 4FBF1E00 HEX-DEC it will be: 11337925120, i dont understand that.)
2 IP (OK)
3 port (OK)
4 master version (1-byte, in hex) - (so it will be 1???)

[procurando]

I dont know how to get that server type too.. the newest is RagexeRE_2013_08_07a.pm

edit: i found master version and version:
connection>
<display>Aeva Ragnarok Online</display>
<balloon>A tale that never ends</balloon>
<desc>A tale that never ends</desc>
<address>167.114.188.161</address>
<port>6900</port>
<version>26</version>
<langtype>1</langtype>
<registrationweb>panel.aevaro.com</registrationweb>

edit2: i dont understand it but i think it ill help:
http://forums.openkore.com/viewtopic.ph ... 8&start=60

[brokenbokeh]

You just need download the "lite" version and put it on older client full. Its only 100mb.
Aeva Serv info:

1 version (4-byte , in hex) - (dont know where is it? if i convert 4FBF1E00 HEX-DEC it will be: 11337925120, i dont understand that.)
2 IP (OK)
3 port (OK)
4 master version (1-byte, in hex) - (so it will be 1???)

@procurando
That is the game_login (packet 0065) not the master_login (packet 0064).


The initial login uses HTTP (the protocol used when browsing the WWW) and it sends it to IP address: 50.87.190.24)

[procurando]

i dont understand, how u get that ip?
i found that version, master version, ip and port, using grf tool:
connection>
<display>Aeva Ragnarok Online</display>
<balloon>A tale that never ends</balloon>
<desc>A tale that never ends</desc>
<address>167.114.188.161</address>
<port>6900</port>
<version>26</version>
<langtype>1</langtype>
<registrationweb>panel.aevaro.com</registrationweb>

[brokenbokeh]

You can sniff it with WPEPRO3. I used wireshark.

[procurando]

I already found it, i need help with serv type:

[brokenbokeh]

Have you compared the previous exe to the latest. I believe if they have the same dates then the servertype did not change but the way to login in the game did.

P.S.
Just a note. The way they are doing it now is less secure because the password is sent in plain text.

[melody]

i'm working on it.. we STILL have a CHANCE to bot, just give me some time

[procurando]

Hey melody, any update?

[melody]

i have bypassed it now.. but let me use this first for days i think , i will not release the bot for now