[Help] Encrypted Packet Send Failure

[claven]

Allright first of all thank you for letting me making a new topic

Here the server information i could give

ST : RagexeRE_2012_04_10a
Client.exe : http://www.mediafire.com/download/99ce0 ... Ragexe.exe
Recvpacket : http://pastebin.com/QhB90mF5 (Based on PEEK)
CryptKeys (CMIIW) :

Code: Select all

Key1 = 0x01581359 conversion -> 22549337
Key2 = 0x452d6ffa conversion -> 1160605690
Key3 = 0x6afb6e2e conversion -> 1794862638

Server config (CMIIW) :

Code: Select all

[Ragnarok]
ip (hidden for some reason)
port 6900
private 1
master_version 30
version 6
secureLogin 1
charBlockSize 144
serverType kRO_RagexeRE_2012_04_10a
serverEncoding Western
recvpackets recvpackets-rr.txt
addTableFolders translated/kRO_english;kRO

and i occur stuck on map server like this

i dunno exactly what is the problem
i've been trying all combination of cryptkeys but the sent packet keep on 094B address

Code: Select all

	$self->cryptKeys(22549337, 1160605690, 1794862638); response -> [094B]->[24DF] / KEY : [0x0158]->[0x2D94]
	$self->cryptKeys(22549337, 1794862638, 1160605690); response -> [094B]->[464D] / KEY : [0x0158]->[0x4F06]
	$self->cryptKeys(1160605690, 22549337, 1794862638); response -> [094B]->[4AF6] / KEY : [0x452D]->[0x43BD]
	$self->cryptKeys(1160605690, 1794862638, 22549337); response -> [094B]->[464D] / KEY : [0x452D]->[0x4F06]
	$self->cryptKeys(1794862638, 22549337, 1160605690); response -> [094B]->[4AF6] / KEY : [0x6AFB]->[0x43BD]
	$self->cryptKeys(1794862638, 1160605690, 22549337); response -> [094B]->[24DF] / KEY : [0x6AFB]->[0x2D94]

please let me know if you need more information like recv/send.pm
Thanks in advance

[SkylorD]

Note 1 : Just because PEEK has extracted the key doesn't means that you should use it.

[claven]

But sir when i try to swap the packet 094B with 4AF6

Code: Select all

Encrypted MID : [4AF6]->[094B] / KEY : [0x6AFB]->[0x43BD]
Sent packet    : 4AF6    [19 bytes]
Packet Tokenizer: Unknown switch: ABCD
================================================
<< Received unknown packet [26 bytes]   Apr 14 16:00:52 2016
  0>  CD AB 14 00 78 69 79 00    AA AA 10 19 00 10 49 10    ....xiy.......I.
 16>  2A 78 9D 37 83 02 42 EF    1E 00                      *x.7..B...
<< Received packet:      02EB [13 bytes]
Encrypted MID : [014D]->[4A08] / KEY : [0x43BD]->[0x4B45]
Sent packet    : 014D    [ 2 bytes]  [Guild First Query]
Sent Guild Master/Member Check.
Encrypted MID : [014F]->[7DD8] / KEY : [0x4B45]->[0x7C97]
Sent packet    : 014F    [ 6 bytes]  [Guild Query Page]
Sent Guild Request Page : 0
Encrypted MID : [014F]->[72EE] / KEY : [0x7C97]->[0x73A1]
Sent packet    : 014F    [ 6 bytes]  [Guild Query Page]

it shows i can login to map server for about 1min then i disconnected and i got Packet Tokenizer: Unknown switch: ABCD message
anyway this server using Gepard
this is the latest exe http://www.mediafire.com/download/ghwjfvn0oyjik5r/
and the server website http://goo.gl/TSgbWM
is this botable server?
Thanks in advance.

[SkylorD]

It's unbottable server! (you probably will need emulate the shield)
I'm appreciated for you post the link.
I'll analyse this server.

[claven]

means that i need more effort botting on this server or it's totally unbottable server?
cuz i saw plenty botters here
i do really appreciate your response SkylorD
please notice me if there is any update for botting on this server

[SkylorD]

I Will tell u a secret. Im not good with RCE, if u know what to do go already. There is a bypass but idk how i didnt bypass the gepard shield to debug if someone is badass help us

[claven]

wow cool SkylorD
could you please tell me the secret, i do really want to learn
but sorry i'm quite new with openkore (look at my join date )
thanks SkylorD!

[SkylorD]

Only thing i've found :

http://forums.openkore.com/viewtopic.php?f=9&t=195910

[claven]

been trying to understand .dll and rce is.
so tough
no progress yet
anyway, thanks SkylorD!

[claven]

SkylorD how about forcing kore to send the hex response of abcd packet? i'll sniff the hex response and hoping the response is static
how can i contact you privately