Koaxia Game Hacking Board
Welcome, Guest. Please login or register.
Did you miss your activation email?
November 21, 2008, 01:42:26 PM

Login with username, password and session length
Search:     Advanced search
http://www.synrg-design.com
Partnered with Koaxia.

61344 Posts in 16742 Topics by 41255 Members
Latest Member: Faulafludge
* Home Help Search Login Register
+  Koaxia Game Hacking Board
|-+  Strategy and MMO
| |-+  Ragnarok-Online
| | |-+  Guides / Importants Topics
| | | |-+  KingJing's Guide to Exploiting
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] 2 3 Print
Author Topic: KingJing's Guide to Exploiting  (Read 18240 times)
KingJing
EXPLOiTED
Hero Member
*****
Offline Offline

Posts: 1327


Message from Hell


View Profile
KingJing's Guide to Exploiting
« on: November 07, 2005, 10:05:32 PM »

~*KingJing's Basic Guide to Exploiting*~

Chapters
  • 1.) Understanding the Server <--> Client Communication
  • 2.) Mastering WPE
  • 2.1) * ~Packet Creation
  • 2.2) * ~Filter Creation
  • 3.)Observing
  • 4.)Exploiting itself



~* Server <--> Client *~

1.1) Explanation ( Server <--> Client )



So, the Client is your Ragnarok Game you use to connect to the Server you play on. The Server saves all important things like Items, Characters, EXP, Position of your Char, Zeny and everything else. The blue'ish Part is basically your Computer, the part you can access, nothing usefull saves on this Side as you can see. The Client is just like a Remote Control it tells the Server what you want to do and the Server itself executes it.

1.2) The Comunication ( Server <--> Client)

Lets take a Real Life example for this, you just tell your friend to move to a certain spot by pointing on it, and he will move there as long as he can (or he starts refuse Wink). The communication between the Client and the Server happends in almost the same way but instead of talking a langauge like english, french, german or w/e they use PACKETS to communicate with each other.

Lets return to our example with our Friend, to get your Friend moving you would prolly say something like

Quote
Hey dude move over there please.
Hey now move over there thanks.
Please move over there.

and thats how the client would tell the server to move your character

Quote
A7 00 36 06 58 28 F8 00 2B C8 90
A7 00 36 06 58 28 F8 00 2B 48 C0
A7 00 36 06 58 28 F8 00 2C 08 80

this sure looks weired at the first view, but it isnt that hard. Those are 3 packets wich the Client sends out to move your Character on the Server. The packets consits always of a certain ammount of Hexadecimal Digits ( Hexadecimal have the base of 16 instead of 10 like decimal)
Hexa basically looks like this:

Code:
1 = 1
2 = 2
3 = 3
4 = 4
5 = 5
6 = 6
7 = 7
8 = 8
9 = 9
10 = a
11 = b
12 = c
13 = d
14 = e
15 = f
You can also use the standard Calculator that comes with Windows to calculate Decimal -> Hexadecimal and visa-verce.


make sure you change your view options


Now it should look like this, just enter the number you want to calculate and switch between the marked options.

Back to our packet

A7 00 36 06 58 28 F8 00 ** XX YY

The A7 is the packet header wich tells us what type of packet it is, in that case its a movement packet.
The last 3 numbers are the exact coordinates you want to move to, if you cant move there because thers a Building or something the server will move you to the closest possible location.

There are packets for all Actions that can be done ingame (Attacking, Skills, Movement, Item Drop, Pickup, ...).
So packets are basically the Langauge of the Server and the Client.

1.3) IDs (Server <--> Client)

As the Server communicates with Packets, it wont send out Player, Item and Monsternames instead of it it uses their IDs.
Everything in Ragnarok has a ID-Nummber, all Accounts, all Characters, all Pets, all Items, all NPCs, all Monsters even the Equipment in your Inventory gets a Equipment ID.

You can receive the ID of Players, Monsters, Pets and NPCs by using this Exploit  Click here!, once you use that Exploit you can just Righclick anything ingame and you will see its ID in decimal. Ok if you want to send a Attack-Packet to attack a Lunatic now you will need its ID in Hex so use the Windows calculater to convert it from Dec to Hex. Ok and now there is one of the most important Parts about IDs, all IDs are inverted. To explain this I prepared this Example

Lets assume Lunatics ID is 1063, the calculater will give you as Hex Result 427, since its always 2 Digits per Number we need to add a 0,  that makes 0427, now we devide it into couples 04 27. Ok we basically would have the ID ready to insert BUT Ragnarok sents all IDs Inverted so we gotta instert 27 04 into the packet as ID.

Well this might sound confusing now, but it will be clearer once we get to the ingame examples

So we basically know now how Server and Client Communicate with each other.



Chapter 1 - Summary
Nothing valuable is saved client-side.
Server and Client communicate with each other via Hexdecimal Strings so called Packets.
Instead of Names, IDs are beeing used within the Packets.





~* Winsock Packet Editor *~

 Tools



2.1) Explanation ( WPE )

The Winsocket Packet Editor is a easy-to-use Packet Logger and Sender. We can use it to watch and modify the packets used between the Server and the Client. Well that should be enough explanation for now, lets do something with it Wink


2.2) Basic WPE Usage ( WPE )

Start your Ragnarok Online Client and now run WPE.


Now hit "Target Programm" and select your Ragnarok Online Client (as shown above)

Log into Ragnarok and go to a calm place.
Now switch back to WPE and Press the "Play"-Button, it will now start logging all incoming and outgoing packets.


Now say something in Ragnarok Online (I said Hi there) and Press the Stop button.
It should now look like this:



So what do we see here ?
Basically those are the Packets the Client sends and receives, in that case its a Chatpacket (8C Packet Header) as you can see, but why are there 2 of em?
Thats because you send them to the Server and it doesnt get displayed yet, the Server first verfys the Chatmessage and then sends it back as 8E Packet, this one is going to be displayed in your Chatwindow.
Theres a Source and Destination Collum, those contain IPs, the Destination IP of the Send-Packet is the Servers IP the Source IP of the Send-Packet is your IP, visa verce for receive packet (source = servers ip, destination = your ip).
Note: If you're wondinger why those IPs are the same on the screenshots, its because I am running Server and Client on the same Computer Smiley



Right-Click the first packet (Send one) and select send (as above)

Now a window should pop up like this one:

This is the Main Packet-Sender Function of WPE, I´ve added some explanations to the picture altough most things are selfexplaining.
Now Click the Play-Button and check your Ragnarok Client, your char said the same line again, that is because you send the Chat-Packet again, but its kinda boring to hear the same line again and again isnt it ?

So lets modify the line !


Oh, your new message doesnt fit into this packet ? Simple: To increase the lenght of the packet press the arrow that has a Red Border on the picture (the one within the Packetsize Panel). Now just overwrite the ASCII Part (the one where you can see the Chat-Line), WPE will automatically translate it into Hexa-Decimal Numbers.
Now just hit "Play" again. Check your Ragnarok Client, your Character said the new line, pretty cool eh ?

Congratulations you just modified your first packet Wink


Still not finished :p but im really busy at time

if something sounds gibberish just post
constructive critism wanted
« Last Edit: July 31, 2006, 03:20:46 PM by KingJing » Logged



reinmaker
Jr. Member
**
Offline Offline

Posts: 90


Use Your Head!!!


View Profile
Re: KingJing's Guide to Exploiting
« Reply #1 on: November 07, 2005, 10:25:51 PM »

yay!!!

cheesy
« Last Edit: November 09, 2005, 04:57:31 PM by •ReinMaker™• » Logged


LOADING...
raider*
UNDERGOUND 777
Jr. Member
**
Offline Offline

Posts: 56

osama bin laden to the rescue!!


View Profile
Re: KingJing's Guide to Exploiting
« Reply #2 on: November 08, 2005, 12:38:35 AM »

WOW,dode its cool
but acctually im a big n00b at hacking,i got maybe a "similar" topic like this
but its not accurate and as you know,i  am a BIG N00B cool
Logged

medix(BANNED)
Full Member
***
Offline Offline

Posts: 119



View Profile WWW
Re: KingJing's Guide to Exploiting
« Reply #3 on: November 08, 2005, 12:51:44 AM »

how fucking awesome can you get jing?
Logged

Shadows
Insignificant Member
Sr. Member
****
Offline Offline

Posts: 404



View Profile
Re: KingJing's Guide to Exploiting
« Reply #4 on: November 08, 2005, 01:23:45 AM »

I'm not sure if it's considered an exploit to use that to find another person's ID... just sniff the packets for opening a trade sequence.

WPE Pro is especially useful for RO, mostly because it lacks encrypted packets. This means that you'd be able to use a direct manipulation of the packet data the client sends to the game, rather than the packets being constantly different, going by some algorithm.

Since the packets are unencrypted, building exploits and experimentation is relatively effortless, and require just sending the packets in the right places. To get the packet, you just start up WPE Pro and sniff it, then alter it in the differing areas (areas with numeric and amount values, or category). Building filters is not as hard either, and usually aid in executing an exploit faster (without constantly sniffing), but I'm sure KingJing can explain it far better than me.

Such as the packet to send money to a bank: You'd first need to have the packet that begins the speaking sequence with the Banker NPC. Some Banker NPC's have exploits hidden in them, and by experimenting through carts, trades, crashes, etc, you'd be able to find something useful. Creativity comes in here, in trying to send packets in the right places, in the right sequence. Even minor glitches, can lead to major discoveries if combined together, or tested further.

A useful note which KingJing didn't post up there, is also that all "instant zeny/instant item/instant stat/instant lvl up/etc..." are scams, because the data for all of that is saved and stored serverside. This means that editing the clientside (your computer) memory would not make any difference. It would only create an altered picture, with no actual value (Artmoney edits clientside, making it useless). From what we know of all this, we can deduce that programs and "hacks" that promise unrealistic results like "instant zeny" are viruses, or keyloggers with the purpose of stealing your password or controlling your computer.


Btw, your guide rocks kingjing.
« Last Edit: November 08, 2005, 01:30:09 AM by Shadows » Logged

Free Zeny Bot

sluos ym

I'm Back; Jan. 12th 2007. Without taking the proper precautions, you'll just lose exploits.

Notable Koaxia Members:
Helba
CyrusTheVirus
feetlikefins
Jr. Member
**
Offline Offline

Posts: 77


View Profile
Re: KingJing's Guide to Exploiting
« Reply #5 on: November 08, 2005, 02:09:21 AM »

finally! great article kingjing!

do continue!
Logged
Lord Cedrich
Hero Member
*****
Offline Offline

Posts: 690


Koaxia's Heart Rob


View Profile
Re: KingJing's Guide to Exploiting
« Reply #6 on: November 08, 2005, 02:29:53 AM »

This article is great, it helps a lot for the noob ...
Logged

Crypt Cross
Newbie
*
Offline Offline

Posts: 21


View Profile
Re: KingJing's Guide to Exploiting
« Reply #7 on: November 08, 2005, 04:07:46 AM »

Great starter for noobs like me... Just the right tool to start searching for exploits and finally contributing something to Koaxia's cause other than just leeching...   cheesy
Logged
Th0R
100% n00b !!
Hero Member
*****
Offline Offline

Posts: 527


Trust is Weakness!!!


View Profile WWW
Re: KingJing's Guide to Exploiting
« Reply #8 on: November 08, 2005, 08:02:25 AM »

WoW!!! - Its nice kingjing..
Keep continuing those articles then  cool
Logged




Whoever said nothing is impossible; never tried slamming a revolving door.
Solidsnake47
Hero Member
*****
Offline Offline

Posts: 1415



View Profile
Re: KingJing's Guide to Exploiting
« Reply #9 on: November 08, 2005, 09:58:17 AM »

With the use of analogy, people can understand more.

Suggestions:
Use more analogies.
Logged
aiwendel
Newbie
*
Offline Offline

Posts: 17


View Profile
Re: KingJing's Guide to Exploiting
« Reply #10 on: November 08, 2005, 01:49:57 PM »

possible exploits are making the server think your handling one object when youre actually handling another.
Like the old compound exploit, the server overlooked the fact that the weapons weren't cards.
Logged
KingJing
EXPLOiTED
Hero Member
*****
Offline Offline

Posts: 1327


Message from Hell


View Profile
Re: KingJing's Guide to Exploiting
« Reply #11 on: November 08, 2005, 05:53:15 PM »

*Updated*

sorry im really busy at time, I will finish it tomorow
Logged



Xearo
Newbie
*
Offline Offline

Posts: 26



View Profile
Re: KingJing's Guide to Exploiting
« Reply #12 on: November 08, 2005, 07:53:33 PM »

well great work Jing, thats the best Wpe Guide, and the best Server/Client explanation i ever seen.

but the bad thing is... all that i allready know.. ur too late =P

  Xearo

Logged
BlackPlanet
Jr. Member
**
Offline Offline

Posts: 91


View Profile
Re: KingJing's Guide to Exploiting
« Reply #13 on: November 08, 2005, 10:28:13 PM »

This guide is good for beginners, but it's not a guide to exploiting.... exploiting obviously requires this knowledge, but past that it's just logic in order to find methods that aren't already patched...
Logged
feetlikefins
Jr. Member
**
Offline Offline

Posts: 77


View Profile
Re: KingJing's Guide to Exploiting
« Reply #14 on: November 09, 2005, 01:33:45 AM »

This guide is good for beginners, but it's not a guide to exploiting.... exploiting obviously requires this knowledge, but past that it's just logic in order to find methods that aren't already patched...

dont you think we dont know that already.

this is a guide to teach noobs. it'll serve as a useful tool.

no shaddaap.
Logged
Shadows
Insignificant Member
Sr. Member
****
Offline Offline

Posts: 404



View Profile
Re: KingJing's Guide to Exploiting
« Reply #15 on: November 09, 2005, 01:40:37 AM »

This guide is good for beginners, but it's not a guide to exploiting.... exploiting obviously requires this knowledge, but past that it's just logic in order to find methods that aren't already patched...

Yes it is... but it doesn't need to much previous knowledge to exploit well. It just needs a lot of creativity, and out-of-the-box thinking. There were some unbelievable Freya/eAthena SVN exploits... which worked until just recently...

And by unbelievable, I mean it's "unbelievable they didn't patch that already"... or that something as obvious as that stands out...
Logged

Free Zeny Bot

sluos ym

I'm Back; Jan. 12th 2007. Without taking the proper precautions, you'll just lose exploits.

Notable Koaxia Members:
Helba
CyrusTheVirus
Crypt Cross
Newbie
*
Offline Offline

Posts: 21


View Profile
Re: KingJing's Guide to Exploiting
« Reply #16 on: November 09, 2005, 01:51:07 AM »

This guide is good for beginners, but it's not a guide to exploiting.... exploiting obviously requires this knowledge, but past that it's just logic in order to find methods that aren't already patched...

dont you think we dont know that already.

this is a guide to teach noobs. it'll serve as a useful tool.

no shaddaap.

The best guide for noobs is made by assuming that your readers know nothing... guides which include a step by step detailed description of everything (even the simplest of things)...  e.g. "Introduction to Exploit Hunting for Dummies" or "Basics of Exploit Hunting for Dummies" /gg
So far, KingJing's guides have these traits.
Therefore, kudos to you Kingjing!!!  cheesy  /no1
Logged
BlackPlanet
Jr. Member
**
Offline Offline

Posts: 91


View Profile
Re: KingJing's Guide to Exploiting
« Reply #17 on: November 09, 2005, 03:13:11 AM »

This guide is good for beginners, but it's not a guide to exploiting.... exploiting obviously requires this knowledge, but past that it's just logic in order to find methods that aren't already patched...

dont you think we dont know that already.

this is a guide to teach noobs. it'll serve as a useful tool.

no shaddaap.

The best guide for noobs is made by assuming that your readers know nothing... guides which include a step by step detailed description of everything (even the simplest of things)...  e.g. "Introduction to Exploit Hunting for Dummies" or "Basics of Exploit Hunting for Dummies" /gg
So far, KingJing's guides have these traits.
Therefore, kudos to you Kingjing!!!  cheesy  /no1
I understand that, my point is CURRENTLY, not RECENTLY, there is a shortage of exploits that can be found by people with no creativity...my point was that it doesn't take this sort of knowledge to get an exploit.  Also, I'm going to go ahead and assume you're sucking up to UD members here, which won't get you very far, but I never made fun of this guide or KingJing, I was just commenting that people shouldn't assume they can now get an exploit.

Anyways this discussion is rather useless anyways, I shouldn't have brought it up.
Logged
raider*
UNDERGOUND 777
Jr. Member
**
Offline Offline

Posts: 56

osama bin laden to the rescue!!


View Profile
Re: KingJing's Guide to Exploiting
« Reply #18 on: November 09, 2005, 09:59:32 AM »

if those exploit are showed to other ppl those "honest" bitches may report to the GM and gm will fix it,so it is the prob.Its the reason why there are leveling sys in Koaxia...
sob..sob..sob
« Last Edit: November 09, 2005, 10:08:06 AM by raider* » Logged

God][Wrath
O rly
Newbie
*
Offline Offline

Posts: 18


omgwtfbbq


View Profile
Re: KingJing's Guide to Exploiting
« Reply #19 on: November 09, 2005, 08:24:02 PM »

Finally I learnt how to use that program =)

Thanks to the author
Logged
Pages: [1] 2 3 Print 
« previous next »
Jump to:  

Powered by MySQL Powered by PHP Koaxia Game Hacking Board | Powered by SMF 1.0.7.
© 2001-2005, Lewis Media. All Rights Reserved.
Valid XHTML 1.0! Valid CSS!