Skip to content

Instantly share code, notes, and snippets.

@polkaulfield
Last active January 14, 2017 19:48
Show Gist options
  • Save polkaulfield/a462e3a739d4a8f27b0839e37f817391 to your computer and use it in GitHub Desktop.
Save polkaulfield/a462e3a739d4a8f27b0839e37f817391 to your computer and use it in GitHub Desktop.
// Servers
Login Server: 79.110.83.80
Game Server: 79.110.83.77
Chat Server: 79.110.83.83
// Filters
Get packets sent to server:
ip.dst == 79.110.83.77 and ip.src == youraddress
Get packets from server:
ip.dst == youraddress and ip.src == 79.110.83.77
Filter out ACKs and empty data:
and not tcp.len==0
Filter by bytes in data:
and data.data contains 15:00
Example (this prints skills sent from client to gameserver):
ip.dst == 79.110.83.77 and ip.src == 192.168.1.35 and not tcp.len==0 and data.data contains 15:00
// Opcodes
Skills (They are sent at random times while moving): 0x15 0x0
Items: 0xC 0x0
Coords: 0x21 0x0
Sitting: 0x8 0x0
Emotes: 0xE 0x0
//Cleanse Skill
Example:
0000 15 00 6f b3 6f b6 bf d1 fe 29 8d 73 d5 ab e9 f5 ..o.o....).s....
0010 db 83 ce 32 8f ...2.
Recurring data:
0000 15 00 xx xx xx xx xx xx xx xx xx 73 d5 ab e9 f5 ...|.yp.1..s....
0010 db 83 xx xx xx ....@
* Two first bytes indicate that the packet is a skill probably
* From 2nd byte to 10th byte seems random data.
* 10th byte seems to not change that often.
* From 12th byte to 18th byte (7 bytes) seems the skill ID. It keeps being the same.
* Three last bytes seem random also.
//Light of Rejuvenation +1
Example:
0000 15 00 eb 38 e4 3d 34 55 7a ae 8e 7f d9 a7 e5 f9 ...8.=4Uz.......
0010 d7 4f cd 3e 83 .O.>.
Recurring data:
0000 15 00 xx xx xx xx xx xx xx xx xx 7f d9 a7 e5 f9 ...8.=4Uz.......
0010 d7 4f xx xx xx
Test with +0 skill recurring data:
0000 15 00 xx xx xx xx xx xx xx xx xx 7c da a4 e6 fa ..V.Y......|....
0010 d4 4c xx xx xx .Ls.=
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment