search

MephisTools / diablo2-protocol

Diablo 2 network protocol
MIT License
77 stars 19 forks source link

fix password #14

Closed rom1504 closed 5 years ago

rom1504 commented 6 years ago

use wireshark to check how password is encoded

louis030195 commented 6 years ago

After creating game named a, password zzzzzz Sending SID_STARTADVEX3(0x1C):

ff 1c 22 00 01 00 00 00 00 00 00 00 ..x.ÿ."......... 00 00 00 00 00 00 00 00 00 00 00 00 41 00 5a 7a ............A.Zz 7a 7a 7a 7a 00 00 zzzz..

rom1504 commented 5 years ago

for game "lololol" and password "aa", dump of buffer sent by bot : 

"aa"
sending packet MCP_CREATEGAME { requestId: 2,
  difficulty: 0,
  unknown: 1,
  levelRestrictionDifference: 99,
  maximumPlayers: 8,
  gameName: 'Lololol',
  gamePassword: 'aa',
  gameDescription: 'gs 21' }
sending that hex MCP  <Buffer 1d 00 03 02 00 00 00 00 00 01 63 08 4c 6f 6c 6f 6c 6f 6c 00 61 61 00 67 73 20 32 31 00>
received packet MCP MCP_MOTD {"size":101,"name":"MCP_MOTD","params":{"unknown":0,"motd":"Using cheats like maphack, bots, multiclients; will get you banned. Go to pathofdiablo.com/rules"}}
received packet MCP MCP_CREATEGAME {"size":13,"name":"MCP_CREATEGAME","params":{"requestId":2,"gameToken":1,"unknown":1,"result":0}}
sending packet MCP_JOINGAME { requestId: 3, gameName: 'Lololol', gamePassword: 'aa' }
sending that hex MCP  <Buffer 10 00 04 03 00 4c 6f 6c 6f 6c 6f 6c 00 61 61 00>
received packet MCP MCP_JOINGAME {"size":21,"name":"MCP_JOINGAME","params":{"requestId":3,"gameToken":90,"unknown":0,"IPOfD2GSServer":[104,244,78,204],"gameHash":1694509318,"result":0}}
sending packet SID_STARTADVEX3 { gameStats: 1,
  gameUptimeInSeconds: 0,
  gameType: 0,
  subGameType: 0,
  providerVersionConstant: 0,
  ladderType: 0,
  gameName: 'Lololol',
  gamePassword: 'aa',
  gameStatstring: '' }
sending that hex SID  <Buffer ff 1c 24 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 6f 6c 6f 6c 6f 6c 00 61 61 00 00>
received packet SID_STARTADVEX3 {"ff":255,"name":"SID_STARTADVEX3","size":8,"params":{"status":0}}
sending packet SID_NOTIFYJOIN { productId: 1,
  productVersion: 13,
  gameName: 'Lololol',
  gamePassword: 'aa' }
sending that hex SID  <Buffer ff 22 17 00 01 00 00 00 0d 00 00 00 4c 6f 6c 6f 6c 6f 6c 00 61 61 00>
sending packet SID_LEAVECHAT {}
sending that hex SID  <Buffer ff 10 04 00>
connected to clientD2gs
received uncompressed packet D2GS_NEGOTIATECOMPRESSION {"compressionMode":1}
rom1504 commented 5 years ago

sniffer : 

mcpToServer : MCP_CREATEGAME {"requestId":13,"difficulty":0,"unknown":1,"levelRestrictionDifference":4,"maximumPlayers":4,"gameName":"Lololol","gamePassword":"Aa","gameDescription":"gs 21"}
raw mcpToServer MCP_CREATEGAME <Buffer 1d 00 03 0d 00 00 00 00 00 01 04 04 4c 6f 6c 6f 6c 6f 6c 00 41 61 00 67 73 20 32 31 00>
mcpToClient : MCP_CREATEGAME {"requestId":13,"gameToken":1,"unknown":1,"result":0}
raw mcpToClient MCP_CREATEGAME <Buffer 0d 00 03 0d 00 01 00 01 00 00 00 00 00>
mcpToServer : MCP_JOINGAME {"requestId":14,"gameName":"Lololol","gamePassword":"Aa"}
raw mcpToServer MCP_JOINGAME <Buffer 10 00 04 0e 00 4c 6f 6c 6f 6c 6f 6c 00 41 61 00>
sidToServer : SID_STARTADVEX3 {"gameStats":1,"gameUptimeInSeconds":0,"gameType":0,"subGameType":0,"providerVersionConstant":0,"ladderType":0,"gameName":"Lololol","gamePassword":"Aa","gameStatstring":""}
raw sidToServer SID_STARTADVEX3 <Buffer ff 1c 24 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 6f 6c 6f 6c 6f 6c 00 41 61 00 00>
sidToClient : SID_STARTADVEX3 {"status":0}
raw sidToClient SID_STARTADVEX3 <Buffer ff 1c 08 00 00 00 00 00>
mcpToClient : MCP_JOINGAME {"requestId":14,"gameToken":72,"unknown":0,"IPOfD2GSServer":[104,223,85,197],"gameHash":1971987487,"result":0}
raw mcpToClient MCP_JOINGAME <Buffer 15 00 04 0e 00 48 00 00 00 68 df 55 c5 1f 24 8a 75 00 00 00 00>
sidToServer : SID_NOTIFYJOIN {"productId":1144150096,"productVersion":13,"gameName":"Lololol","gamePassword":"Aa"}
raw sidToServer SID_NOTIFYJOIN <Buffer ff 22 17 00 50 58 32 44 0d 00 00 00 4c 6f 6c 6f 6c 6f 6c 00 41 61 00>