Packet analyzation

Discussion on Helbreath Hacks. New ones Released. and how to work them.
Post Reply
binarydata
DBfiller
Posts: 3816
Joined: Fri Oct 31, 2003 5:30 am
Location: San Diego CA, USA
Contact:

Post by binarydata »

a majority of the hb packets are un encrypted, nobody ever took the time to analyze them
this is a cast packet

Hex--Dec-----Value
----------------------
00.....0.........encryption key
1E.....30.......packet size//identifier?
00.....0.........
DC.....220.....cosntants?
14.....20........cosntants?
A3.....163......cosntants?
0F.....15.........cosntants?
0D.....13........cosntants?
0A.....10........cosntants?
2F.....47.........player X
00.....0...........
DF.....223.......player Y
00.....0...........
00.....0...........
2F.....47.........cast X
00.....0...........
00.....0...........
00.....0...........
DF.....223.......cast Y
00.....0...........
00.....0...........
00.....0...........
64.....100.......spell
00.....0...........
00.....0...........
00.....0...........
B3.....179.......??? random numbers that are generated each cast
30.....48.........??? random numbers that are generated each cast
15.....21.........??? random numbers that are generated each cast
00.....0...........

Spells:
64.....100.......magic missle (top page 1)
6E.....110.......energy bolt (top page 2)
78.....120.......fireball (top page 3)
82.....130.......fireblast (top page 4)
<img src='http://img88.exs.cx/img88/2290/7666.jpg' border='0' alt='user posted image' />
Jensen
Loyal fan
Posts: 300
Joined: Tue Aug 02, 2005 7:40 am
Location: Illinois, USA
Contact:

Post by Jensen »

the first value is the encryption key, in this case 00, so not encrypted at all.

and yes, a majority of the packets use no encryption at all.
-><-
binarydata
DBfiller
Posts: 3816
Joined: Fri Oct 31, 2003 5:30 am
Location: San Diego CA, USA
Contact:

Post by binarydata »

added more shit to it
<img src='http://img88.exs.cx/img88/2290/7666.jpg' border='0' alt='user posted image' />
suomipoi
noob
Posts: 15
Joined: Fri Sep 30, 2005 9:48 pm

Post by suomipoi »

This kinda confuses me. Why you make it like

"DC.....220" They are always shown in pairs of two in WPE. Something like this:
Image
Image
Charles
Loyal fan
Posts: 418
Joined: Wed Nov 26, 2003 8:20 pm

Post by Charles »

why does everyone insist on bumping old topics. grr
<i>"Always write good code. Feel bad to write bad code."</i>
suomipoi
noob
Posts: 15
Joined: Fri Sep 30, 2005 9:48 pm

Post by suomipoi »

Does it really matter? It was not offtopic or spam. It's stickied anyways so it doesnt really bump up.
Post Reply