[Tutorial] [Hacking] Dealing with packed client - 1

Posts 16–30 of 78 · Page 2 of 6

who can send me SWF iD?

Originally Posted by ~V~

Every client can be dumped from memory even Nilly's but he is using nice trick to prevent JPEXS but Swf iD bypasses it

thats why I obfuscate my clients in the future xD

Noisey

Originally Posted by ossimc82

thats why I obfuscate my clients in the future xD

Noisey

"my dick get down on the floor" best.

Where to get SwF Idea ? What should I search.. Any idea ?

I was able to decrypt nilly's client but does not let me connect with the decrypted version

Originally Posted by BinaryBoss

I was able to decrypt nilly's client but does not let me connect with the decrypted version

He patched this lol youre never gonna connect to his server with a hacked client, was only done once and he patched it within 2 days. Pretty sure he has a server side domain lock type of thing, to where if the .swf is not being played on a certain domain (his servers link) to not let it connect.

Originally Posted by ~V~

Every client can be dumped from memory even Nilly's but he is using nice trick to prevent JPEXS but Swf iD bypasses it

people didn't believe me when I said that Nilly only has a temporary patch and only truly dedicated hackers will bother with it...

- - - Updated - - -

Originally Posted by Riigged

I've seen tons of people play from the Flash Projector, its just that your going to have to export some things with the client itself...just like Realm of the Mad God Draw

Originally Posted by DimitriSavage

people didn't believe me when I said that Nilly only has a temporary patch and only truly dedicated hackers will bother with it...

- - - Updated - - -

I've seen tons of people play from the Flash Projector, its just that your going to have to export some things with the client itself...just like Realm of the Mad God Draw

Yeah I have a decrypted .swf of his client from SWF ID but I am looking in the client to see if there is a certain file/any code that prevents it from connecting if its not on his domain since that is what I am sure he does because thats what some .swf protection programs do, but he probably did it himself, since I am getting unable to connect to server message.

Originally Posted by Riigged

not true about the certain domain part. you can download the client and still play it not from the domain.

Originally Posted by BinaryBoss

not true about the certain domain part. you can download the client and still play it not from the domain.

oh well then im thinking of another server that does that
pretty sure thats what project b has actually

but i just get this which im trying to fix

Originally Posted by Riigged

oh well then im thinking of another server that does that
pretty sure thats what project b has actually

but i just get this which im trying to fix

file:///C:/Users/?/Desktop/?/rotmg.swf?pserverHost=test.nillysrealm.com

Originally Posted by BinaryBoss

file:///C:/Users/?/Desktop/?/rotmg.swf?pserverHost=test.nillysrealm.com

I need an actual .swf file that I can connect to the server with via Flash Projector. Even when doing ctrl+s with what you just said saves as .swf but still doesn't connect to the server.

Originally Posted by DimitriSavage

people didn't believe me when I said that Nilly only has a temporary patch and only truly dedicated hackers will bother with it...

There is no permanent solution,and i guess it's gonna stay this way as long as flash exist

Originally Posted by ~V~

There is no permanent solution,and i guess it's gonna stay this way as long as flash exist

your right...to some extent

it will never be patchable if it stays as a .swf BUT...

if you convert it into an .exe you can do so much more then what a .swf will let you do..such as the client validator...

and before you ask yes, its possible to add a client validator to a exe even tho it was an swf because as a executable you can run some background process and render some items that could take a min or so in a few secs so it allows you to truly check if the .exe has been touched or converted into an .swf and then touched

once you do add the client validator you will not be able to change it back to .swf since it cannot run and the conversion and addition of the client validator added so much that the process will take a .swf about 1-3 mins just to validate 50% of the .swf...if you are checking and validating both client and server sided ofc

if you ever used the prod hacks and seen that the .swf doesn't work on the flash player but the .exe works perfectly....its something similar to that but with much more processes ^^for windows ofc

Client in executable form has to either contain flash player wrapper or has access to external flash player executable, right?In this case i don't even have to touch .exe i can just wait for the flash player to load the client in memory and then i can just extract it
I guess you could have loop in executable to look for specific running processes (like JPEXS,SWF iD etc.) but that can be bypassed