Full working 8.11 Delphi Hook

[Diogo]

Uhm I still get errors when I input invalid password :/ anybody know how to fix it?

Injecting...
Hook Injected!
Sent: ? . ��5sL�PI . �- . �b?Hu�?��>� . h;0j�gQ��v�?��]��`Em@_P<�?��?� . j8A4�?��=g7y??F???�9�f?? . �ANW .  . �v�����;�ö��(-�-:M . �??B� . U . ?S� . �0�?-%?���I85\�) . _��{� . ?
Recv: ( . & .  . # . You must enter your account number.
Recv:

working fine for me, did u update to 0.3 version?

[Yaboomaster]

Sorry It was my mistake, I was testing it at OT :P Srry one more time :*

Any ideas how to block packets?

[Diogo]

remove the Result := recvNext(s, Buf, len, flags);

for example

If ( ReadPacketAbleToBlock = True ) then
    begin
      //Result := recvNext(s, Buf, len, flags);
    end
else
     begin
        Result := recvNext(s, Buf, len, flags);
     end;

u have to make a function to read incoming packet and say if its ok to block or dont block

[Yaboomaster]

remove the Result := recvNext(s, Buf, len, flags);

for example

If ( ReadPacketAbleToBlock = True ) then
    begin
      //Result := recvNext(s, Buf, len, flags);
    end
else
     begin
        Result := recvNext(s, Buf, len, flags);
     end;

u have to make a function to read incoming packet and say if its ok to block or dont block

Yea but for this I need to decrypt packets inside of Dll ;P

[Yaboomaster]

Ok I have decryption iside of dll.

hook.dll (with source code)


Part of code that shows my command system (in dll ofc) :

  DecryptPacket( Dados.BufArray,Dados.Tamanho );

  if (dados.BufArray[4]=$96) then
    begin
      if ConvertDataToASCII( Dados.BufArray,8,0)='\' then
      begin
       if ConvertDataToASCII( Dados.BufArray,9,1)='up' then
         begin
          Pakiet.BufArray[0] := $08;
          Pakiet.BufArray[1] := $00;
          Pakiet.BufArray[2] := $01;
          Pakiet.BufArray[3] := $00;
          Pakiet.BufArray[4] := $65;
          Pakiet.BufArray[5] := $00;
          Pakiet.BufArray[6] := $00;
          Pakiet.BufArray[7] := $00;
          Pakiet.BufArray[8] := $00;
          Pakiet.BufArray[9] := $00;
          EncryptPacket(Pakiet.BufArray,Pakiet.Tamanho);
          sendNext(s,@Pakiet.BufArray,Sizeof(Pakiet.BufArray),flags);
         end;
        end else
          result := sendNext(s, Buf, len, flags);
    end else
      result := sendNext(s, Buf, len, flags);

And when I send packet 'move up' my character goes one sqm up and then connection with server is closed O.o I happens always when I'm trying to send something too TibiaServer trough dll

[OsQu]

Do you have correct socketID?

[Yaboomaster]

Do you have correct socketID?

Yea

function sendCallBack(s: TSocket; Buf: Pointer; len, flags: Integer): Integer; stdcall;
var
  bResposta:Boolean;
  Dados:TPacote;

  //command system
  msg:string;
  Pakiet:Tpacote;
begin

  Dados.BufArray := ConvertDataToArray( Buf,len );
  Dados.Tipo := 4; //sent
  Dados.Tamanho := len;
  Dados.flags := flags;
  Dados.TibiaSocket := s;
  TibiaSocketH:= s;
  TibiaFlag := flags;

  DecryptPacket( Dados.BufArray,Dados.Tamanho );

  if (dados.BufArray[4]=$96) then
    begin
      if ConvertDataToASCII( Dados.BufArray,8,0)='\' then
      begin
       if ConvertDataToASCII( Dados.BufArray,9,1)='up' then
         begin
          Pakiet.BufArray[0] := $08;
          Pakiet.BufArray[1] := $00;
          Pakiet.BufArray[2] := $01;
          Pakiet.BufArray[3] := $00;
          Pakiet.BufArray[4] := $65;
          Pakiet.BufArray[5] := $00;
          Pakiet.BufArray[6] := $00;
          Pakiet.BufArray[7] := $00;
          Pakiet.BufArray[8] := $00;
          Pakiet.BufArray[9] := $00;
          EncryptPacket(Pakiet.BufArray,Pakiet.Tamanho);
          sendNext(s,@Pakiet.BufArray,Sizeof(Pakiet.BufArray),flags);
         end;
        end else
          result := sendNext(s, Buf, len, flags);
    end else
      result := sendNext(s, Buf, len, flags);

  BmsComunicaIpc( 'IpcHook' , @Dados, SizeOf(Dados) ,@bResposta, SizeOf( Boolean ));
end;

[Diogo]

Ok I have decryption iside of dll.

hook.dll (with source code)


Part of code that shows my command system (in dll ofc) :

  DecryptPacket( Dados.BufArray,Dados.Tamanho );

  if (dados.BufArray[4]=$96) then
    begin
      if ConvertDataToASCII( Dados.BufArray,8,0)='\' then
      begin
       if ConvertDataToASCII( Dados.BufArray,9,1)='up' then
         begin
          Pakiet.BufArray[0] := $08;
          Pakiet.BufArray[1] := $00;
          Pakiet.BufArray[2] := $01;
          Pakiet.BufArray[3] := $00;
          Pakiet.BufArray[4] := $65;
          Pakiet.BufArray[5] := $00;
          Pakiet.BufArray[6] := $00;
          Pakiet.BufArray[7] := $00;
          Pakiet.BufArray[8] := $00;
          Pakiet.BufArray[9] := $00;
          EncryptPacket(Pakiet.BufArray,Pakiet.Tamanho);
          sendNext(s,@Pakiet.BufArray,Sizeof(Pakiet.BufArray),flags);
         end;
        end else
          result := sendNext(s, Buf, len, flags);
    end else
      result := sendNext(s, Buf, len, flags);

And when I send packet 'move up' my character goes one sqm up and then connection with server is closed O.o I happens always when I'm trying to send something too TibiaServer trough dll

I think u are not using the changed packet for example
thats your changed packet

sendNext(s,@Pakiet.BufArray,Sizeof(Pakiet.BufArray),flags);

the result must receive it

        end else
          result := sendNext(s, Buf, len, flags);
    end else
      result := sendNext(s, Buf, len, flags);

to

        end else
          result := sendNext(s,@Pakiet.BufArray,Sizeof(Pakiet.BufArray),flags);
    end else
      result := sendNext(s,@Pakiet.BufArray,Sizeof(Pakiet.BufArray),flags);

Algo i think u have to use result out of your if because result must have a value so if u dont receive the right value "if (dados.BufArray[4]=$96) then" u will have nothing on result

[Diogo]

Updated to 0.4

Now you can send your own packet instantly =*
Enjoy

[jeremic]

How did you fix the decryption of large packets? Im interested in that.
Also to send packets to the client you must change the buffer pointer in the recv() hook and then call the real recv() function.

Good job btw