Help/Support Working on an ultimate hack game

[sidamaria 1 10]

Hi everyone, how're u guys doing.

So I'm playing an mobile chinese online game and I began to do some research month ago just to hack it.

At first, the method I use is packet editing. I set up a proxy server (CCproxy) in VM (VMLiteXPmode), and proxifier setting to redirect all my network to come through that proxy server. After that, I use WPE Pro to capture packet and attempt to resend packets. However the packets are all encrypted in MD5 and CRC32 (checksum) so it doesnt work.

So I use Clutch to get a binary cracked of the game. then I put it into IDAPro and found out something very interesting 

Input MD5 : 8127305391F36204C9AB217D8C3297F0
Input CRC32 : A42A2DCA

And with the IDA, I think I have found the packet encryption method. So I can decrypt packet I got in WPE, and resend it. However I think I still got a very long way to go from here.

So anyone can give me a bit suggestion of what I should do next

Thank you very much

[Ichiryuu 197 iPad Air 2 9.0.2]

Which game

[sidamaria 1 10]

Which game

A chinese game which is localize in my country :  https://itunes.apple.com/vn/app/tieu-ngao-giang-ho-3d/id980161147?l=vi&mt=8#

here is the video gameplay in general

[Rook 568.6k iPad Pro (2nd gen) 17.4 Donor]

Did you decrypt the packet though?

[sidamaria 1 10]

Hi Dida, when I open IDA, I saw the MD5 and CRC32 hash so problably I can decrypt any packets of the game. Still I don't know if there any online website can help me do that.

[Rook 568.6k iPad Pro (2nd gen) 17.4 Donor]

Hi Dida, when I open IDA, I saw the MD5 and CRC32 hash so problably I can decrypt any packets of the game. Still I don't know if there any online website can help me do that.

You can try Googling.

[sidamaria 1 10]

Thank DiDA for your reply, ( I found this tut http://www.progamercity.net/ghack-tu...rsing-mmo.html useful when decrypt packet)

So I found this code - the encryption method in IDA:

1.NSDataAESDecrypt

2.NSDataAESDecryptwithkey

3.NSSStringAES256

4.NSSStringGMOAES256

5.GMOStringcryptiondecrypt

6.GMODecryptkeypadding

7.GMOSDKRSACCipherkey

8.GMOGAMESDKRSAC

9.Seccdecryptkey

And I think the packet encryption method is one of those above. So there are 2 options for me.

1.Test all the encryption method above to see what make most sense for my packet (but it's complicated)

2.Use GikDbg, and send a packet in to see what they use to decrypt it.

But when I open the GikDbg in window 7 the error 6080 port appear, I try to restart it but still error, Should I run the GikDbg in VMXPLite or not?

(https://iosgods.com/topic/2754-tutorial-how-to-use-gikdbg-lldb-for-windows/ I read the tutorial here but not quite understand it)

Updated January 18, 2016 by sidamaria