[Rift] First Emulator

[Rifting]

I didn't say they didn't use zlib, I just said they don't actually use any compression - at least for the first packet. Look at the output of your inflate and then look at the actual tcp packet (a few bytes after the zlib header) - they were the same in my captures. I'd have just figured they'd send compressed deflated packets from the get go to at least obfuscate the data.

[yamashi12]

I got banned from RIFT for reversing

[Astaelan]

The reason you're seeing the packet "uncompressed" is because it's a stream compression, the internal dictionary hasn't built any patterns yet, that first packet is relatively random data, and wouldn't get compressed. But for the record, it uses zlib level 1 compression which is fast, but not a lot of compression.
And as BlackFoot said, we are making progress on the encryption. Pretty close to having it all solved, just a few things left to trace down for the key exchange.

[Astaelan]

Like Yamashi, I've been banned. However, I hadn't even logged into my account for 4 days, I haven't done any debugging myself... I don't know how or why Trion banned me, and their email says basically "you've been banned, you know why, this is permanent and cannot be appealed, and won't be discussed further". Very unprofessional, considering I haven't done anything to warrant being banned in the first place. But if they don't lift the ban then I'll be leaving the Rift scene entirely, and maybe I'll say thanks to Trion by releasing their crypto publically. Yes, we figured it out, but not much use to me if they're going to ban randomly and without reason.

[tkoreaper]

Like Yamashi, I've been banned. However, I hadn't even logged into my account for 4 days, I haven't done any debugging myself... I don't know how or why Trion banned me, and their email says basically "you've been banned, you know why, this is permanent and cannot be appealed, and won't be discussed further". Very unprofessional, considering I haven't done anything to warrant being banned in the first place. But if they don't lift the ban then I'll be leaving the Rift scene entirely, and maybe I'll say thanks to Trion by releasing their crypto publically. Yes, we figured it out, but not much use to me if they're going to ban randomly and without reason.

It doesn't take a genius to figure out that what you and everyone else is doing here is a bannable offense. Quitting a game because they caught you doing something that is against their ToS and expecting them to react otherwise is just foolish.

[Rifting]

Like Yamashi, I've been banned. However, I hadn't even logged into my account for 4 days, I haven't done any debugging myself... I don't know how or why Trion banned me, and their email says basically "you've been banned, you know why, this is permanent and cannot be appealed, and won't be discussed further". Very unprofessional, considering I haven't done anything to warrant being banned in the first place. But if they don't lift the ban then I'll be leaving the Rift scene entirely, and maybe I'll say thanks to Trion by releasing their crypto publically. Yes, we figured it out, but not much use to me if they're going to ban randomly and without reason.

Very odd - would be very interesting to hear if you do figure out how they linked your account to something against their TOS (did you use a different launcher on the official servers perhaps?). Whilst what happened sucks donkey balls, the more information we have the more others can take measures to avoid it. Anyway, I hope it doesn't make you forget about Rift entirely, would be a shame.

[yamashi12]

I can understand that they banned me as I reversed the game, got it to call another DLL to hook the networking, injected data in the official servers to see what happens...
Imo they didn't notice it that way, they probably found us here on the website !

[Italian / Envy]

If you want help working on the DB ill help .

[Elektrochemie]

You could send me the cryption if you want.
I've started a private server for nostale a while ago, but i failed at the last part of the ingame cryption (well, more string compression - i had everything exept for some chars). Login Server was complete, but is was just a simple XOR encryption.
Would be cool, so maybe i could continue

[yamashi12]

I bypassed the encryption by patching the client, I will release the patch once it's stable.

[heptatitus6666]

can i get added to your project? i'd like to help

assembla mec69

[mgX]

Or one could just write a detour after the client has decrypted the packet and dump the data. Would be considerably harder to spot rather than manipulating the actual executable, and less prone to blow up in yo face

[yamashi12]

Which is what I did, sadly I don't think rift is the kind of game you want to emulate and here is why :
- They have a very active anti hacking service which will eventually get all of us banned (or sued)
- The game's architecture is insane (horrible), I noticed that I had network spikes up to 200 kB/s up and down.
- They are trying to protect the game as much as possible, they don't store data locally, they use a very complicated and heavy encryption (which would be a bottleneck for most of our servers).
And many many other reasons...

[Wolfe]

Which is what I did, sadly I don't think rift is the kind of game you want to emulate and here is why :
- They have a very active anti hacking service which will eventually get all of us banned (or sued)
- The game's architecture is insane (horrible), I noticed that I had network spikes up to 200 kB/s up and down.
- They are trying to protect the game as much as possible, they don't store data locally, they use a very complicated and heavy encryption (which would be a bottleneck for most of our servers).
And many many other reasons...

I have to disagree with you here as there is no documented evidence of any sophisticated anti-hack software besides what goes on server-side and no one can comment on that.
The game's architecture is beautifully crafted, if you know anything about coding it is a breeze to walk through as the code is not thrown together copy-pasta. Its very nicely written out with the use of OOP.
And finally the server does not send information to client that the client does not need, once again correct programming, as for the encryption it should be expected.

[yamashi12]

I have evidences that they were able to detect that I attached a DLL to the game, they are the one who told me.
The game's architecture may be good programming wise, but design wise it's not. It's insane to reach 200 kB/s up and down, not many people have that kind of bandwidth especially in the US.