[Question] Account "Hacking" menu

User Tag List

Results 1 to 4 of 4
  1. #1
    d3rrial's Avatar Contributor Authenticator enabled
    Reputation
    126
    Join Date
    Apr 2010
    Posts
    527
    Thanks G/R
    0/4
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)

    [Question] Account "Hacking"

    Hia thar guys, I am aware that this is probably in the wrong forum or sth. yet this question bothers me. I have no experience in Memory Editing / Hacking whatsover what I ask is purely theoretical: As you are Probably aware: SWTOR is started via some launcher.exe that may not be a problem normally, but you also log in with the launcher. When the Launcher starts the Game.exe however you are logged in with your account. So my Guess is that either the Launcher is passing the Account details over to the game.exe which itself also verifies them with the login server (they are probably passed encrypted which would make this one more secure than the one I think it probably is) or the launcher merely passes the Account Name and maybe a "Login Verfied" value. If it is the latter, one could simply bruteforce the accountnames, pass them and send the "Login Verified" value to the game.exe . This should start the client of SWTOR logged into a unknown account (which would open the possiblity of exploiting)

    I would like to know if you think this is likely or if I am imagining things

    These ads disappear when you log in.

  2. #2
    Jadd's Avatar 🐸
    Reputation
    1464
    Join Date
    May 2008
    Posts
    2,396
    Thanks G/R
    77/297
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    They both verify account details. Won't work.

  3. #3
    d3rrial's Avatar Contributor Authenticator enabled
    Reputation
    126
    Join Date
    Apr 2010
    Posts
    527
    Thanks G/R
    0/4
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    Originally Posted by Jadd View Post
    They both verify account details. Won't work.
    Hmm OK... I was just writing a program that is recieving the commandline parameters passed to the swtor.exe
    mine always look like this:
    Code:
    =04 []04 ยก04 []04 -04
    ([] -> censored character, probably useless still just for safety )
    every 4 changes to a different number at each start, I have tried to pass these values to the client manually, also with randomized characters replacing the "4" but it wouldnt work. I assume these aren't my login details, possibly either a small hash or just rubbish bitstreams... I didnt bother translating it to hexadecimal view

    by rubbish bitstreams I mean standard bits in the startup procedure, maybe an encryption key or some protocol identifiers and stuff that didnt matter for the account login

    edith:
    btw. what is this:
    http://he6107n01.swtor.com:8995/
    ?
    Last edited by d3rrial; 01-02-2012 at 08:20 PM.

  4. #4
    broomop's Avatar Member
    Reputation
    1
    Join Date
    Dec 2011
    Posts
    15
    Thanks G/R
    0/0
    Trade Feedback
    0 (0%)
    Mentioned
    0 Post(s)
    Tagged
    0 Thread(s)
    thats probly a key hash.
    Last edited by broomop; 01-03-2012 at 04:23 PM.

Similar Threads

  1. [question] account locked?
    By nitemare in forum World of Warcraft General
    Replies: 3
    Last Post: 05-13-2008, 04:01 PM
  2. Account Scamming/Hacking.
    By xxthecodsterxxx in forum Suggestions
    Replies: 2
    Last Post: 05-07-2008, 01:37 PM
  3. Help! My Mother's Account Was Hacked.
    By Blazehammer in forum World of Warcraft General
    Replies: 22
    Last Post: 11-26-2007, 09:52 AM
  4. question: account transfers
    By Iife in forum Community Chat
    Replies: 2
    Last Post: 04-28-2007, 12:39 PM
  5. Question: account sercurity
    By [email protected] in forum Community Chat
    Replies: 3
    Last Post: 04-16-2007, 06:17 PM
All times are GMT -5. The time now is 12:26 AM. Powered by vBulletin® Version 4.2.3
Copyright © 2020 vBulletin Solutions, Inc. All rights reserved. User Alert System provided by Advanced User Tagging (Pro) - vBulletin Mods & Addons Copyright © 2020 DragonByte Technologies Ltd.
Digital Point modules: Sphinx-based search