WoWProxy[UD Packet Logger]

[[Shon3m]]

This is a program that I wrote in C# that proxies data from the World of Warcraft server to the Client but it goes through the program first the World of Warcraft packets. They are all automatically logged to output.log. It is also undetected by Warden.

How the program works is this you set your wow realmlist to "set realmlist 127.0.0.1:3723"

The WoWProxy listens on port 3723 and in the config.txt you can configure what ip the proxy connects to right now it is set at us.logon.worldofwarcraft.com.

Use
Log worldofwarcraft packets like the pros and start developing for your server.

Picture


Output Example


Virus Scann
NoVirusThanks - Free Online Virus & Malware Scan Service

Download Link
WoWProxy.rar

[UnknOwned]

Hehe reminds me of my packet sniffer.



Anyway since you use command line you should print the output there also... its always good with real-time monitoring.

[wonkateddy]

and what use does this do to us?

[tesserajk]

What functionality does it have? Does it detect incoming opcodes? Does it work with the new encryption?

[UnknOwned]

What functionality does it have? Does it detect incoming opcodes? Does it work with the new encryption?

Well its a proxy so you route the data through the app making it harder to detect. I guess if you are only interested in getting data it is one of the most secure ways of doing it. You could even make a server on another computer and rote the data through it making it... well.... even harder to detect.. if not impossible.

The sexy thing is that it requires almost no updates.
Here is a simple example I wrote in AutoIt some years ago.
Now I only changed 1 byte to make it work with the latest version of wow.
What this one does is it can see your position and rotation by grapping the packet stream between WoW.exe and the world server. (you can see that in the bottom right corner)

http://www.madx.dk/files/WoWPacketSniffer.rar
Both source code and binary is included, (Please read the readme file before running it).

[FenixTX2]

Nice prog, I can see it having packet filtering and spoofing applications.
For those interesting you can use wireshark to the same effect.
No need to setup as a proxy so it wont increase your ping time in game. You can also use it in promiscuous mode on another machine if you're worried about detection.
Allows you to do all sorts of packet filtering (payload and header info etc) Wireshark

[Submit]

THE EQUATION FOR TIME TRAVEL!!!!!

Example:
(299792458m/s = X/86400s/d) = 25902068371200m/s required to time travel 1 day.

Formula:
Speed of Light = Distance(Constant R/F) / Secounds Per Day of Travel

[Clain]

Thanks for this, although; consider changing how output is displayed in the future, seems cluttered to me :P
EDIT: Nevermind, its fine, I just like more detailed output if you know what I mean.
+Rep from me.

[wonkateddy]

i see welll thanks for clearing that up i just didnt understand its useful ness

[ranso]

im a noob but does it hide your ip?

[BoogieManTM]

I'm guessing from the example output, this does not decrypt the packet headers from the world server, making it difficult to identify what packet is what? Because opcode 52702 doesn't exist :P they're only up to a little over 1000.

[Clain]

Thats what I meant in my first post:P

[FenixTX2]

im a noob but does it hide your ip?

No. You tell your WoW client that the server it wants to connect to is actually your pc.
The program listens for a WoW connection, logs packets, and then forwards them to a real server.

this does not decrypt the packet headers

Correct. If you're interested in doing this; Check my post above regarding Wireshark. It decrypts packet headers automatically and can decipher datagram’s while it's at it.

[MasterGold]

Looks very interesting, I will take a look at both

[BoogieManTM]

Correct. If you're interested in doing this; Check my post above regarding Wireshark. It decrypts packet headers automatically and can decipher datagram’s while it's at it.

Wireshark doesn't decrypt wow packet header's, either. Since 3.1, it's no longer possible to passively (without reading wow's memory) figure out the encryption keys used by the RC4 in/out to encrypt/decrypt packet headers in both directions (client->server and vise versa).