[C#] Unencrypted Packet Reading Tool - Source + Compiled Application

[Jadd]

Hey guys.

Here's a tool I wrote today for reading unencrypted packets. It's undetected right now (detours at NetClient::Send2 + 0x0A). It might be a little ugly to look at but it works. If you click the packet data cell, it will copy it to your clipboard. Everything else is pretty well self-explanatory. Have fun!

Screenshot:


Compiled: http://www.jadd-dev.info/downloads/packetmonitor.zip
Source: http://www.jadd-dev.info/downloads/p...tor_source.zip

[Master674]

Awesome ô,o

[Jadd]

http://www.ownedcore.com/forums/repu...tion&p=2162973

[hamburger12]

2 rep.
thx

[Jadd]

2 rep.
thx

You're welcome ^^

[CryptoCombat]

Is this still undetected?

[DarkLinux]

Take a look http://www.ownedcore.com/forums/worl...ml#post2235972 ([WoW][4.3.4.15595] Info Dump Thread)

[hamburger12]

Address: 0x00089590 Length: 9 Bytes: 55 8B EC 83 EC 8 53 56 8B
Description: Outgoing packet hook


So i would say.... NO!!!!

but wait... where is the location the hook is aplyed? ;-) read the text above and have a look witch location is protected...

another hint: 0xA - 0x9 = 0x1

[Master674]

<something used to be here... its gone now>

[jeremie_bs]

isn't 0x0A a warden packet?

[Frosttall]

isn't 0x0A a warden packet?

Sorry, but do you have an idea what you're talking about?

[daCoder]

Thanks for sharing Jadd. This is really awesome to have a packet monitor.

[kandera]

Hi there!

So i've decided to take this and try to get it working with 5.0.4 for sent packets and recieved packets. i got sent packets working. my only issues currently are where to hook into (im pretty sure i got that one right) and what the packet would be. im relatively new to asm. any help would be appreciated ^^

Packet Monitor Source.zip