Luigi Auriemma

When i do ventrilofp.exe -n dor_g -1 127.0.0.1:3784
the bot connect and DISCONNECT after few seconds

I need this -1 option for something i do
but the bot disconnect!
please fix this problem dude

and you can add -num option for exmple
and this work like the -1 but enter more bots.. and NOT Disconnect.

please help me to solve this problem..

10x.

-1 is a debugging option needed only to test if one fake player can join the testing server... it's normal that the bot disconnects...
if you have problems to add more fake players means there is a players_per_IP limitation

No, ok i tell you,
I build a code in the mirc and with this code i can guss locked vent passwords and even admin user passwords.
i used sendkeys command, this can be used in vb too
when i do -1 option after the bot connect i cant see what is type and this good for me

i build a while loop,
what this do is like bruteforce, this type 1 and push enter 2 enter and etc..

after the password cracked the cmd window closed
and this is a problem becuse i cant see the cracked password.

if you can add something like the debug, the same option for expmle -2 but NOT disconnect.

if you can learn me or give me a guide how to compile your pruducts in C
i will be happy (I try to complie on DEV C++) and this NOT Work!
and i dont change nothing.

I only take the ventrilofp.c
and do compile..
dont works...

Enyone Can Help???

Hey um Lugi the ventrilofp.exe is for like 2.3.0 or 3.0.0 but the ne one is 3.0.1 so could you like update it >?

ventrilofp works with any version included 3.0.2.
if in your case the tool remains stopped trying to testing 2.3.0 although the server is a 3.x means it's using my ventrilobotomy work-around.

an updated version of ventrilofp and ventrcon will be released in the next days for bypassing this limitation caused by my fix

Basically im getting activated 2.3 protocol / use default 2.3 version and I want this to be able to work with 3.0.0+ is there any possible way as yet?

I have uploaded a screenshot to show the problem...Excuse my expert paint skills.


Opps i read the post above and was wondering has the new version been released as yet?

later I will work on the new version (in these days I'm very lazy)

Can you give me a link to the GUI you use?
(if you have the source too its will be great)

10x

the ventrilo server 3.0.3 has added an additional lame network check.
In short when the client tries to join the server (sends the first packet with its version) the server send a query to the 4 centralized Ventrilo server to know if the client has already requested the additional keys which have been introduced in the 3.x series.

In fact has been enough to place the requesting of the centralized hashes at the beginning of ventrilofp/ventrcon and now they seem to work.

anyway the point of this post is again to show the type of control and monitoring that Flagship is imposing to who uses Ventrilo, both users and admins.

luigi i saw u made an update ventrilofp what changes or new features is there :D? also i see alot of posts about ventrilo rcon brute forcing wtf i thought on ventrilo 3 u cant do it because if its wrong it will kick you?

the changes in the new version of ventrilofp are 2:
- the -V VERSION option which allows the forcing of a specific version (because my ventrilobotomyfix avoids the autoguessing of the server's version)
- the requesting of the ventrilo 3 keys to the centralized master servers is made at the beginning of the connection and no longer later

ventrilo3 is programmed to kick and ban any password guessing attempt

aluigi just thought i would say theres something up with the max clients i mean you say thats why you cant use ventrilofp but when i try logging on with another ventrilo (multivent) it works but when trying to spam with ventrilofp it doesnt work. its very odd so i can connect with say 2 or more clients but using ventrilofp i cant.

no, that's not possible.
if Duplicates is enabled in the server config you can't connect more than 2 clients from the same IP (just retested in this moment).

Naturally I'm talking about the 3.0.2 version and any other before it.
On which server version you are making your tests?
And how much clients ventrilofp allows you to join? 1 or 2?

In the meantime I have filtered the chars '%' and ';' from the rndxx function (the one which create random strings like nicknames and so on) since they are not accepted as part of the nicknames.

aluigi what i mean is with the actual ventrilo program opened i can get 2 or 3 maybe even more users to join a server. how you may ask if your not sure is that i changed my target of ventrilo to "C:\Program Files\Ventrilo\Ventrilo.exe" -m and it allows you to open more then one ventrilo. but anyways with the ventrilofp if im in the server no fake players connect i have to leave in order for one to join. but anyways ill tryout your newest version of ventrilofp and see what happens :P.

well aluigi what ever you did with this newest version great job becuz fake players connect to servers again even if your in the server. actually more then 1 fake player can connect to server again :) so nicely done dude hehe.

hmmm theres a few servers still showing it but w/e it works for most of them that it didnt work for me so ya. anyways do you know theres a ventrilo version 3.0.3A lol not so sure wtf it is but ive been seeing it around a few times :P.


- target: 69.12.18.69 : 3948
- activated 3.x protocol
- use default 3.0.0 version (protocol 3)

- get server's hash through centralized Ventrilo servers:
. 69.12.18.69:3948
. 72.51.46.31:6100
. 64.34.178.178:6100
. 74.54.61.194:6100
. 70.85.110.242:6100
- Ventrilo 3 server handshake:
6a 88 c9 fd ab 1f 02 7d 59 4e be a8 de 9d d7 84 j......}YN......

why does it do that above and then no fake player connects at all? it keeps saying

Player: 12/75
- server full or players_per_IP limit reached or something wrong
- wait to retry:
4
but i mean im not connected at all in the server on ventrilo or anything hmmm its weird.

added support (automatic and manual with -L) for "Show login name in remote status requests" in version 0.2.8f

-f 7 -1 (comment changers) don't work just to tell you. 3.0.3x


What packet analyzer do you use?

And also do you have a paper on how you started to decrypt the ventrilo algo?

probably the changing of the comments has been limited in the new private 3.0.3x version... I have never tested it with a 3.0.3x server.

I use Wireshark as packet analyzer except for ventrilo in which I use ventriloproxy for obvious reasons :)

I decrypted the ventrilo algorithm in the usual way: breakpoint on the input (recv), breakpoint on the memory containing the encrypted data and finally the checking of the instructions performed on it

luigi i been playing around with 2 different versions your current new version and with your old version 0.2.8b. and well with 0.2.8b you can comment spam fine but thats the version where if your connected on ventrilo the fake player will not connect until you log off. same thing when you try and spam fake players like say 20 to max out a 20 slot ventrilo for example. so yea idk wtf is messin up :O. but yea im gonna keep both versions 0.2.8f and 0.2.8b until its fixed if you decide on doing anything else with it. but its still great.

in your example you are talking about a server with "Show login name in remote status requests" enabled, but have you verified a normal local 3.0.2 server to see if the "-f 7" problem of version 0.2.8f happens with it too?

aluigi i tried with your newest version 0.2.8f the -L feature with -f 7 -1 and well still doesnt work so not sure whats up with that but with 0.2.8b it works fine as long as your not connected to the ventrilo because if you are it wont connect because of that "- server full or players_per_IP limit reached or something wrong" errors.


also in your next version if there will be any changes or anything is it possible to add like a thing that floods the music thing idk if you know but with 3.0 version u can right click go to integration and hit itunes,winamp,or windows media player and the song or w/e your listening to shows beside your name idk i was kinda thinkin it would be annoying seeing it change every like second lol but if its not possible or you dont feel like looking into it then dont worry about it :D.

so luigi whats up :P? did u read this just seeing if u read the above :P

yes I have read but at the moment there are no planned new checks on this and consequently new releases

yo aluigi good work with the newest version bro shit seems to be working perfect except well when i try to brute force server password after a lil bit of time of guessing i get this error :

- connection interrupted by the server, probably it uses a different protocol

- server full or players_per_IP limit reached or something wrong
- wait to retry:
5

yes i know i know you have seen this error previous times i just dont get why u get it if well the password doesnt get cracked and if it does it well should say but anyways this is what is in my command line. ventfp\ventrilofp.exe -n "name" -j -w C:\ventfp\pw.txt IP:PORT any suggestions on how to fix it well is apprectiated. also man keep up the great work u been doing and well yea not sure if ill be back on in time but happy halloween everyone hope its a blast :).

that thing happens when the server closes the connection, the causes can be many moreover if you perform multiple connections to the same host on a non-LAN network

i need help useing tcpfp i need a tutor i cnat find one plz help