Luigi Auriemma

Hey Luigi can you please help me with making fake player bug for new version of SAMP

I sniffed some packets with WPE pro, both sent and received from the server.
I tried sending first few packets as they seem to be always the same, but nothing happened to the server :p

Where should I start, I am using java/jpcap to create packets. I saw your previous version of sampfp and I saw that you used zlib decompression...

Here are the sniffed packets http://pastebay.com/80391

oh well, I don't know why there is so much interest around this PoC, anyway I have just updated sampfp

Thanks, can you tell me what tools do you use for packet sniffing, how do you know which packet is the thing you need to for fake player bug, I read that SAMP uses zlib, how do you decyphher packet that is compressed with zlib

Did you sniffed server or client?

in this specific case I used the debugger to analyze the packet because it's used a simple encryption (xor with the server's port & 0xff) and a 8bit crc check.
no compression is used in version 0.3, at least not in the packets needed for sampfp

Hi Luigi, sorry that i write in another topic, but i would like to ask your help - i can not understand the packages samp. In general, i have enough experience in their editing, but Samp put spokes in the wheel by encryption. How to remove encryption, or how to editing sent packets samp? A friend said that he can not set breakpoint in debugger at the right place because of the large number of sent garbage bags . Can you anything to help in this, please?

bump because I want to know too

uhmmm strange, I didn't notice or didn't remember that post of the 09 August.
anyway if you refer to the encryption used in the packets take a look to my samp03_crypt function in sampfp.c.
in SA:MP 0.3b you must use:
size = samp03_crypt(buffer, size, 1, 1); // encrypt it
size = samp03_crypt(buffer, size, 0, 1); // decrypt it (it seems not used by the client)

this is the only encryption of which I'm aware.