Author Topic: [RCRS] EXEInfo  (Read 3619 times)

0 Members and 1 Guest are viewing this topic.

Offline Ryan Marcus

  • Cross Platform.
  • Full Member
  • ***
  • Posts: 170
  • I'm Bono.
    • View Profile
    • My Blog
[RCRS] EXEInfo
« on: September 13, 2005, 08:00:47 pm »
I am trying to get EXE info from RCRS... I send "STAR" or "D2DV", but I do not get a response...

What am I supposed to send to RCRS to get EXE info?
Thanks, Ryan Marcus

Quote
<OG-Trust> I BET YOU GOT A CAR!
<OG-Trust> A JAPANESE CAR!
Quote
deadly: Big blue fatass to the rescue!
496620796F75722072656164696E6720746869732C20796F75722061206E6572642E00

Offline rabbit

  • x86
  • Hero Member
  • *****
  • Posts: 8092
  • I speak for the entire clan (except Joe)
    • View Profile
Re: [RCRS] EXEInfo
« Reply #1 on: September 13, 2005, 08:07:04 pm »
It takes 15 minutes for my JavaOp to connect.  Please note that my JavaOp is run by iago, who also runs RCRS.  They are on the same network, and possibly the same computer.  That should give you some idea.

Offline MyndFyre

  • Boticulator Extraordinaire
  • x86
  • Hero Member
  • *****
  • Posts: 4540
  • The wait is over.
    • View Profile
    • JinxBot :: the evolution in boticulation
Re: [RCRS] EXEInfo
« Reply #2 on: September 13, 2005, 08:14:26 pm »
What am I supposed to send to RCRS to get EXE info?

CDN$2,000,000,000 in small nonsequential bills.
I have a programming folder, and I have nothing of value there

Running with Code has a new home!

Our species really annoys me.

Offline Newby

  • x86
  • Hero Member
  • *****
  • Posts: 10877
  • Thrash!
    • View Profile
Re: [RCRS] EXEInfo
« Reply #3 on: September 13, 2005, 08:28:55 pm »
Hmm.

Packet log a connection, and then search the forums for that document iago wrote telling you the format of what to send. :p
- Newby
http://www.x86labs.org

Quote
[17:32:45] * xar sets mode: -oooooooooo algorithm ban chris cipher newby stdio TehUser tnarongi|away vursed warz
[17:32:54] * xar sets mode: +o newby
[17:32:58] <xar> new rule
[17:33:02] <xar> me and newby rule all

I'd bet that you're currently bloated like a water ballon on a hot summer's day.

That analogy doesn't even make sense.  Why would a water balloon be especially bloated on a hot summer's day? For your sake, I hope there wasn't too much logic testing on your LSAT. 

Offline Ryan Marcus

  • Cross Platform.
  • Full Member
  • ***
  • Posts: 170
  • I'm Bono.
    • View Profile
    • My Blog
Re: [RCRS] EXEInfo
« Reply #4 on: September 13, 2005, 09:02:18 pm »
I know the format, I just can't get the darn info back!

I will just have to use the... the... EVIL BNLS!

[edit]
Nevermind. I won't do it.

Here is my packet log. Whats wrong?

Code: [Select]

Send option management request (T_OPTMGMT_REQ = 108).

Receive option management ack (T_OPTMGMT_ACK = 131).

Send bind request (T_BIND_REQ = 101).
  Bind to «Any Address»
  Connection Indication Number = 0

Receive bind ack (T_BIND_ACK = 122).
  Bind to port 51648
  Connection Indication Number = 0

Send connection request (T_CONN_REQ = 102).
  Connect to 142.161.168.85:8321

Receive connection confirmation (T_CONN_CON = 123).
  Connect from 142.161.168.85:8321

Send data (9 bytes).
<00000000< 53 54 41 52  0D 0A 30 0D  0A                        STAR..0..

Send data (9 bytes).
<00000009< 53 54 41 52  0D 0A 31 0D  0A                        STAR..1..

Send data (9 bytes).
<00000012< 53 54 41 52  0D 0A 33 0D  0A                        STAR..3..

Receive data (4 bytes).
>00000000> 32 30 35 0A                                         205.

Receive data (49 bytes).
>00000004> 31 36 38 34  33 35 32 34  0A 73 74 61  72 63 72 61  16843524.starcra
>00000014> 66 74 2E 65  78 65 20 30  38 2F 30 37  2F 30 35 20  ft.exe 08/07/05
>00000024> 31 34 3A 30  36 3A 34 32  20 31 30 39  33 36 33 32  14:06:42 1093632
>00000034> 0A                                                  .

Somebody tell me why I only get 2 responses when I send 3 packets!

Thanks in advance!
« Last Edit: September 13, 2005, 09:55:34 pm by Ryan Marcus »
Thanks, Ryan Marcus

Quote
<OG-Trust> I BET YOU GOT A CAR!
<OG-Trust> A JAPANESE CAR!
Quote
deadly: Big blue fatass to the rescue!
496620796F75722072656164696E6720746869732C20796F75722061206E6572642E00

Offline Joe

  • B&
  • Moderator
  • Hero Member
  • *****
  • Posts: 10319
  • In Soviet Russia, text read you!
    • View Profile
    • Github
Re: [RCRS] EXEInfo
« Reply #5 on: September 13, 2005, 10:31:16 pm »
If I were you, I'd request one, wait until the result is returned, request another one, and so on.
I'd personally do as Joe suggests

You might be right about that, Joe.


Offline Ryan Marcus

  • Cross Platform.
  • Full Member
  • ***
  • Posts: 170
  • I'm Bono.
    • View Profile
    • My Blog
Re: [RCRS] EXEInfo
« Reply #6 on: September 14, 2005, 11:27:23 am »
.... No ;)

I can't seem to figure out which BNLS packet gives me EXE info anyway, so I will have to packet log my 1000 convertered VB bots, of which half work, to figure it out lol.

[edit]
Ah HA! I need to buffer the data! It was sending the version hash and the EXE info in the same "break". I need to split incoming data into an array and then parse them! I bet I come off as a real moron, huh?
« Last Edit: September 14, 2005, 12:50:35 pm by Ryan Marcus »
Thanks, Ryan Marcus

Quote
<OG-Trust> I BET YOU GOT A CAR!
<OG-Trust> A JAPANESE CAR!
Quote
deadly: Big blue fatass to the rescue!
496620796F75722072656164696E6720746869732C20796F75722061206E6572642E00

Offline Hdx

  • The Hdx!
  • Full Member
  • ***
  • Posts: 311
  • <3 Java/Cpp/VB/QB
    • View Profile
Re: [RCRS] EXEInfo
« Reply #7 on: September 14, 2005, 07:02:44 pm »
I can't seem to figure out which BNLS packet gives me EXE info anyway, so I will have to packet log my 1000 convertered VB bots, of which half work, to figure it out lol.
POKE
~-~(HDX)~-~
http://img140.exs.cx/img140/6720/hdxnew6lb.gif
09/08/05 - Clan SBs @ USEast
 [19:59:04.000] <DeadHelp> We don't like customers.
 [19:59:05.922] <DeadHelp> They're assholes
 [19:59:08.094] <DeadHelp> And they're never right.