Luigi Auriemma

aluigi@autistici.org


News
Advisories
Proof-of-concepts
Research
Fake_players_bug
MyToolz
Password_recovery
Patches
MyMusic
TestingToolz
About...
RSS_feeds
Video
Amiga_ADF
Forum
aluigi.org
backup.aluigi.org
mirror.aluigi.org


03 Jul 2009 Password_recovery: Xfire password decrypter 0.1
decrypter for the EncryptedUser and EPW fields in XfireUser.ini

02 Jul 2009 Research: Race Driver series ZIG to BIG decrypter 0.1
a decrypter for the ZIG files used in the Race Driver games implemented as plugin for QuickBMS

01 Jul 2009 Research: HLSWlist 0.1a
added a couple of other games in the list (although, like in gslist, the list is not needed for retrieving the servers) and adjusted the building of the query packet for possible future enhancements

01 Jul 2009 Research: Ventrilo RCon tool 0.2.8
added option -F which creates the pipe file \\.\pipe\ventrcon (/tmp/ventrcon_pipe on linux) so that any program on the same machine can send commands to ventrcon simply writing them in that file, added the -C option for caching the ventrilo 3.x keys (mainly useful for debugging)

01 Jul 2009 Patches: Universal game players limiter 0.1.1
an experimental and very basic project I created as a test various months ago and which uses a simple way to recognize and limit the players from the same IP address, released also a modified version which allows to choose the maximum number of players (3 by default)

30 Jun 2009 Research: How to get the list of game servers from getgsc.com 0.1

30 Jun 2009 MyToolz: Simple TCP proxy/datapipe 0.4.6a
solved a lame bug in the -S (ssl mitm) option

30 Jun 2009 Patches: Call of Duty 4 and 5 stats DoS fix 0.1
quick and easy work-around to avoid this annoyance which could became a problem

30 Jun 2009 Patches: Battlefield 2/2142 1.4*/1.5* bfloop fix 0.2 (Windows)
work-around for an undisclosed vulnerability

28 Jun 2009 MyToolz: Hex2byte 0.3b
another micro fix for the -x option

27 Jun 2009 Patches: SWAT 4 1.1 NULL pointers and Runtime Error fixes 0.1

24 Jun 2009 Research: PunkBuster online GUID checker 0.1.8
added support for America's Army 3 and Battlefield Heroes

23 Jun 2009 Password_recovery: Cake Poker / Lock Poker password decoder 0.1
decrypts the LastPassword string in the registry

23 Jun 2009 Password_recovery: Full Tilt Poker password decrypter 0.1
decrypts the Username and Password strings in the registry

23 Jun 2009 Research: HLSWlist 0.1
command-line servers browser based on the list of game servers provided by HLSW and with an usage similar to gslist

21 Jun 2009 Password_recovery: PartyGaming password decrypter 0.1
decrypts any encrypted string in the PartyGaming fields of the registry which includes PartyPoker, PartyGammon, PartyCasino and so on

21 Jun 2009 Research: PartyGaming files decrypter 0.1
decrypter for the encrypted files used in PartyPoker, PartyGammon, PartyCasino and so on like the various INI and BIN files (ARA.ini, GRA.ini, Sys.ini, NewTable.bin, poker.bin, Table.bin and so on)

21 Jun 2009 Password_recovery: PokerStars password decrypter 0.1
decrypts the PWD field in the user.ini file or any string passed as argument

21 Jun 2009 Research: PokerStars INI decoder and decompressor 0.1
a decoder for the INI files implemented as BMS script for my QuickBMS tool

21 Jun 2009 MyToolz: Hex2byte 0.3a
added a work-around for the -x option which allows it to work also with the hex dumps of wireshark

17 Jun 2009 Research: Ventrilo port 5000 packet decoder 0.1
decoder for the packets sent to/from port 5000, a typical example are those for update.ventrilo.com and proinfo.ventrilo.com

17 Jun 2009 Password_recovery: Ventrilo regkey decoder 0.1
simple decoder of the registration key of Ventrilo client which is stored in the regkey registry key

14 Jun 2009 MyToolz: DAA2ISO / GBI2ISO 0.1.7c
added support for the GBI files used in gBurner which are identical to DAA except for some microscopical lame changes, anyway the 99% of the GBI files online are just renamed DAA files so the previous version of daa2iso already worked with them perfectly

12 Jun 2009 Research: ISI rFactor //[[gM files decrypter/encrypter 0.2
the only change in this release is the possibility to re-encrypt the file because ARCA Sim Racing seems to need it, for the rest the new major version has been used because now the usage/syntax of the tool is like the one of rfactordec and wtcced

08 Jun 2009 Research: QuickBMS generic files extractor 0.2.2a
adapted the code for accepting the options when launched in GUI mode

07 Jun 2009 Research: QuickBMS generic files extractor 0.2.2
added the -L option for placing the list of files in a file, added the -D option for using decimal notation internally, optimized the For command, gained some milliseconds from myitoa, added the experimental commands for implementing recursive functions (Start, Call and EndFunction)

03 Jun 2009 Research: Milestone MIX files extractor 0.1.1
added support for MIX files of SBK 09

27 May 2009 Research: QuickBMS generic files extractor 0.2.1
fixed the handling of some numbers (signed integers and shifting are not friends), the letters between ' are now considered numbers (so 'a' is 0x61), now in Get/PutVarChr is possible to specify also the size of the number through an optional parameter and added: LZX, Binary and BaseName types, BytesRead and NotEOF internal variables (they are used in MultiEx), handling of elif and else (very useful), a new optional parameter in FindLoc to avoid to terminate the script if the string is not found, various new String operators, GetArray and PutArray functions which can be used to work on some temporary dynamic arrays (useful in some occasions), QuickBMSver command which allows to specify the minimum version of QuickBMS supported by that script

26 May 2009 Research: Race WTCC files encrypter/decrypter 0.2.4
added the -k option which allows to specify a custom key or the name of a game which uses a custom key and is supported by wtcced, this is needed to decrypt/encrypt the files of "Volvo The Game" (example: wtcced -k volvo original.gmt new.gmt)

24 May 2009 Research: Telltale TTARCH files extractor 0.1.1
added the -m option which automatically dumps the FONT and D3DTX files as DDS and the AUD as OGG, very useful

16 May 2009 Research: Telltale TTARCH files extractor 0.1
quick tool for extracting the files located in the ttarch archives used in the games developed by Telltale

16 May 2009 MyToolz: Rot13 0.2
this tool was so old and basic that it didn't had even a version, so I have simply reused the source code of Xor with the needed modifications

14 May 2009 MyToolz: Simple TCP proxy/datapipe 0.4.6
added only the -c option for deciding the maximum number of incoming connections

13 May 2009 Research: GS passenc/passwordenc decrypter/encrypter 0.1
quick tool for decrypting and encrypting the passenc and passwordenc fields used for creating new users on Gamespy (gpcm.gamespy.com:29900) with the \newuser\ command

12 May 2009 MyToolz: BDE64 0.2.1
added support for the "_[]" escape chars used on gamespy and optimized the code

11 May 2009 MyToolz: Proxocket 0.1.5
added the handling of the return values of the myproxocket plugins for the functions myconnect, mybind, mysend and mysendto for allowing the user to skip the calling of the original functions (for example don't sending a packet if its content doesn't match our criteria) and added the function mysocket for hooking the socket function

11 May 2009 Fake_players_bug: DirectPlay 8 Fake Players DoS 0.1.2
a small update for this jurassik (the last version was dated 2005) and interesting proof-of-concept

11 May 2009 MyToolz: UIF2ISO 0.1.7c
fixed a bug in the handling of the old non-lzma UIF files introduced in version 0.1.7b

09 May 2009 Research: QuickBMS generic files extractor 0.2
tons of speed improvements and memory and code optimizations, added the double console+gui mode (works from command-line if started from the console or with a minimal gui if double-clicked), when the tool asks to overwrite an existent file now is possible to use "a" or "all" for overwriting them automatically, added multiple memory files (MEMORY_FILE, MEMORY_FILE2, MEMORY_FILE3 and so on), added a TEMPORARY_FILE which is nothing else than a file with this name which is saved also in list mode, all numeric variables are saved in hexadecimal, FileXOR and FileROT13 now accepts also a variable as argument, added support for various encryption algorithms (aes, blowfish, des, 3des, rc4 and xtea), added the Print command which allows to show a message at runtime and various other enhancements and fixes other than new BMS examples like the one which acts as base for the games which use the TTARCH format (remember that each game has its own key which must be specified in the script)

03 May 2009 Research: QuickBMS generic files extractor 0.1.6
added the Append command, some small optimizations in the usage of realloc with the variables and the memory_file, corrected the position offset used in filexor/filerot13 if set to zero

03 May 2009 MyToolz: Offset file unzipper 0.3.3
corrected a visualization problem where the found offsets were not fully visible and forced the tool to search (-S) also incomplete deflate blocks (uhmm I don't know if this is really good or not)

30 Apr 2009 MyMusic: new modules
well, not really new since they have at least one year and some rust on them

29 Apr 2009 MyToolz: UIF2ISO 0.1.7b
added the handling of the x86 filter in the LZMA decompression, this is absolutely useless in this case because the LZMA chunks in the UIF images don't use such filter but it's good for being 100% compatible with the format

29 Apr 2009 Research: QuickBMS generic files extractor 0.1.5
added the explode (pkware data compression library), gzip and lzma (included handling of the x86 header and decoder) compressions, the filename of any opened file is saved and can be read from inside the scripts (example: get NAME filename 1), added the Padding command, some small enhancements and bugfixes of the code

27 Apr 2009 Research: QuickBMS generic files extractor 0.1.4a
solved a bug in the handling of LZO compression, the break command, added the cleaning of the filename to save and the visualization of the source code's line in case of errors

25 Apr 2009 Research: QuickBMS generic files extractor 0.1.4
this tool is a scripts based files extractor compatible with the BMS language. the idea was born from the need of a simple and fast solution for handling the simple types of archives used by the majority of games without losing time writing a stand-alone tool with tons of C code just for a basic file format

20 Apr 2009 Research: ISI rFactor files decrypter/encrypter 0.1.3
added an option for overwriting the output files without prompting and two options for re-encrypting the files (needed only with ARCA Sim Racing)

18 Apr 2009 MyToolz: Offset file unzipper 0.3.2
solved a bug in the usage of inflateReset which avoided to find two consecutive compressed blocks and solved the visualization bug in the displaying of the offsets

18 Apr 2009 MyToolz: Simple UDP proxy/pipe 0.4a
added the -t option for choosing the desired amount of seconds after which closing the client socket

15 Apr 2009 MyToolz: Mydown and mydownlib 0.2.5a
removed the backslash from the list of chars to use in hex format and avoid to redirect if the Location field is wrong or incomplete (for example Location: /)

14 Apr 2009 Research: GS login server emulator 0.2.2
added the -f option for selecting a file with fixed pids for each username

13 Apr 2009 MyToolz: Simple UDP proxy/pipe 0.4
various bug fixes (like using __cdecl for the plugins functions and closing the outgoing socket), some parts have been rewritten, added the -B option for selecting the outgoing interface, a double binding mode (like in stcppipe), added support for multiple targets:ports with two additional options for using a different outgoing socket for each target (the result is very interesting, with challenge-response-free games like Unreal1 the result is like a playable fake players) or using only one outgoing socket and more

13 Apr 2009 MyToolz: Simple TCP proxy/datapipe 0.4.5
fixed a small bug in the usage of select(), added the -B option for selecting the outgoing interface, added the possibility to specify different ports in the comma-separated list of destinations, added the -M option for connecting to all the target destinations at the same time, option -p for increasing the priority of the process

13 Apr 2009 MyToolz: Proxocket 0.1.4
fixed the creation of a corrupted CAP file when are used both ws2_32.dll and wsock32.dll, used a better solution for the writing of the CAP file in multi-thread programs and avoided the creation of the 3way handshake for non-TCP sockets if their programs use them with connect()

13 Apr 2009 TestingToolz: FindBits 0.2.1
fixed a bug in the parsing of the hex values in the option -s and fixed the output of -b

13 Apr 2009 Fake_players_bug: Quake 3 engine fake players DoS 0.4.4d
solved a sscanf bug in the parsing of the -d option

10 Apr 2009 Research: Race WTCC files encrypter/decrypter 0.2.3
corrected a field in the encryption of the files using versions 0, 2 and 4 (a missing "zlen = 0;") where the compressed size wasn't set to zero. anyway this field didn't give problems to the games which read the encrypted files because they just skip it in versions 0, 2 and 4 so it wasn't a problem

08 Apr 2009 Research: Call of Duty series mpdata decrypter/encrypter 0.1.1
removed the dumping of the first 16 bytes of the file because it's only a hash and added the automatic encryption of the input file if it's not mpdata

07 Apr 2009 Research: Call of Duty series mpdata decrypter 0.1
decrypter for the Profiles mpdata file used in Call of Duty 4 and Call of Duty 5 / World at War

03 Apr 2009 Research: Ventrilo RCon tool 0.2.7a
microfix in the creation of passworded channels in Ventrilo 3.x

01 Apr 2009 Research: GSPlayers 0.1.1a
only some micro modifications because it no longer worked

... old news