Shoutbox

sniffing packets - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Messenger Plus! for Live Messenger (/forumdisplay.php?fid=4)
+---- Forum: Scripting (/forumdisplay.php?fid=39)
+----- Forum: Plug-Ins (/forumdisplay.php?fid=28)
+------ Thread: sniffing packets (/showthread.php?tid=28569)
sniffing packets by firedance on 07-12-2004 at 04:42 PM

Well i thought that i could make a plugin, for my plugin i need to sniff packets and i found a sniffer (coz i have no idea on how to do one, and when looking at the sniffthingy i found i still cant understand it but who cares =) ) . and now im wondering on how i should identify that thepacket is from / to msn , i thought about using so it only catches packets to/from 1863 but what if someone uses a proxy or so?

RE: sniffing packets by Stigmata on 07-12-2004 at 06:10 PM

if its made in vb and u need any help pm me :)

RE: sniffing packets by Choli on 07-12-2004 at 08:10 PM

quote:
Originally posted by firedance
only catches packets to/from 1863
that's a good point, however you're right with the thing about proxys. Did you tried to to find if there's a way to know if messenger is using a proxy? in that case you'd be able to set another port.

Also, what about, instead of catching patckets to/from 1863, catch patckets to messenger.hotmail.com? mmm... oh wait, that may not work either :-/

then, the only think i can think of is that you have to detect the opened connections (or sockets) by messenger and then you'd be able to know the IPs and ports source and destination of each connection and then you're done (note: this can be done in Win XP (and maybe in NT/2000/2003 too) but i'm not sure about win 9x/me)
quote:
Originally posted by jackass_wanabe
if its made in vb and u need any help pm me :)
if it's in vb and he needs help, he'll ask for it here and you'll reply here so everyone learns, but don't post such spammy posts ¬¬
RE: sniffing packets by firedance on 07-12-2004 at 08:58 PM

Okay i found it =)
it edits in the registry

SOCKS4Port
HTTPPort
SOCKS5Port

ProxyType       4 = HTTP    1 = SOCKS4  2 = SOCKS5

all are REG_BINARY
and in eindian or what its called (theone with 01 00 00 = 1)

the only thing was that when i had the http proxy enabled i could login without having a working http proxy...

RE: sniffing packets by Dempsey on 07-12-2004 at 09:14 PM

if you are using VB, ive got some VB Packet Sniffing code that tells you all incoming packets

RE: sniffing packets by firedance on 07-12-2004 at 09:19 PM

Yes im using vb ( 6), i have a code that shows the packets ... it just needs a hwnd to work so I made a form =)
can i see your code? maby its better =)

RE: sniffing packets by Dempsey on 07-12-2004 at 09:23 PM

http://www.planet-source-code.com/vb/scripts/ShowCode.asp?txtCodeId=46567&lngWId=1

RE: sniffing packets by firedance on 07-12-2004 at 09:29 PM

muahahah , thats theone im using allready =D

RE: sniffing packets by Dempsey on 07-12-2004 at 09:31 PM

ah ok.  What are you using the info from MSN for?

RE: sniffing packets by firedance on 07-12-2004 at 09:39 PM

I was thinking of making a autoresponder and other things =)

RE: sniffing packets by Dempsey on 07-12-2004 at 09:41 PM

you cant actaulyl change data with a packet sniffer, just read it, if you want to change data you need a proxy.

Im using the packet sniffer to try and make a recieved files organiser that sorts files by sender/filename/filetype/size etc.

RE: sniffing packets by firedance on 07-12-2004 at 11:25 PM

I know, but you can create packets with a raw socket.. i think..  well i didnt sucsess in duplicating incomming packets so i wont use that teqnice =)

Hmm , maby use findwindow api or what it is but then it wont work with customnicks ...

btw tell me when the plugin is ready , i could need one that duz that =)

RE: sniffing packets by Millenium_edition on 07-13-2004 at 08:57 AM

firedance, enumwindows and check the class name of each window ;)