Giter VIP home page Giter VIP logo

swsniff's Introduction

SWSniff

A SoulWorker packet sniffer

Important note

This program automatically downloads a native binary that gets injected into the SoulWorker process. I can't vouch for it being safe and clean of malware.

swsniff's People

Contributors

holly-hacker avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar

swsniff's Issues

What's next with the project

I do not know if he is writing in the right place, will you still develop the project? From what I can see you can even write a private server, you only need to have the right knowledge of how to do it

WSASend/WSARecv hooks don't work in open-source injectable

Definition on this line.

WSASend and WSARecv use the PASCAL calling convention, which is not supported by .NET. This may be why it doesn't work The injectable DLL that does the hooking is written in .NET, meaning there is a difference between the calling convention of the new function and the original function.

It's possible to change the calling convention of a Delegate with UnmanagedFunctionPointerAttribute, but only cdecl, fastcall, stdcall and thiscall seem to be supported.

Of course it is possible that it's due to another reason that this hook doesn't work, and maybe we'll have to switch to a different hooking method altogether.

BigEndian vs LittleEndian

Each packet in PacketType has wrong hex value.
Every packet is sent in Little Endian bytes. That means that most significant byte is actually on the right, not left.
Due to this every packet has wrong numerical value assigned. For example:
Packet ClientEnterServerReq is actually assigned to value 0x1302 rather than 0x0213. 0x0213 is shown in any raw binary dump of data.

Didn't notice if you meant to have them in Little Endian byte order, but it can cause some problems.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.