AOM TT - Online Trainer

[Fakeaccount]

Hey Everybody,

This thread is made ultimately to create an Age Of Mythology The Titans online/lan trainer. This will not be an easy task to complete so if you have any helpful information for the creation of this trainer, please post it here.

I'll start off with the little bit I know:
-------------------------------------------------------------------------------------------------------
I was using an AOM TT 1.02 trainer created by monk/DEViANCE. I'd have to say it's one of the best I've seen as it modifys only your data instead of everyone elses. So, using an instant build cheat does not affect any other player but you.

So naturally I wanted to test it online against a couple of friends and to my anger it kept putting us out of sync. I found out that this is because the server data and client data differed when I used a cheat. I then found out that you may be able to beat the out of sync problem by use of a packet editor, currently I'm researching WPE.

If I can, I'd like to keep all the avaible functions of the current trainer. Which can be found at http://www.megagames.com/news/redir.cgi?http://gokhost.com/gtrainfiles/AGE.OF.MYTHOLOGY.THE.TITANS.V1.02.PLUS12TRN.DEVIAN CE.ZIP
-------------------------------------------------------------------------------------------------------

If anyone has any useful information to the creation of this project, please either post it or link the site/forum that has it.

Thanks!

[Virtuosofriend]

AoM has a great anti cheating engine , all i can say is good luck to you.

[Fakeaccount]

That's not what I wanted to hear.

I thought of something, you know with the HEX editors right? Would there be a way of say, changing values in your memory address as well as changing values in your opponents memory address? (This is going off the theory that all players have other players data in their game)

[D3CRYPT]

No. The only way to change values on other peoples PC's is with packets. Maphack dosent need any packet editing, but things like resource hack do.

[Fakeaccount]

Ah right.

Okay, I'll take a look at the packets and see what I can find. But it might take me a while cause I have no idea what I'm looking at. This is where other peoples help comes in handy?

Actually, what would really be helpful would be an article on how to read packet data...

[faldo]

I'm working on a packet editing tutorial. Right now i'm kinda busy with my real life (changeing work) so it might take awhile before i get it released though.

[Virtuosofriend]

Google for wpe tutorials.There are plenty.

[Fakeaccount]

Alright, well I'll check the packets on the weekend (computers are on different sides of the house, easier with a friends help) and see what I can pull up. What I was thinking was checking both server and client without the trainer, then with the trainer. This way I might be able to compare the differences.

I'll get back with my results.

[Virtuosofriend]

Good luck mate.

[faldo]

WPE is good... but sometimes not enough.
Since WPE focuses on the socks communication from an .exe file, other important comunication can slip by. My suggestion would be to use a program called EtherpeekNX to monitor your NetworkCard instead.

[D3CRYPT]

I'm not 100% sure how the packets work in AOM:TT. Some are sent from the ~f1d055.tmp file and others are send from the aomx.exe.

WPE can monitor any process. Anything you see in the process list in Task Manager WPE can monitor and it seems to pickup all packets.

EtherpeekNX is a great program but it picks up alot of packets and is alot more complex than is needed for a simple packet hack IMO. 1 bad thing with it is it cant be used on dialup.
WPE on the other hand is very easy to use and is nice for first time packet editors.

[faldo]

Oh, i havn't tried WPE on AOM:TT, but i know many online games where WPE won't detect a single packet.

You said that AOM sends packets from ~f1d055.tmp? Correct me if i'm wrong, but don't WPE only scan .exe files? how the heck do you open a .tmp file in WPE? Please tell us how :D I use WPE Pro 0.9. Is there abother version that worx better?

[D3CRYPT]

I use WPE Pro alpha 0.9a.
I think it must be the version your using, its appears in the drop down list for me :D

Heres a screenshot (had to upload to freehost as dimension were to big to attach)

http://img110.exs.cx/img110/9481/WPE.jpg

edit - had to change link as a certain freehost wont load images if it was loaded from another url :mad: . It works now.

[Fakeaccount]

Okay, I'll monitor the packets over a LAN game.

But (you'll have to bare with me) I was thinking what would I have to do to get the packets I want? I mean, to edit the food and population data, would I have to say, buy villagers? And for wood, say buy a house? That way I would think that the data was sent to the other players...

[faldo]

I use WPE Pro alpha 0.9a.
I think it must be the version your using, its appears in the drop down list for me :D

Heres a screenshot (had to upload to freehost as dimension were to big to attach)

http://img110.exs.cx/img110/9481/WPE.jpg

edit - had to change link as a certain freehost wont load images if it was loaded from another url :mad: . It works now.

I had an early version that didn't support Socks v2, that's why it didn't work for me on some games. WPE 0.9a seems to work on all games i sniff.
Thanx for the info m8.


Okay, I'll monitor the packets over a LAN game.

But (you'll have to bare with me) I was thinking what would I have to do to get the packets I want? I mean, to edit the food and population data, would I have to say, buy villagers? And for wood, say buy a house? That way I would think that the data was sent to the other players...

Sniffing packets and sending them to game server to automate certain tasks isn't very hard useing WPE.
However... if you want to edit a packet before you send it to the server, you have to go though some serious analyze and research in order to send a packet that the server accepts. You need to figure out how the packets are used and look at the commands the packets include.
A general packet consists of 3 parts:
-A line number
-A hexadecimal code
-An ASCII conversion of the hex-code.
You can change the ASCII code and WPE will modify the hex-code for you. I suggest you start from there and try to figure out what you can change and what crashes the game/connection.

[D3CRYPT]

Anytime faldo.

A good way in titans to try making a resource hack is to monitor packets when 1 of your units is taking a resource to the building/cart/settlement. For example: monitor 1 of your units as he takes 5 gold to a settlement. Now make him take back 7 gold and monitor that. Now do 5 again just for the compare to the first time your vill took in 5 gold.
If that packets arent encrypted too much you should see what byte of the packet controls the resource value. Set a filter to search for the part of the packet that is the same in both of the "5 gold" packets. Then in the same filter set a modify on the byte that changed in the "7 gold packet".

Hope that made sense as I typed it very quick as im about to goto sleep ;)

[faldo]

That's a great idea... comparing packets is by far the best way to go. This is a good hackmethod over all, even in memoryhaking... anyways, just to clarify things on this:

If that packets arent encrypted too much you should see what byte of the packet controls the resource value.
The Hexadecimal numbers are displayed in pairs. Each pair uses 1 byte. So when changeing a byte like D3CRYPT sais you change one pair of hex-characters.

Every byte can hold a maximum decimal value of 255 (15 times 15).
So if you're useing the "compare method" and change resourses in the game, try to keep it below the value 255, otherwise more than one pair of hex-number will change.

[moleman]

aom+tt use encrypted packets so gana be diffcult to determin which packets are resources, health, pop etc. almost next to impossible. try it though u mite get lucky but my advice giv up now. read more tuts on hackin+ learn basic asm.

[Fakeaccount]

Yeah, I don't plan on giving up too soon, I at least want to have a shot at it...

Unfortunatly, my mate can't make it down this weekend so the results may be a little while yet. And what Moleman was saying about encryption, I can see that you right. I tried using a HEX editor for values for gold, food etc and couldn't find anything. I think there was another article on AoM's encryption somewhere...

[D3CRYPT]

aom+tt use encrypted packets so gana be diffcult to determin which packets are resources, health, pop etc. almost next to impossible. try it though u mite get lucky but my advice giv up now. read more tuts on hackin+ learn basic asm.


Knowing basic asm + hacking is needed but for things like a online resource hack you need to use packets. If the packets are encrypted just compare them a few times and you should see a pattern. It might take a bit of time as there will be a few packets.
If the villager has resources on him, the other player is totally idle, none of your untis are doing anything and you have the villager selected when you start recording you should only recive a few packets. 1 will be map coordinates and 1 will be resources.
I cant test this as I cant play online at the moment :(

Yeah, I don't plan on giving up too soon, I at least want to have a shot at it...

Unfortunatly, my mate can't make it down this weekend so the results may be a little while yet. And what Moleman was saying about encryption, I can see that you right. I tried using a HEX editor for values for gold, food etc and couldn't find anything. I think there was another article on AoM's encryption somewhere...


HEX editors arent really for hacking games. You need something like Ollydbg or Softice.

I attached Sheep's tutorial on AoM's encryption. Its the best AoM tutorial I have seen.

[scruie]

can someone pm how exactly its supposed to work ive been havn trouble

Thread is 2 years old. User warned for spamming.