Logo

CS.RIN.RU - Steam Underground Community

IRC: #cs.rin.ru at irc.rizon.net
It is currently Friday, 17 Apr 2015, 11:07

English | Русский




Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 344 posts ] 
Author Message

Post Post subject:    
Posted: Monday, 14 Aug 2006, 00:59   
Advanced forumer Завсегдатай
Joined: Friday, 10 Mar 2006, 00:45
Posts: 80
Bawsack wrote:
its easy to run cmd in cafe which are admin protected.
all the cafe i have been in have easy launch software on them ,
what i did was = windows+tab+o =open folder,
go into c/windows and find dos command in there ,then u can run cmd
ipconfig/all,
but mac i got still isnt valid (apparently)


You went it too a cafe and the mac still wasnt valid, now thats weird...

_________________
Image


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 01:42   
Beginner Без звания
Joined: Wednesday, 09 Aug 2006, 09:33
Posts: 4
whenver i click generate, is the cmd prompt supposed to be blank?


Top
 Profile  

Post Post subject: Re: CAC stuff by chrismrulz   
Posted: Monday, 14 Aug 2006, 03:46   
Beginner Без звания
Joined: Sunday, 13 Aug 2006, 05:43
Posts: 8
chrismrulz wrote:
just to be fair.. i'm posting like hcupa did.
http://tinyurl.com/nvyue
mods can remove it just like with hcupa's but u dont have to delete the thread.. u didn't with his.

what mine does:
logs accounts, checks for duplicates etc..
you can do it once, log the info and play a game or something or do every valvecafepc account.
saves to cacaccounts.txt with simple linebreak formatting.

i made a 'CAC Launcher' to launch the different programs and create desktop shortcuts to them.

useaccounts.exe - log into a random account from cacaccounts.txt in CAC.
genaccount.exe - generates one account, saves it and logs in with it.
genaccounts.exe - generates all accounts. can be much faster but for safety it does about 1 every 10 seconds.
runcafe.exe - runs CAC.
showpass.exe - runs CAC showing the password to the user.
CAC Launcher.exe - self explanatory.


this uses steam instead of the 'sendmac' and 'getinfo' tcp packets method..
tried it but stopped working after a while.. so i use the original cac client to avoid issues :P

only a little bit of it in the showpass.exe is in .Net 2.0 but you'll need the redistributables.
all up i've only spent about 30 minutes programming this stuff cos its fairly basic and can't really be released.. i suppose..


second program: MacGen
only spent about 30 minutes on this one again, but this one i've released for you guys is actually an old version which is now a dll for a bigger program which i'm not releasing.
all this one does is do random (BUT VALID) macs every 20 seconds.
takes 20 seconds to disable and enable the network adapter.

tried finding what checks it in cacdll.dll but i think it checks the tcp packets which contain the physical address.

note that mac addresses are not just random numbers and characters, not just random hex characters, but have things like Manufacturer Access Code and such that make it hard to generate.
these generated are fully valid and not just random hex characters.

this one is a very buggy version but i can't release the new dll as it would be useless, and the new client its a part of is not going to be released.
http://tinyurl.com/gs9jr


Third program: CACMacGen
this uses hCUPa's program with my MacGen to do mac brute-forcing.
hCUPa's brute-forcer doesn't do the macs right. there not just hex characters as explained above.
this will do the mac generating properly and check validity using his.
http://tinyurl.com/lf95h

all these programs have been sitting on my comp for a while since they can't be released.. but if other people are..

mods, just having my say as you let hcupa. delete the links if you consider them dangerous.


This is awesome!!!! Thx for postin the links again :D


Top
 Profile  

Post Post subject: Re: CAC stuff by chrismrulz   
Posted: Monday, 14 Aug 2006, 04:25   
Cracker Legend
Joined: Friday, 03 Dec 2004, 03:39
Posts: 362
chrismrulz wrote:
Third program: CACMacGen
this uses hCUPa's program with my MacGen to do mac brute-forcing.
hCUPa's brute-forcer doesn't do the macs right. there not just hex characters as explained above.
this will do the mac generating properly and check validity using his.
http://tinyurl.com/lf95h

If you say that CAG bruteforcer does MACs wrong, please care to elaborate, or it looks thoughtlessly otherwise.

Had to take a look at your 'proper' implementation, and here are comments:
1) Calling Randomize() so often a good way to get pseudorandom sequence of very bad quality.
2) Making every byte of MAC 'random' only means that user will have to bruteforce for the rest of her life.
3) Having absolutely zero ways to customize generation means that (2) is unavoidable.
4) Sequential way of generating mac isn't worse then 'random' way. There are pros and cons for every approach.

I failed to see what is proper in this implementation. If you could shed light on that mystery, I'd really appreciate that.

_________________
--- hCUPa, retired one


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 05:18   
Beginner Без звания
Joined: Sunday, 13 Aug 2006, 05:43
Posts: 8
hmm i was wondering...

If you have a valid mac and you generate an account, could you use that account on a computer without a valid mac address and using regular steam? If so could someone with a valid mac generate an account and PM it to me?
It would be GREATLY appreciated!!! :D


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 05:32   
Super flooder Почетный графоман
Joined: Sunday, 21 May 2006, 21:13
Posts: 754
Yes, you can.

_________________
Image
http://www.fspowered.com- my home :D
A wise man once said: If you like the game, go buy it!
A wiser man said: ...Or you can just get it for free at http://www.fspowered.com.


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 08:01   
Advanced forumer Завсегдатай
Joined: Friday, 11 Nov 2005, 08:25
Posts: 66
Location: New Zealand
[quote="chrismrulz"][quote="elron"]the mac-gen doesnt work, it crashes everytime you click on start generating[/quote]

heh told you it was buggy :P does different things on all pc's i've tried :D

you can just click the continue button in the .net error dialog to see the generating start i'm pretty sure.

my new version has almost no bugs.. but it's a dll for another program.
[b]if we are allowed to do cac stuff i'll make the new version into a stand-alone app that changes the mac and uses it in cac like my new version and release it here [/b];)[/quote]


Erm... they've changed havent they? or are they still against this happening?


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 08:14   
Beginner Без звания
Joined: Sunday, 13 Aug 2006, 05:43
Posts: 8
battledead wrote:
Yes, you can.


WOW can someone please PM me one! It's not like it's hard to do and i would be VERY greatful. :D


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 08:30   
Advanced forumer Завсегдатай
Joined: Sunday, 16 Apr 2006, 19:05
Posts: 82
With the Macgen, i put like generate 30 and leave it, but it takes ages, and the CMD popup is blank, then flashes on and off.....has anyone actually got a valid mac?


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 08:35   
Advanced forumer Завсегдатай
Joined: Tuesday, 26 Apr 2005, 00:09
Posts: 146
@eliteapu1
Same for me. This MAC gen and hCUPa's are not working, for me atleast. Though, hCUPa's account gen works.


Top
 Profile  

Post Post subject: Re: CAC stuff by chrismrulz   
Posted: Monday, 14 Aug 2006, 09:50   
Super flooder Почетный графоман
Joined: Sunday, 14 Mar 2004, 17:41
Posts: 679
Location: Austraaaaalya maaaaate!
randomjester wrote:
@eliteapu1
Same for me. This MAC gen and hCUPa's are not working, for me atleast. Though, hCUPa's account gen works.


the window is supposed to be blank. if it gets one it will show it in CACMacGen.
it takes just as long as hCUPa's as it uses his and in the same way.

hCUPa wrote:
chrismrulz wrote:
Third program: CACMacGen
this uses hCUPa's program with my MacGen to do mac brute-forcing.
hCUPa's brute-forcer doesn't do the macs right. there not just hex characters as explained above.
this will do the mac generating properly and check validity using his.
http://tinyurl.com/lf95h

If you say that CAG bruteforcer does MACs wrong, please care to elaborate, or it looks thoughtlessly otherwise.

Had to take a look at your 'proper' implementation, and here are comments:
1) Calling Randomize() so often a good way to get pseudorandom sequence of very bad quality.
2) Making every byte of MAC 'random' only means that user will have to bruteforce for the rest of her life.
3) Having absolutely zero ways to customize generation means that (2) is unavoidable.
4) Sequential way of generating mac isn't worse then 'random' way. There are pros and cons for every approach.

I failed to see what is proper in this implementation. If you could shed light on that mystery, I'd really appreciate that.


all 4 of those comments are true. random is bad.
but it was to show you that these are actual valid macs not just sequential (or random) hex characters.
the macs are generated the same way manufacturers do when they make them for there products,
as opposed to how yours just sequentially increases a hex char.
i know you've got a few well known codes from intel etc.. but its better to just do the whole algorithm the way they (and others) make them.

_________________
I piss excellence.


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 10:10   
Beginner Без звания
Joined: Sunday, 13 Aug 2006, 05:43
Posts: 8
ChrisMRulz or someone, could you generate an account for me, and PM it to me. if you could that would awesome :D


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 10:13   
Super flooder Почетный графоман
Joined: Sunday, 14 Mar 2004, 17:41
Posts: 679
Location: Austraaaaalya maaaaate!
wp_dude wrote:
ChrisMRulz or someone, could you generate an account for me, and PM it to me. if you could that would awesome :D


sorry, that is exactly the thing we should never do.
if you don't have a mac address, too bad. no accounts.

this is only for people who already have one from a private release and know the consequences or for people who are legit.

_________________
I piss excellence.


Top
 Profile  

Post Post subject: Re: CAC stuff by chrismrulz   
Posted: Monday, 14 Aug 2006, 10:41   
Cracker Legend
Joined: Friday, 03 Dec 2004, 03:39
Posts: 362
Quote:
all 4 of those comments are true. random is bad.
but it was to show you that these are actual valid macs not just sequential (or random) hex characters.
the macs are generated the same way manufacturers do when they make them for there products,
as opposed to how yours just sequentially increases a hex char.
i know you've got a few well known codes from intel etc..
but its better to just do the whole algorithm the way they (and others) make them.


All over the forum I notice people haven't really got a clue what a MAC is or how to best bruteforce it.

A MAC is a 48-bit identifier for layer 2 networking communication, also known as a Media Access Control code.
Layer 2 communication is only used in local networks, i.e. it is non-routable.
TCP/IP / UDP traffic is layer 3 on top of layer 2.
Since MAC's are only used locally it is impossible for Valve to be able to
see your local MAC address by looking at the packet headers they receive.
The MAC the Valve servers see is the MAC address of their own local router/switch,
being the last hop in the traffic.

This means that the MAC address for CAS/CAC is looked up locally by the CAS program and sent as packet data.
This means it is non-sense to go and change the MAC address of the local card (besides that takes like 20 secs too in Windows).

Furthermore, much of the MAC address space is still unused, there is enough address space left to last to the year 2100.
With this in mind it is important to know how a MAC address
is formatted so that you increase your chances of finding a valid MAC address.
Only a very small portion of the MAC address space is currently assigned,
this means that bruting all 48 bits is VERY inefficient.

A MAC address consists of 2 parts, the first part being the first 24 bits are the OUI (Organizational Unique Identifier).
Each company which creates network cards, reserves one of more OUI's to register their network equipment on.

The last 24 bits are custom and how to assign them is decided by the company themselves.
There is no rule for this. However most companies assign the last bits sequentially.
So it is best to look up a current network card and use that as a brute base.

For example, it is logical to assume that Intel on-board motherboard cards are used a lot on CAS servers.
So lets take a relatively new Intel 1 gbit network card, which has a MAC of 00-02-B3-10-D6-9B.
Of this MAC we know the manufacturer is Intel, the OUI being 00-02-B3.

We can lookup the OUI on http://standards.ieee.org/regauth/oui/oui.txt.

The result is:
00-02-B3   (hex)      Intel Corporation
0002B3     (base 16)      Intel Corporation
            M/S:  JF3-420
            2111 N.E. 25th Ave.
            Hillsboro OR 97124
            UNITED STATES


This means that this range of Intel cards has MACs from 00-02-B3-00-00-01 to 00-02-B3-FF-FF-FE.
(Take note that Intel has more then 1 OUI on which they register cards,
and that it is reasonable to assume cards of the same product range
will have be in the same MAC ranges.)

So any in that range could contain a valid MAC for steam cafe.
Obviously there are other manufacturers of NICs mostly used in modern computers / servers that come to mind.
For example RealTek, BroadComm, Marvell...
By bruting only their valid OUI address spaces you should be able to significantly improve your chances on finding a valid MAC.

Hopefully this will make it a bit clearer to everyone.

_________________
--- hCUPa, retired one


Top
 Profile  

Post Post subject:    
Posted: Monday, 14 Aug 2006, 11:23   
Super flooder Почетный графоман
Joined: Sunday, 14 Mar 2004, 17:41
Posts: 679
Location: Austraaaaalya maaaaate!
i think most people get how you use the oui of intel cards instead of every character..
but theres more to it than just choosing pre-defined ones.

_________________
I piss excellence.


Top
 Profile  
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 344 posts ]  Go to page Previous  1 ... 3, 4, 5, 6, 7, 8, 9 ... 23  Next


Who is online

Users browsing this forum: No registered users and 5 guests


Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum




Powered by phpBB® Forum Software © phpBB Group