• There is NO official Otland's Discord server and NO official Otland's server list. The Otland's Staff does not manage any Discord server or server list. Moderators or administrator of any Discord server or server lists have NO connection to the Otland's Staff. Do not get scammed!

OtClient V8 block on serv..

And what you did? Now 2 players are using bot.
In next step tibia.dat will be changed, I wonder how you'll deal with that xD
So you're challenging me? Nah I'm not interested in files that don't have any unique value xD
The point of my previous post was to prove that one person that it'll not take years to get the RSA key, I thought since you're involved in this server that they have different packet encryption algorithm or slightly different protocol structure(not checked that) xD
 
So you're challenging me? Nah I'm not interested in files that don't have any unique value xD
The point of my previous post was to prove that one person that it'll not take years to get the RSA key, I thought since you're involved in this server that they have different packet encryption algorithm or slightly different protocol structure(not checked that) xD

I am not involed, I just told them what to do to block bots, rsa was a first step. And I know it's very easy to get it, just simple regex in memory dump and it's done. I think in this type of server, changing ids of common containers would be enough to completely block custom clients, that's what I recommended as 2nd step. 3th step would be changes in protocol.
I'll release tutorial how to block bots this week on otcv8 github repo
 
Even if you tell people that, they'll still tell that it is impossible or will took literally years to get it simply because they can't do that.
People in Open Tibia Community's from the beginning says that everything is impossible while many people claimed they're wrong.

About RSA key, here it is(it took me literally 5 seconds to get it):
71207351156631922153705677754405123880227735580839555387505390340146259752487782935510132522218755635674050217343809428429276272158587322255103420397007871576367499072401516028373140200187910315051825388498773867080136776506360791219449278648196335181844319169613801727060996345918024429930578165769198318887
However it is still possible that they changed much more than only RSA key.
Fabian just for curiosity, could you tell which tool you used to get this RSA key? I download this client but I didn't see our founded RSA key in referenced strings.
 
Fabian just for curiosity, could you tell which tool you used to get this RSA key? I download this client but I didn't see our founded RSA key in referenced strings.
Maybe because RSA key isn't directly referenced? I'll not talk about my method because it is a little complicated for people that don't know about reverse engineering, but here is example using cheat engine + simple regex like kondra said:
2.png


Base-10(old clients+otclient) regex: \d{300}
Base-16(new qt 11+ client) regex: [A-Fa-f\d]{230}
 
Last edited:
Hehe like it. It works me too. But still I have a insatiable curiosity, what do you mean diffrent encoding? You mean other encrypction algorithm? Or other protocol (not 800 custom like 123)?
 
Even if you tell people that, they'll still tell that it is impossible or will took literally years to get it simply because they can't do that.
People in Open Tibia Community's from the beginning says that everything is impossible while many people claimed they're wrong.

About RSA key, here it is(it took me literally 5 seconds to get it):
71207351156631922153705677754405123880227735580839555387505390340146259752487782935510132522218755635674050217343809428429276272158587322255103420397007871576367499072401516028373140200187910315051825388498773867080136776506360791219449278648196335181844319169613801727060996345918024429930578165769198318887
However it is still possible that they changed much more than only RSA key.
Could u make a tutorial about how to get the rsa of an encrypted otc pls?
 
Even if you tell people that, they'll still tell that it is impossible or will took literally years to get it simply because they can't do that.
People in Open Tibia Community's from the beginning says that everything is impossible while many people claimed they're wrong.

About RSA key, here it is(it took me literally 5 seconds to get it):
71207351156631922153705677754405123880227735580839555387505390340146259752487782935510132522218755635674050217343809428429276272158587322255103420397007871576367499072401516028373140200187910315051825388498773867080136776506360791219449278648196335181844319169613801727060996345918024429930578165769198318887
However it is still possible that they changed much more than only RSA key.
How did you get the rsa?
 
Last edited:
Even if you tell people that, they'll still tell that it is impossible or will took literally years to get it simply because they can't do that.
People in Open Tibia Community's from the beginning says that everything is impossible while many people claimed they're wrong.

About RSA key, here it is(it took me literally 5 seconds to get it):
71207351156631922153705677754405123880227735580839555387505390340146259752487782935510132522218755635674050217343809428429276272158587322255103420397007871576367499072401516028373140200187910315051825388498773867080136776506360791219449278648196335181844319169613801727060996345918024429930578165769198318887
However it is still possible that they changed much more than only RSA key.
How did u get the esa? D: share how u did it pls
 
How did u get the esa? D: share how u did it pls
Share what? I've already shared how you can get RSA key by using cheat engine.
If you want to use exactly the same method that I used then it is up to you: learn asm language and how to use debugger with disassembler.
There isn't shortcuts instead of asking how learn how to reverse engineering yourself.
 
Maybe because RSA key isn't directly referenced? I'll not talk about my method because it is a little complicated for people that don't know about reverse engineering, but here is example using cheat engine + simple regex like kondra said:
2.png


Base-10(old clients+otclient) regex: \d{300}
Base-16(new qt 11+ client) regex: [A-Fa-f\d]{230}
what address to look for in the cheat engine to find the RSA?
 
Back
Top