Custom Class Hack [ELiTE]

12-06-2012, 07:21 PM #1

-iTech-

Grunt

60

Posts

470

Reputation

0

Credits

Member

Dec 2011

NextGenUpdate

(adsbygoogle = window.adsbygoogle || []).push({}); Hey guys, by now most of you probably know that iHC James has released a tool for modding ELiTE custom classes by redirecting your browser to use a proxy he has programmed.

(Please excuse me if this is in the wrong section, half appeared to be relevant whilst the other half did not.)

I was a bit curious as to how this worked so I opened up fiddler and just made a quick mock class to see what data was being sent to the server when you clicked "Send to game", this lead me to stumble upon the following URL: You must login or register to view this content.

JSON data containing your class information is sent to that URL when you press the save button, here is an example of what is sent to the server, try not to laugh at my dreadful classes, was experimenting with a glitch: You must login or register to view this content.

I'm guessing that iHC James program captured that data using something like the Fiddler library/API and then sent the data after the user pressed submit.

The point I'm trying to make is that if we can make some kind of proxy we could add a GUI version to iHC James' class editor so that people can see what they're doing and have values auto-inserted into the JSON request.

Information about the JSON:

Headers

    POST /ops2/classes/ajax/save HTTP/1.1

Host: elite.callofduty.com

Connection: keep-alive

Content-Length: 3266

Origin: https://elite.callofduty.com

X-Requested-With: XMLHttpRequest

User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.11 (KHTML, like Gecko) Chrome/23.0.1271.95 Safari/537.11

Content-Type: application/json; charset=UTF-8

Accept: application/json, text/javascript, */*; q=0.01

Referer: https://elite.callofduty.com/ops2/classes

Accept-Encoding: gzip,deflate,sdch

Accept-Language: en-US,en;q=0.8

Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3



HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Cache-Control: max-age=0

Content-Type: application/json;charset=UTF-8

Date: Thu, 06 Dec 2012 18:43:39 GMT

Expires: Thu, 06 Dec 2012 18:43:39 GMT

Server: nginx/1.1.19

X-UA-Compatible: IE=Edge,chrome=1

Content-Length: 16

Connection: keep-alive

Surely this tells us enough about how the sending of our classes work?

[Here comes the kind of different section piece]

I have quite good knowledge of C# and can do a decent bit, I know how I can create a HTTP post like this but what I need help with is the proxy, if anyone knows how I can intercept the traffic between the browser I would be very grateful.

Here is the code I am currently using, my only issue is getting the application to login:

    

HttpWebRequest HTTPRequest = (HttpWebRequest)WebRequest.Create("https://elite.callofduty.com/ops2/classes/ajax/save");

ASCIIEncoding encoding = new ASCIIEncoding();

string JSON = "{INSERT_JSON_HERE}";

byte[] data = encoding.GetBytes(JSON);

HTTPRequest.Method = "POST";

HTTPRequest.ContentType = "application/json;charset=UTF-8";

HTTPRequest.ContentLength = data.Length;



using (Stream JSONStream = HTTPRequest.GetRequestStream())

{

    JSONStream.Write(data, 0, data.Length);

}

Now in theory this should provide us with a way to manipulate our classes easily, we just need a proxy server to enable us to capture the credentials, otherwise this will just constantly send the app back to the login form >.<

If anyone wants a slightly clearer explanation on iHC James' tool I guess I can give it my best shot ^_^

(adsbygoogle = window.adsbygoogle || []).push({});

12-07-2012, 09:12 PM #2

L A H B

Banned

34

Posts

110

Reputation

0

Credits

Banned

Mar 2011

NextGenUpdate

elite link is not working

12-07-2012, 11:38 PM #3

-iTech-

Grunt

60

Posts

470

Reputation

0

Credits

Member

Dec 2011

NextGenUpdate

It appears as a 404 but if you send a post request I can confirm that it returns "200" as the status code,
Download fiddler and try to edit your classes (press capture just before you press send to game) and you will see that it returns 200 and you can also see the data it sends to the server Smile

---------- Post added at 06:38 PM ---------- Previous post was at 06:28 PM ----------

Update:
using the FiddlerCore API/DLL I have managed to capture what data is sent to the URL that saves your classes

Here is a diluted version of what I'm using to capture the JSON:

    

            Fiddler.FiddlerApplication.BeforeRequest += sess =>

            {

                if (sess.fullUrl.Contains("elite.callofduty") && sess.fullUrl.Contains("classes") && sess.fullUrl.Contains("ajax/save") && editing == false)

                {

                    JSON = enc.GetString(sess.RequestBody);

                    JSON = JsonFormatter.PrettyPrint(JSON);

                    Console.WriteLine("Information: Data Intercepted");

                    MessageBox.Show(JSON, "CSTech ELiTE Hack Prototype");

                }

            }

Need to come up with a better title than "ELiTE Hack Prototype", any suggestions?

02-16-2014, 07:29 AM #4

igiravax

Guest

n/a

Posts

n/a

Reputation

n/a

Credits

Member

Once upon a time...

NextGenUpdate