SRL Archive - Help and Support

Well, Im writing a pay script right now and I need to learn how to write auth systems and encrypt scripts. I also need to learn how to get variables from a web page.

Any help is appreciated.

Only the master can encrypt ;).
Getting variables from sites is easy, if you do GetPage('LINK'); it will return everything thats on that link in text. So if it links to a file with only TESTING in it GetPage will return TESTING :)

Want to tell me about auths :p?

Go here fool : http://www.moparisthebest.com/smf/index.php/topic,74862.0.html

I'll obfuscate your script for you, just gotta look through it. Can't encrypt though.

And ya, just follow the tut for the auth system :)

From: Avaphi
Go here fool : http://www.moparisthebest.com/smf/index.php/topic,74862.0.html

Hey now, no need for calling anyone a fool.

I don't go to Mopars place much / at all.

I didn't knows they had tuts on auths…

encrypting is easy..

i cant find a working obfs any more….

auth just needs some simple getpage yatta yatta easy aswell :p

procs like:

AddPostVariable
InitializeHTTPClient
ClearPostData
PostHTTPPageEx
FreeHTTPClient

may help you in this auth system.

(setting up a site ask someone else :p)

thanks DS :)

MSN me? I want to see how encryption is 'easy' :)

what im asking for is a kind of authorizie (how do u spell that) method..

how to store a CHR example:

var hax : string

begin
hax:= Chr(15)
writeln('Char: ' + hax)
end.

now hax should return as: "o",
but it wont instead it returns as a square (cant copypaste it here).

program auth;
var
  password : string;
var
  shot : string;

begin
  password:= 's';
  shot:= Chr(19);
  if password = shot then
    begin
    writeln('accept ' + shot)
    end else
      begin
        writeln('denied ' + shot)
      end;
end.

thats my code wont work :( FIX pl0x :(

how do i do this?


::::::OMG OMG OMG EDIT:::::::

program New;

var password,hax : string;

begin
  password:= '';
  hax:= chr(15)
  if hax = password then
   begin
     writeln('accept')
     exit;
   end else
     begin
       writeln('denied')
       terminatescript;
     end;
end.

test that.. it will accept it, BUT then change the Chr(15) value example to 16 it will return DENIED!! yay theres a small auth ENCRYTPED omg

From: JuKKa
what im asking for is a kind of authorizie (how do u spell that) method..

how to store a CHR example:

var hax : string

begin
hax:= Chr(15)
writeln('Char: ' + hax)
end.

now hax should return as: "o",
but it wont instead it returns as a square (cant copypaste it here).

program auth;
var
  password : string;
var
  shot : string;

begin
  password:= 's';
  shot:= Chr(19);
  if password = shot then
    begin
    writeln('accept ' + shot)
    end else
      begin
        writeln('denied ' + shot)
      end;
end.

thats my code wont work :( FIX pl0x :(

how do i do this?

script side auth = i h4x0r you in seconds… even with encryption(but not in seconds.)…

server side = not easy to h4x0r….

encryption = change all vars to be long and un readable.. and make things arrayed and stuff.. and put all on one line XD.. thats the easy way :)

check my edit lines there u have it SOLVE this password then:


ATTACHED—>

tell me .. CRACK that password and ill give u a kiss..

its really a password if u cant crack it i will give u the password + a kiss and a method to solve it :P

program New;

var password : string;

function auth(hax : string) : boolean;
begin
  password:= '';
  if hax = password then
   begin
     writeln('accept')
     result:= true;
     exit;
   end else
     begin
       writeln('denied')
       result:= false;
     end;
end;

begin
auth('')
end.

Im not gay…..


now there is a way.. using encryption and decryption procedure i made in scar to complicate things a bit more.. especially if the encryption proc is encypted :p

im an ass plz kick me *embarrassed*

jukka ill make a new one for ya and you have to solve it.

mkay :p

heres a very good way to mess up noobs with auth…

i mean i might loose some pros.(not likly)

but its very well protected for those who sell to noobs :p

attached…

i have come to a solution… built in encryptions auths in the script –> SUCK

here i goot joo

couldnt you just change

if (hax = password) then

to

if (true) then

?

From: danrox2004
couldnt you just change

if (hax = password) then

to

if (true) then

?

:p

TBH I dont think its worth trying to put an auth system on a script in scar, all of the code is free for anyone to see, and all the auth systems i have seen so far are VERY easy to crack or whatever you call it.

Try cracking my Script then.

• Half of the auth is in a plugin, half is in the script.
• Half of the authorization connects to the web, half checks in the script internally.
• Strings are encrypted with my 2 line encryption procedure, and decrypted with my 2 line decryption procedure.
• Obfuscated script, and encrypted.
• Harsh consequences if the script realizes you are cracking it (And yes, it can realize you are cracking it)

Strings are converted like so:
[php]
Normal String:
Starblaster100

Encrypted Strings:(There are endless possibilities to what it can be encrypted to)
î(0^m˜°ç)aM{¬
ï)1_n™±è*bN|*
8$޾\&鵟=
etc…
[/php]

Thank you.

From: Starblaster100
Try cracking my Script then.

• Half of the auth is in a plugin, half is in the script.
• Half of the authorization connects to the web, half checks in the script internally.
• Strings are encrypted with my 2 line encryption procedure, and decrypted with my 2 line decryption procedure.
• Obfuscated script, and encrypted.
• Harsh consequences if the script realizes you are cracking it (And yes, it can realize you are cracking it)

Strings are converted like so:
[php]
Normal String:
Starblaster100

Encrypted Strings:(There are endless possibilities to what it can be encrypted to)
î(0^m˜°ç)aM{¬
ï)1_n™±è*bN|*
8$޾\&鵟=
etc…
[/php]

Thank you.

ur scaring me :(
sounds so hard..

well it supposed to be harsh and hard :P

Hey Star,

Teach me how to do that please :p ?

From: Starblaster100
Try cracking my Script then.

• Half of the auth is in a plugin, half is in the script.
• Half of the authorization connects to the web, half checks in the script internally.
• Strings are encrypted with my 2 line encryption procedure, and decrypted with my 2 line decryption procedure.
• Obfuscated script, and encrypted.
• Harsh consequences if the script realizes you are cracking it (And yes, it can realize you are cracking it)

Strings are converted like so:
[php]
Normal String:
Starblaster100

Encrypted Strings:(There are endless possibilities to what it can be encrypted to)
î(0^m˜°ç)aM{¬
ï)1_n™±è*bN|*
8$޾\&鵟=
etc…
[/php]

Thank you.

well, ive never seen anything like that before on a scar script :eek:

From: Ruroken
Hey Star,

Teach me how to do that please :p ?

soon dude, soon… ;)

From: Starblaster100
soon dude, soon… ;)

next time you log on to MSN i'll ask. :p

I was orignally introduced to the communities to write a system to secure scar scripts for genodemon.

"shell" was a scar script that downloaded obfuscated scar scripts, it would write the script to the hard drive then delete it immeidatly on next load. It was the first script that would restart it self and modify it self. It used a hand shaking method not the send-recieve auth systems which are popular. It also could auto aquire all includes. It also had the plan to store all strings server side and the individual scripts would request for the strings after making it thru all the previous system.

Cracking it would took a good amount of time. Would require many modifcations, de-obfuscation/reading of multiple scripts/includes. Also it used delphi-plugins for encryption.

I don't know if i ever passed the project to other people, at the time we were working with a few people that didn't want thier pieces released.

I know i released my progress on scar script obfuscator.


I think the md5 hashing scar plugin as released.
I don't know if i ever released the php/mysql code.

I was left unfinished as i got into aryan.

From: Dark_Sniper

encryption = change all vars to be long and un readable.. and make things arrayed and stuff.. and put all on one line XD.. thats the easy way :)

No sir, that would be obfuscation.

From: JuKKa
check my edit lines there u have it SOLVE this password then:


ATTACHED—>

tell me .. CRACK that password and ill give u a kiss..

its really a password if u cant crack it i will give u the password + a kiss and a method to solve it :P

One thing.. copy the encrypted pass from JuKKa's attatchment..I can't copy it in here somehow

program New;

procedure writeit;

var
  password: string;
  I: integer;

begin
  password:= '';
  for I := 1 to length(password) do
    writeLn(inttostr(getkeycode(password[i])))
end;

begin
  writeit;
end.

gives:

68 -D
65 -A
82 -R
75 -K
83 -S
78 -N
76 - L
80 - P
69 - E
82 - R

EDIT:

Even better

program New;

procedure writeit;

var
  password: string;
  I: integer;
  a: byte;

begin
  password:= '';
  for I := 1 to length(password) do
  begin
    a := getkeycode(password[I]);
    KeyDown(a);
    wait(50);
    KeyUp(a);
  end;
end;


begin
  writeit;
end.

From: Ruroken
Hey now, no need for calling anyone a fool.

I don't go to Mopars place much / at all.

I didn't knows they had tuts on auths…

I'll assume it's mine, if so, I'm building a new auth system and posting tutorials on both forums.

Wait, you could just do:

Program Encrypt;
Var a:String;
begin
 a:= GetPage('lolololol.com');
 b:= Copy(a, FIRSTCHACTERSETNUMBER, SECONDCHARSETNUM);

or, what I'm trying to say, is you store characters in a file as there numbers, and use those (converted to letters) as the password.

From: Dark_Sniper
jukka ill make a new one for ya and you have to solve it.

mkay :p

heres a very good way to mess up noobs with auth…

i mean i might loose some pros.(not likly)

but its very well protected for those who sell to noobs :p

attached…

pass is 2kj42


and about encryption. Well, The only way your gonna get it encrypted is if you go out and buy 5 dozen chocolate chip cookies and give them to Freddy. Even then, the chances of him encrypting your script are very low =[

If you don't get it encrypted the right way then auths are very useless, and you shouldn't waste your time on them.