Hi guys,

I saw bc2 is getting stats, and i was wondering if anyone could give me access to the game. I already installed it, but since I don't have a beta key, I can't access the leaderboard and stats menu.

If anyone would be so friendly to lend me a hand, and give me access, either by a key, or account login. I won't actually need to play the game. I only need to access the menu's with a packet sniffer, and see how the call are being made to the backend. Some basic hacking, nothing to worry about, completely invisible, and harmless.

Thanks,
Nick

PS. keys that are already used won't work.

Excellent, i have been digging into this today again.

At first i was a little bit afraid of the SSL encryption, because i thought it is impossible to crack. But now i have managed to hack my way in.

I'm already able to read the fully encrypted login procedure. At this point I don't know if I can crack the full encryption, but I'm getting there, no promises.

oh very nice m8, its a good start so far,just keep at it , give it another week of doing it hopefully your get it all

Yes I will work on it in the little spare time I have. Now that I found a way in, I'm sure it is possible.

Actually, because of an error I made, it stopped me after the login process.

But now i was able to get to the stat and pulled the leaderboard, and created a nice network capture.

I'm going trough the data now, to see what is useful and not, so i can reverse engineer the protocol.

Making progress here. I'm now able to decode the stats because of the simple encoders used

well you have made progress man thats very good, i think you better think of a domain name soon haha.

Holy crap. I don't know how you do any of this! All that stuff just went right over my head! Encryption decoding and reverse engineering and hacking, sounds like you seriously know what you're doing!

Mike

Unfortunately lots of domains are already registered, because they all think they can provide stats. But they probably never will because all is fully encrypted


You pick up some security things as programmer. For bf2 the stats protocol was also reversed engineered at first, until they offered us an alternative.

I personally own the domain names:-

bc2stats.info
bfbc2stats.info
badcompany2stats.net
badcompany2stats.info

Nick, you may use any of them, free of charge, if you wish.
I can provide hosting on my own web server or I can redirect them where you wish.

Just let me know.

domain whore

Tramp

Just protecting our collective interests - and you DID notice I said free-of-charge to Nick???

Cool, but I'm not there yet. Now that i had figured out the encryption between the client and the ea server, i still have to figure out how to do it between my server and the ea server.

And there is lots of data to analyze, it's probably 10x more then bf2. And i don't know anything about the data, I just have to guess the which what value is.

My todo list is growing .
- Design a new website.
- Code the website.
- Design a database.
- Reverse engineer the stats protocol.
- Reverse engineer the encryption to my server.

Also, I'm graduating atm. So other then a 40 hours working week on my study, I also have to do it outside these hours, to get a very high grade! Not to mention I have to eat and sleep.

So, I can't promise anything yet. I'm still figuring out if it is possible at all, and how much recourses it will take.

maybe you could ask others to help out with the website design? surely some1 here knows how to do it lol.

thats alot of stuff todo indeed