Packet sniffer/sender

[fedup]

i'm new to c and vb and i was going to use a winsock connection to send and recieve packets from a online game i was just wondering how i would do it i got a fair idea but can't find any coding helpful

like my program is going to have a log in page that logs into the game but from my computer

what i need to know is how to write the sniffer and how to write the login so it's more like a MIM attack where i can be in between the client/server so

would i have to cutomize my host files like add a new host for my client to connect and get the info and i know i can type something like
()getstring string to hex and sckrecvieve scksend to browser
am i on the write track some code would be helpful

this game does have encryption but that i will figure out later after i have my prog ready

[Apocalypse]

Being new to C and VB, you should probably get more programming experience with writing basic programs, as your algorithm lacks development. So far all you have is:

()getstring string to hex and sckrecvieve scksend to browser

Try some pseudocode to get you in the flow of programming.

am i on the write track some code would be helpful

Try writing a program function that takes input as a string (or an array of char's) and returns it in hexadecimal form. Then you can use this in your logic. That'd be a start at least.

[Cool_Fire]

First of all: You're never going to be able to do man in the middle attacks or packet sniffing with winsock.
And to continue on that, you're probably not going to be able to do this in VB either.

To sniff passwords from an online game you basically have two options:
1. inject a .dll hook into the game itself. This will allow you to track all the games actions directly, but you MUST be on the same machine as where the game is running.
2. Packet sniffing. I'd advise against building this yourself for two reasons:
a: It's really, really complex stuff, and if you want to do it remotely, you'll have to write something to do ARP poisoning too.
b: There's so many applications that already do this, and do it very well, there's just no reason to write your own.

In all honesty, option two seems to be the better option in this case, simply because the tools you'll need exist. Look into tcpdump, Cain & Abel, Wireshark and SSLStrip if the game uses SSL for it's login.
There is a serious downside to this method though. When they send their login data encrypted, you're basically shit out of luck in most cases. Using a dll hook you might be able to catch the login data before it gets encrypted.

Or option 3: Install a keylogger and be done with it.