Hacking Pokémon X/Y Dumper and Editor

[livetorise]

oh, are we? who the hell are you?

Theguise,

Different aliases for different things.

Dont ask why.

And I never said we were working on it together. We both are trying to find the same thing. Unless you have already found it.

 

[pokefloote]

Don't think this has been posted here, but... Way easy method to grab .pkx or just make sure the other person isn't lying when trading IV bred pokemon



Made by kazowar. No need for wireshark, searching out packets, etc. Just trade and it is visible and saveable by the program.

Router - (wireless) - laptop then
laptop - virtual hotspot using virtual router - 3DS

 

[Duo8]

Finally dumped my data. Seems like the packet is slightly larger that Kyogre123's (1000B).
I also noticed the trainer name isn't encrypted.

Don't think this has been posted here, but... Way easy method to grab .pkx or just make sure the other person isn't lying when trading IV bred pokemon
Made by kazowar. No need for wireshark, searching out packets, etc. Just trade and it is visible and saveable by the program.

Router - (wireless) - laptop then
laptop - virtual hotspot using virtual router - 3DS

So it's Zaneris's dumper+PKX decryptor/editor.

 

[Zaneris]

Me and bond697 or whatever is name is again. Are working on a solution for brute forcing the HMAC Md5 checksum this weekend.
Its only about 16 bytes with i think 2000 or 20k possible combinations for a salt.

I know a lot of people disagree with me (on what grounds I have no idea, but then again, people re-elected bush) but there's no proof that it's HMAC-MD5.

If you haven't even figured it out yet, how can you know what it is

It's a hash of some sort... that's all that's known, period.
I wish people would stop throwing others off track because of what some guy who supposedly knows something but won't tell anyone said so.

 

[Duo8]

If the pcap file contains only the trade packet, is it OK to just open it with a hex editor (and not having to save as .bin from Wireshark) ?
Also, I couldn't seem to find my pkx. Is it before or after the Trainer's name?

 

[Kane49]

If the pcap file contains only the trade packet, is it OK to just open it with a hex editor (and not having to save as .bin from Wireshark) ?
Also, I couldn't seem to find my pkx. Is it before or after the Trainer's name?

If you are in a wonder trade: it follow the byte sequence 0x76 0x03 0x00 0x00

 

[Duo8]

If you are in a wonder trade: it follow the byte sequence 0x76 0x03 0x00 0x00

Thanks. I found it. Length should be E8, right?

 

[Kane49]

Thanks. I found it. Length should be E8, right?

indeed

 

[Duo8]

indeed

Wait. I thought there's supposed to be 4 bytes (8 "characters" in HexEdit) before 00 00 ?
Something like 1a 2b 3c 4d 00 00

 

[Zaneris]

Wait. I thought there's supposed to be 4 bytes (8 "characters" in HexEdit) before 00 00 ?
Something like 1a 2b 3c 4d 00 00

Those 4 bytes are part of the pokemon.

 

[popeel1]

Don't think this has been posted here, but... Way easy method to grab .pkx or just make sure the other person isn't lying when trading IV bred pokemon



Made by kazowar. No need for wireshark, searching out packets, etc. Just trade and it is visible and saveable by the program.

Router - (wireless) - laptop then
laptop - virtual hotspot using virtual router - 3DS

Thanks for sharing this with everyone, very useful tool

 

[Duo8]

Can someone verify this packet? I can't seem to find the pkx.

 

[popeel1]

Can someone verify this packet? I can't seem to find the pkx.

i think you captured the wrong packet, it contains gibberish

 

[Falo]

Can someone verify this packet? I can't seem to find the pkx.

It's the correct packet, but you copied to much, it contains the UDP header (your IP + 3DS mac...),
just delete the first 0x56 byte and you get a normal EAD Packet, here your pkm:

always look for the EA D0 01 03, then go 0x3D byte to the start of the pkx and copy 0xE8 byte to get it

 

[popeel1]

It's the correct packet, but you copied to much, it contains the UDP header (your IP + 3DS mac...),
just delete the first 0x56 byte and you get a normal EAD Packet, here your pkm:

always look for the EA D0 01 03, then go 0x3D byte to the start of the pkx and copy 0xE8 byte to get it

ok, i see where i made my mistake. Thanks for pointing this out

 

[Duo8]

I think I exported the wrong data again. PokeGen won't open it, but PKX Editor would.

 

[Yacker]

I think I exported the wrong data again. PokeGen won't open it, but PKX Editor would.

I don't think Pokegen opens pkx files.

 

[Duo8]

I don't think Pokegen opens pkx files.

It does.
However I was trying to open an encrypted .bin .

 

[Hozu]

I don't think Pokegen opens pkx files.

The real Pokégen doesn't handle 6th gen stuff.

 

[Duo8]

The real Pokégen doesn't handle 6th gen stuff.

It was about Falo's PokeGen.

-------------------------------
OK so I noticed PokeGen VI and PKX Editor handle encrypted data differently.