Topic: Serious About Troubleshooting The "xbl Not Found"? (Read 208 times)

ArMaGeDdOn · « **Reply #15 on:** November 18, 2002, 09:41:00 AM »

zander, i think what he means that the crc will be kept on the XBL servers, and compared to the bounced back one from the XBOX console. so, i know i don't know much about this, but i somehow have a feeling it won't work that way. and dude. remember. think locally.

Zander · « **Reply #16 on:** November 18, 2002, 10:29:00 AM »

Oh, don't worry, I have NO intention on attempting to break the encryption what-so-ever.

I'm not a coder, just a network engineer.

Z

Sev · « **Reply #17 on:** November 18, 2002, 12:54:00 PM »

Has anyone looked in E:\cache ?

The LocalCachexx.bin files have information in them, including a 'site' value. It says 'site1' in there for me, though I can't connect.

It may be easier to work these out than hope some people can use ethereal.

Zander · « **Reply #18 on:** November 18, 2002, 01:22:00 PM »

Zander · « **Reply #19 on:** November 18, 2002, 01:59:00 PM »

Oh yeah,

If you didn't know, the MS backend for XBL is Win2KAS with .NET.

If you'd like to read up on MS's implementation of kerberos within Win2k...

http://www.MS.com/te...at/kerberos.asp

After reading some of this and comparing it against my results from my various sniffs, TGS IS handing out a valid service ticket to the xbox, but the instructions within that ticket are invalid, leading to the garbage mutlicasts we see.

Thoughts?

Z

Zander · « **Reply #20 on:** November 18, 2002, 02:25:00 PM »

Oh yeah, if you don't know what an RFC is, you probably shouldn't be reading the thread.

Damn, I love responding to myself.

Z

Sev · « **Reply #21 on:** November 18, 2002, 02:56:00 PM »

Thanks, I'll try my best.

The cache makes references to passport.net and xbox.com with the sn.<serialnumber> deal. I think the caches contain a raw version of what you are sniffing - it looks like Xboxes connect in a similar way to other .NET clients, but with usernames of SN.xxxxxxxxxxxx

All I can see in the logs is, as I said, site1. This may be an outgoing thing, however.

If other people with working/nonworking systems can scan their E:\cache logs, it may give some interesting results maybe.

ChocoboLee · « **Reply #22 on:** November 18, 2002, 03:49:00 PM »

PillMonster · « **Reply #23 on:** November 18, 2002, 03:59:00 PM »

I'll stick my hand up and say I have a limited knowledge of Kerberos...although I'm just reading up on it now. I suspect the best approach would be to use a PC as an intermediary, effectively the PC talking via Kerberos to Live, and talking to the Xbox in an unencrypted manner (again I'll have to check if this is possible). I suspect if the xbox thinks it has connected to a raw unencrypted stream from live it will. Although I don't hold up much hope of a hack...its certainly worth a go.

Fuzzy · « **Reply #24 on:** November 18, 2002, 04:47:00 PM »

) i found a section that says sender mac adress than lists mine then says the packet MS sent out with my correct ipp but no mac adress....hmmmm

Fuzzy · « **Reply #25 on:** November 18, 2002, 04:54:00 PM »

where exactly do i find that info, i have everything else set up and i get teh packets just i cant find that info

PillMonster · « **Reply #26 on:** November 18, 2002, 06:00:00 PM »

Spree:
Almost right. I think you'll find the code is actually in one of the packets being sent though, or alternatively in the "update" code or both. This way MS can use different packets for different serial numbers, cycle them etc. making the system nigh on impossible to crack. Or as soon as they suspect a successful hack, limit it, and quickly replace the code.

Zander · « **Reply #27 on:** November 18, 2002, 06:44:00 PM »

If you wish to follow the intention of this thread farther, please redirect to here...

http://xbox-scene.fx...1e45dab7430272b

Thanks, that thread has more up to date information.

Z

Author Topic: Serious About Troubleshooting The "xbl Not Found"? (Read 208 times)