MAJIN Score Sender

[Accelerator]

After i have authorised, an option called enter the program appears.
After i click that, some error shows up and i am unable to enter the program.
I am using windows 8

It would be better if you specify the error or post a screenshot of it :/.

[maxderpy]

After i have authorised, an option called enter the program appears.
After i click that, some error shows up and i am unable to enter the program.
I am using windows 8

Same, except win7.

Same. Windows 7.

Problem signature:
  Problem Event Name:	APPCRASH
  Application Name:	MajinSS.exe
  Application Version:	1.0.0.0
  Application Timestamp:	533856f8
  Fault Module Name:	MSVBVM60.DLL
  Fault Module Version:	6.0.98.15
  Fault Module Timestamp:	4a5bda6c
  Exception Code:	c0000005
  Exception Offset:	000640da
  OS Version:	6.1.7601.2.1.0.768.3
  Locale ID:	1033
  Additional Information 1:	595c
  Additional Information 2:	595cfaf7f37a801cd52bf9d1e9cdf61e
  Additional Information 3:	3dbc
  Additional Information 4:	3dbcd6789c25f6545a365d0b75b981c8

Does this require some kind of archaic VB runtime or something?

[wizardofthenorth]

Same issue, it gives a MAJIN Score Sender has stopped working message.

Windows 8.

[j03]

Same, except win7.

Same. Windows 7.

Problem signature:
  Problem Event Name:    APPCRASH
  Application Name:    MajinSS.exe
  Application Version:    1.0.0.0
  Application Timestamp:    533856f8
  Fault Module Name:    MSVBVM60.DLL
  Fault Module Version:    6.0.98.15
  Fault Module Timestamp:    4a5bda6c
  Exception Code:    c0000005
  Exception Offset:    000640da
  OS Version:    6.1.7601.2.1.0.768.3
  Locale ID:    1033
  Additional Information 1:    595c
  Additional Information 2:    595cfaf7f37a801cd52bf9d1e9cdf61e
  Additional Information 3:    3dbc
  Additional Information 4:    3dbcd6789c25f6545a365d0b75b981c8

Does this require some kind of archaic VB runtime or something?

Same issue, it gives a MAJIN Score Sender has stopped working message.

Windows 8.

You need to check the help section for programs, right above this section for Neopets programs. You're missing the vb runtime files.

[wizardofthenorth]

You need to check the help section for programs, right above this section for Neopets programs. You're missing the vb runtime files.

Sexy stuff, that fixed it. I program in visual studio...this is some old ass files you guys using. I had all the up to date stuff.

[j03]

Sexy stuff, that fixed it. I program in visual studio...this is some old ass files you guys using. I had all the up to date stuff.

This was made in Visual Basic 6, but I went pretty hardcore on the interface. I am now doing my programs in C#.NET (check Stealth Core).

I have an ABer and score sender in the works that will function similarly.

[maxderpy]

Ok, so there are major problems with some of Joe's header handling code.

For instance MajinSS.exe sends the following after authorizing with clraik and connecting to archive.org to verify internet connectivity:

GET /archive.org/index.php HTTP/1.1
Host: pets.neopets.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Connection: close
Referer:
Cookie:


Compare to IE8's headers for the same request:

GET /archive.org/index.pgp HTTP/1.1
Accept: application/x-ms-application, image/jpeg, application/xaml+xml, image/gif, image/pjpeg, application/x-ms-xbap, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*
Accept-Language: en-US
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/7.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.2)
Accept-Encoding: gzip, deflate
Host: pets.neopets.com
Connection: Keep-Alive


Notice any differences? First, headers with null values (Referer: and Cookie are NEVER sent from legitimate browsers.
Second, this page is a 404 page that is probably only loaded by this program. Both of these can be used by TNT to flag your account.

Neopets then replies with:

HTTP/1.1 200 OK
Server: Apache/2.2.15 (CentOS)
X-Powered-By: PHP/5.4.28
X-404: loaded
X-Cobalt: loaded
X-XSS-Protection: 0
Content-Type: text/html; charset=UTF-8
Expires: Sun, 12 Oct 2014 02:22:11 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 12 Oct 2014 02:22:11 GMT
Transfer-Encoding: chunked
Connection: close
Connection: Transfer-Encoding
Set-Cookie: np_randseed=51657797945399443; expires=Mon, 12-Oct-2015 02:22:11 GMT; path=/; domain=.neopets.com
Set-Cookie: np_uniq=pending; expires=Mon, 12-Oct-2015 02:22:11 GMT; path=/; domain=.neopets.com
Set-Cookie: xt6Yr4e33D=023346080531; expires=Mon, 12-Oct-2015 02:22:11 GMT; path=/; domain=.neopets.com
Set-Cookie: nupi=0; expires=Sun, 12-Oct-2014 00:42:11 GMT; path=/; domain=.neopets.com
Set-Cookie: nupid=0; expires=Sun, 12-Oct-2014 00:42:11 GMT; path=/; domain=.neopets.com
Set-Cookie: npid=0; expires=Sun, 12-Oct-2014 00:42:11 GMT; path=/; domain=.neopets.com


Now, if you look at the cookies npui, npuid, and npid, they are sent from neopets PRE-EXPIRED. This means that a normal browser would never send them back to neopets on a subsequent request, but when we look at MajinSS we see it sends on the next request:

GET /games/play_flash.phtml?va=&game_id=500&nc_referer=&age=0 &hiscore=0&sp=0&questionSet=&r=3066612'+'&width=50 0&height=500&quality=high HTTP/1.1
Host: (you need an account to see links)
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:28.0) Gecko/20100101 Firefox/28.0
Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Connection: close
Referer: (you need an account to see links)
Cookie: np_randseed=51657797945399443; np_uniq=pending; xt6Yr4e33D=023346080531; nupi=0; nupid=0; npid=0


Uh oh. Those three cookies wouldn't have been sent from a real browser. Looks like neopets has something else to flag us with.

Looks like this program and probably others using that vb6 httpwrapper are giving neopets plenty of data to let them know that a program is probably being used and we should probably be iced.

When coding these kind of hacks, first priority should be to look indistinguishable from a normal browser, otherwise it gets easily detected.

[butterbeans]

So whenever I try and enter the program it just refuses to let me in. At first it would give me "enter program" and then crap out. No error message or anything, just shut down. So I deleted, redownloaded and now when I try to authorize account it flashes "unknown error???" and I'm not sure what to do because there is no error report.

I was using it on my little notebook because there apparently isn't a Mac version or no one has found a work around for mac?

[Accelerator]

So whenever I try and enter the program it just refuses to let me in. At first it would give me "enter program" and then crap out. No error message or anything, just shut down. So I deleted, redownloaded and now when I try to authorize account it flashes "unknown error???" and I'm not sure what to do because there is no error report.

I was using it on my little notebook because there apparently isn't a Mac version or no one has found a work around for mac?

Do you have all the components installed and registered? Just in case include the zgate and prjChameleon. sometimes rebooting helps that error, at least that's what I've read here, the only way to run in Mac is to install a virtual machine (VirtualBox/VMware/Parallels) and then install windows in that virtual machine at least that's what I used to do when I was using Linux, Wine for some reason let me run the programs but gave me the same error you mention.

[destroyer2157]

I don't have the library files, every link I try gives me a "file moved/deleted" or "file no longer hosted" any one have a link that works? I also get the "...has stopped working" message.