Announcement

Collapse
No announcement yet.

Yet Another Socom Combined Assault Information Thread

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Yet Another Socom Combined Assault Information Thread

    Im Just Creating a Separate Thread To index Information Related to Socom Combined Assault.


    There May Also Be Information Related To Socom 3 as the games are pretty identical,


    This Thread Will Be Updated With More information As It Becomes Available. Information Contributed by Others Will Be Appropriately Credited to them,

    Acronyms
    Code:
    scert = SCE-RT
    MAS = Medius Authentication Server
    MLS = Medius Lobby Server
    MGCL = Medius Game Communication Library
    DNAS_MC = MemoryCard DNAS
    DNAS_Net = Network DNAS
    DME = Game Server
    MUS = Medius Universe Server????
    DBS = Oracle Database Server
    RTSSL = RSA BSAFE SSL-C or SSL-J Library
    Known URLS And Ports For The Online Game

    Code:
     ##These URLS and DOMAINS are no longer in Service and are here for reference purposes
     http://socom3html-prod.svo.pdonline.scea.com:10070/SOCOM3_HTML/content/Content_List.jsp?categoryID=0&subCategoryID=1
    
    https://socom3html-prod.svo.pdonline.scea.com:10079/SOCOM3_HTML/account/Account_Login.jsp
    
    Socom 3 patch -
    http://download-prod.online.scea.com/client-patch/socom3-prod/socom3/v2.3/TRIDENT0.ZDB Socom 3  Patch Download Submit jsp page
    http://socom3.socom3-prod.svo.ps2.online.scea.com:10060/SOCOM3_SVML/download/patchDownload_Submit.jsp Socom 3 Patch Download XML/JSP page (unconfirmed)
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/download/patchDownload_Submit.jsp
    
    Socom CA 1.4 - Patch
    http://download-prod.online.scea.com/client-patch/socom3-prod/socomca/v1.4/TRIDENT0.ZDB
    SCA Patch Download Submit jsp page http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/download/patchDownload_Submit.jsp
    SCA Patch Download XML/JSP page (unconfirmed) http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/download/patchDownload.jsp  
    
    
    More URLS that need to be sorted -- Thanks @ TheDominator~  http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/home.jsp"/>
    https://socomca.socom3-prod.svo.ps2.online.scea.com:10061/SOCOMCA_SVML/account/Account_Login.jsp"/>
    https://socomca.socom3-prod.svo.ps2.online.scea.com:10061/SOCOMCA_SVML/account/Account_Encrypted_Login_Submit.jsp"/>
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/game/Game_Create.jsp?gameMode=%d"/>
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/game/Game_Finish_Submit.jsp"/>
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/game/Game_Create_Player_Submit.jsp?SVOGameID=%d&playerSide=%d"/>
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/ladder/Ladder_GetMatchData.jsp?ladderMatchID=%d"/>
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/ladder/Ladder_Forfeit_Submit.jsp?ladderMatchID=%d&clanID=%d"/>
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/teamtourney/TeamTourney_MatchData.jsp?teamTourID=%d"
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/teamtourney/TeamTourney_ForfeitTeam_Submit.jsp?teamTourTeamID=%d&teamTourBracketID=%d&teamTourID=%d"
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/download/patchDownload.jsp"
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/stats/Stats_CareerRankInfo.jsp?playerList="
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/stats/Stats_GetPlayerStats.jsp?PlayerID=%d"
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/profile/Profile_GetPlayerProfile.jsp?PlayerID=%d"
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/commerce/Commerce_VerifySubmit.jsp"
    https://socomca.socom3-prod.svo.ps2.online.scea.com:10061/SOCOMCA_SVML/commerce/Commerce_PurchaseList.jsp?categoryID=default"
    https://socomca.socom3-prod.svo.ps2.online.scea.com:10061/SOCOMCA_SVML/commerce/Commerce_GameCreatorFileVerification.jsp"
    https://socomca.socom3-prod.svo.ps2.online.scea.com:10061/SOCOMCA_SVML/commerce/Commerce_GameJoinerFileVerification.jsp"
    https://socomca.socom3-prod.svo.ps2.online.scea.com:10061/SOCOMCA_SVML/commerce/Commerce_GameSpectatorFileVerification.jsp"
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/awards/Awards_Insert_Submit.jsp?awardID=%d"/>
    http://socomca.socom3-prod.svo.ps2.online.scea.com:10060/SOCOMCA_SVML/gameevents/GameEvents_EventInfo.jsp?eventID=%d"  
    
    updates.pdonline.scea.com  << Something to do with Socom 2 download-prod.online.scea.com << Patch "Server" Domain
    
    socomca.socom3-prod.svo.ps2.online.scea.com socomca.ps2.online.scea.com << Domain That is Looked up When Connecting to CA Universe AKA MUM
    
     socom3.ps2.online.scea.com << Unconfirmed. Domain that is looked up when looking up the S3 Universe  
    
    socom3-prod.muis.pdonline.scea.com
    ----------------------------------------------------------------------
    --## Known Ports Used by SCA/3 ##--
    80 (unconfirmed)
    443 -DNAS (possibly authentication)
    10060 - Potentially the MAS and/or MLS
    10061 - Unknown
    10071 - Universe Server (Not Confirmed )  
    --## Suspected ports (unconfirmed) ##--
    10079 -- Authentication (logins)
    Known RSA Certificates

    SCERT Root Authority (Note: This is Not a Copyright Violation)
    Click image for larger version  Name:	ApplicationFrameHost_2017-10-05_04-13-52.png Views:	2 Size:	48.6 KB ID:	195149
    Code:
    -----BEGIN CERTIFICATE-----
    MIIDujCCAqKgAwIBAgIUAQAAAAAAAAAAAAAAAAAAAAAAAAAwDQYJKoZIhvcNAQEF
    BQAwgZYxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJDQTESMBAGA1UEBxMJU2FuIERp
    ZWdvMTEwLwYDVQQKEyhTT05ZIENvbXB1dGVyIEVudGVydGFpbm1lbnQgQW1lcmlj
    YSBJbmMuMRQwEgYDVQQLEwtTQ0VSVCBHcm91cDEdMBsGA1UEAxMUU0NFUlQgUm9v
    dCBBdXRob3JpdHkwHhcNMDUwMTAxMTIwMDAwWhcNMzQxMjMxMjM1OTU5WjCBljEL
    MAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRIwEAYDVQQHEwlTYW4gRGllZ28xMTAv
    BgNVBAoTKFNPTlkgQ29tcHV0ZXIgRW50ZXJ0YWlubWVudCBBbWVyaWNhIEluYy4x
    FDASBgNVBAsTC1NDRVJUIEdyb3VwMR0wGwYDVQQDExRTQ0VSVCBSb290IEF1dGhv
    cml0eTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALKc0nZ71kfvzujJ
    UeegRB6ZIK64dwY4HXm6b8q0i7YQWeCPT5uOPoQUC2gLtyUxn2vwhNWv4Zf/Dn/R
    RSz7AbqD2KlcbwryIbQMBx6lOnG80baC0pCRFWCpxYRgrndxXYeotSceGD4t0+xc
    T7qaR4X+z8s2M3zfpLtXiCQ6L9Fqzy+ZV3mEokkO26nG5LicnwSiPGO7yrkHFZGn
    x30oLv7rhTh18iUUgd0Wzp7t+39OkcUo2mJnG9yMEtphA0JW0/LFZTsuIGWy4H6P
    Ll9fvX/+ZZzx2+cTeGym6y7bIxorRAr246payX2v0ZmNyzz/SD4XC/ui0QNzuL0r
    joG48o0CAwEAATANBgkqhkiG9w0BAQUFAAOCAQEAOgopH+NM7SJTvVDS90pS0vKY
    AgMNi0o5wp8VKAvqFusZULN/dz+gXSwfwydzCJteZfTw8Xs+iYIRgGqqAuTaV1xT
    TGDaHYgCw1EUF4chNKtQ8PjFb7nOFJOGd25Aedr4W09g2sTAtz7htsED0703odZM
    FTk9g6Q1wrP/ZWRIYKHSXYMSwssmMpgMeb7v0z7tgqizbppnu9BC/BcaST2yliLO
    rrlrBCNoL34oHSz9Wd9JexamZ4JQkiU8ViIyRfaey9/qGZRdVv/sJkxFv4zqGk/t
    iRmeyTsNzoS+i+Fk3qbajbJcAd3TesHckyWcODi46+jf4VZxqIZLNXRqvJmanw==
    -----END CERTIFICATE-----


    [/CODE]

    Strings Of Interest (the Addresses are Not in Order)
    Code:
    009fef98 AM TOKEN RSA ENCRYPT
    009fefb8 AM TOKEN RSA DECRYPT
    009ff050 "AM_TOKEN_RSA_CRT_ENCRYPT.com.rsa"
    009ff0f0 "AM_TOKEN_DES_CBC_DECRYPT.com.rsa"
    009ff150 "AM_TOKEN_DES_CBC_ENCRYPT.com.rsa"
    009ff1b0 "AM_TOKEN_DES_EDE_CBC_DECRYPT.com.rsa"
    009ff210 "AM_TOKEN_DES_EDE_CBC_ENCRYPT.com.rsa"
    009ff270 "AM_TOKEN_DSA_SIGN.com.rsa"
    009ff2c8 "AM_TOKEN_DSA_VERIFY.com.rsa"
    00a06f50 "PsIIdnas2mc 300A"
    006cf350 "scertGameID"
    006cf360 "static://STATIC_LOGIN"
    006cf600 "SOCOMCA_PATCH"
    006d0030 "download_patch"
    006cf380 "staticCancelDownload"
    006cf3b8 "staticReboot"
    006cf3c8 "staticHome"
    006b3370 "Reboot from patching code"
    006b3390 "CSMDownloadPatch"
    006b33c0 "CSMDownloadPatch"
    006b33e0 "Download Error: %s (%d)"
    006b3de0 "Updates are available for the following maps: \n"
    006b3e20 "We recommend you visit the SOCOM Store and download the updates."
    006c0fa0 "PP.SCUS-97545..SOCOM_CA"  (hdd partition name)
    006c12d0 "HELLO HACKERS" (lulz)
    006c3b40 "HTTPSDecryptBuffer"
    006c3b60 "HTTPSEncryptBuffer"
    006cf078 "downloadPatch"
    006b5000 "NTG_ISCK.ERX"
    006b5020 "DNAS_MC.ERX"
    006b3250 "CDNASMemcardStream"
    006b3280 "CMemCardERXWriteStream" (possibly something to do with using DNAS_MC or the other that is referred to as the DNAS ISCK module to write a stream of data probably something to do with "signing patch files")
    006b4f30 "CMemCardERXReadStream"
    006b5360 "dlgLANBriefingRoom.rdr"
    006b9aa0 "socomca.ps2.online.scea.com"

    Packet Encryption/Decryption (Unsure if Its for Online or LAN or of it covers Both, or if it is even useful, TheDominator is Looking for A solution to Disable the Encrypted Packets on Socom Combined Assault)
    Originally posted by Gtlcpimp View Post

    Here is the Patch 1.4 Combined Assault addresses:
    Code:
    0084a830 = JAL -> Encrypt Packet
    00848d30 = JAL -> Decrypt Packet
    [ATTACH=CONFIG]3725[/ATTACH]
    Last edited by Based_Skid; 10-16-2017, 01:57:38 PM.

  • #2
    XML Shit For those JSP pages that were displayed for the community site on Socom3/CA and the Patch Download,ladder stats,etc

    This information is to figure out how the XML played a role in the Online Server in the Game, The Goal of this information is to eventually figure out all of the staticPages (there is one that seems to reboot the game) and figure how how they interact with a server



    Button Mappings
    Code:
    [LIST][*]SV_PAD (this is probably Incomplete and may not be 100% accurate) But It appears that the Buttons Can be mapped to a link to an external page or file and in some cases a "static://" Location,[*][*][*]"SV_PAD_CIRCLE" == Circle[*]"SV_PAD_SQUARE" == Square[*]"SV_PAD_BACK" === Triangle[*]"SV_PAD_X" === Cross (X Button)[*]"SV_PAD_L2"  === L2[*]"SV_PAD_R2" === R2[*][*]-- Unsure/Unconfirmed--[*]"SV_PADLup"[*]"SV_PADLleft"[*]"SV_PADj"[*]"SV_PADl"[*]"SV_PADn"[*]"SV_PADh"[*]"SV_PADselect"=== Select[/LIST]------------------------------------
    
    
    Example Code:
    "<QUICKLINK name="back" button="SV_PAD_BACK" href="static://staticReboot"/>"
    <QUICKLINK name="circleButton" button="SV_PAD_CIRCLE" href="" />
    <QUICKLINK name="squareButton" button="SV_PAD_SQUARE" href="http://google.com" />
    <QUICKLINK name="triangleButton" button="SV_PAD_BACK" href="" />
    Suspected HTTP Headers and or ResponsesThat are Sent/Recieved At Some Point when its online (Very Incomplete List, There are claims that some people have full memory dumps and some encrypted packet captures for Socom CA, If anyone has these they would be extremely beneficial to A Server Development project in the future)

    Note: I found these in a memory Dump provided to me and there may also be Session/Game State names included in this list, Some of this may not even be Header or Responses at all, Some if it could reference data that should be in a header,Some of It could be For a Querystring as part of a url I Dont know, There is not enough information out there to just google this, So it has to be Reversed.



    Code:
    [U][B]--Suspected Headers and Responses--[/B][/U][LIST][*][*]"X-SVOMac-Login: %s\r\n"[*]"HTTP/1.0 "[*]"Cookie:"[*]"Content-Type: "[*]"HTTP/1.0 "[*]"%s %s HTTP/1.0\r\nHost: %s\r\nConnection: Close\r\n"[*]"X-SVOMac-Login: %s\r\n"[*]"X-SVOMac: %s\r\n"[*]"X-SVOMac: "[/LIST]
    
    [U][B]Suspected Query Strings and Field Names[/B][/U]
    --Socom CA Server Stat Fields--[LIST][*]kills[*]deaths[*]demoWin[*]escortWin[*]suppWin[*]breachWin[*]convoyWin[*]controlWin[*]extracWin[*]homeScore[*]awayScore[*]totalRounds[*]roundsPlayed[*]suicides[*]headshots[*]teamKills[*]survival[*]pistolKill[*]shotgunKill[*]sniperKill[*]assaultKill[*]smgKill[*]grenadeKill[*]vehicleKill[*]roundKills[*]gameKills[*]demoPly[*]escortPly[*]suppPly[*]breachPly[*]convoyPly[*]controlPly[*]extracPly[*]smallWin[*]smallPly[*]numHit[*]numMiss[*]baseDest[*]hostResc[*]vipResc[*]vipKill[/LIST][LIST][*][*]weapon1 to weapon33 also 34 35[/LIST]---- unconfirmed -----[LIST][*]map10[*]map11[*]map12[*]beacons[*]cargoExtrac[*]hostKilled[*]bombPlant[*]bombDefuse[*]cargoDest[*]teamWon[*]knifeKill[*]stealthKill[*]missionTime[*]recWin[*]recScore[*]defuseWin[*]defuseScore[*]destWin[*]destScore[*]secureWin[*]secureScore[*]holdWin[*]holdScore[*]extracScore[*]capWin[*]capScore[*]escortScore[*]timesHit[*]timeSpotted[*]expDep[*]shotsFired[*]respawns[*]restrain[*]revived[*]taskDLCFreespaceCheck[*]userName[/LIST]--End of fields--
    
    [U][B]Examples of what this displays and controls
    These Screen Shots are From a video of the online menus from a video[/B][/U]
    
    
    
    
    
    
    
    [ATTACH=JSON]{"alt":"Click image for larger version \u00a0Name:\tchrome_2017-10-17_22-16-11.png Views:\t1 Size:\t428.4 KB ID:\t195177","data-align":"none","data-attachmentid":"195177","data-size":"full"}[/ATTACH]
    
    [ATTACH=JSON]{"alt":"Click image for larger version \u00a0Name:\tchrome_2017-10-17_22-15-53.png Views:\t1 Size:\t400.0 KB ID:\t195178","data-align":"none","data-attachmentid":"195178","data-size":"full"}[/ATTACH]
    
    [ATTACH=JSON]{"alt":"Click image for larger version \u00a0Name:\tchrome_2017-10-17_22-16-06.png Views:\t1 Size:\t398.4 KB ID:\t195179","data-align":"none","data-attachmentid":"195179","data-size":"full"}[/ATTACH]
    
    [ATTACH=JSON]{"alt":"Click image for larger version \u00a0Name:\tchrome_2017-10-17_22-15-59.png Views:\t1 Size:\t407.7 KB ID:\t195180","data-align":"none","data-attachmentid":"195180","data-size":"full"}[/ATTACH]
    
    
    
    
    
    [B]--End of fields--[/B]
    
    --Socom CA Querystrings--[LIST][*]matchID=[*]gameMode=[*]SVOGameID=[*]eventID=[*]awardID=[*]AccountID  ??[*]characterID ??[*]categoryID=[*]PlayerID=[*]playerList=[*][*]ladderMatchID=[*]clanID=[*][*]teamTourTeamID=[*]teamTourBracketID=[*]teamTourID=[/LIST]
    
    --------------------------------------------
    [U][B]--Suspected States--[/B][/U]
    "STATE_HTTP_IDLE_ON_ENTER --> "
    "STATE_HTTP_IDLE_ON_UPDATE --> "
    "STATE_HTTP_GET_HOST_BY_NAME_ON_ENTER --> "
    "STATE_HTTP_GET_HOST_BY_NAME_ON_UPDATE --> "
    "STATE_HTTP_CONNECT_WAIT_ON_ENTER  --> "
    "STATE_HTTP_CONNECT_WAIT_ON_UPDATE  --> "
    "STATE_HTTP_SEND_ON_ENTER --> "
    "STATE_HTTP_SEND_ON_UPDATE --> "
    "STATE_HTTP_RECV_ON_ENTER --> "
    "STATE_HTTP_RECV_ON_UPDATE --> "
    "STATE_HTTP_NOTSET --> "
    "STATE_HTTP_SECURE_CONNECTING_ON_ENTER --> "
    "STATE_HTTP_SECURE_CONNECTING_ON_UPDATE 1 -->
    ""STATE_HTTP_SECURE_CONNECTING_ON_UPDATE 2 --> "
    "MAX_STATE_HTTP_SECURE --> "
    "STATE_HTTP_IDLE_ON_ENTER \n"
    "STATE_HTTP_IDLE_ON_UPDATE \n"
    [U][B]-------------------------------------------------------------------------[/B][/U]
    Attached Files
    Last edited by Based_Skid; 10-18-2017, 09:33:01 AM.

    Comment


    • #3
      SCE-RT UMD Tech Demo. Lazy Bastard might want to add this to the downloads section for PSP/PS2

      https://anonfile.com/q4s8Kcc8be/SCUS-00001.zip

      This wont Help you Create a Server but it may provide insight on how it communicates with a Medius Server.

      This was obtained from another person and due to the nature of the file i dont think its a good idea to reveal their identity.

      Last edited by Based_Skid; 10-21-2017, 04:52:23 PM.

      Comment

      Working...
      X