Lately, i’ve been tired of hexing others client. Too much limitation on that (though I LOVE the challenge from that). It’ll be worst damn difficult if the program used EXE Compressor(T_T couldnt have my hand on those resource pointer). Afterall, hexing is just to crack the software, not to fully modified the software.. Then, bye bye UltraEdit.. 
Thanks to the “limitation”, I’m beginning to code my own chat client. Why do i have to create a new one when there are lot of free yahoo chat client out there?? The answer is simple, satisfaction.
Introducing, the new birth of chat client (not completed yet though…). For me, ability of ID polygamy in yahoo chat client is important. Therefore, this client I’ve developed able to do that in an organized way (not with lot of instances!!!).
Here is what I’ve done so far…
Multiple chat view with YConnect!
So, what’s the fuss!??
Well, after all, i have to say, program the chat client isn’t really an easy task. Before I could comment on others chat client, “lack of this, lack of that!“, “doesn’t feel like using ym“,”client is too bulky! not user friendly!“, “client is just a social tool, not a hacker’s tool!“…for now, I’ll juz keep silence (hehehe)..
Chat client I love???
Actually, I like YSupra than others. First, the user interface is simple and up-to-date (not like those Yahelite, Yazak, I mean those bulky win2000 style, uweek). Second, because i can log on with it (i’m using sialcom broadband, got some problem with other client. Up to now, i have only 2 yahoo chat client(except my own YConnect) able to logged in from this damned connection. It’s Yahoo Messenger Local and Y!Supra.. After developing this client, I realized the cause of that problem.
1) When logging in, client will get token/crumb and exchange packet to login.yahoo.com which might not be resolve by sialcom broadband.
Resolution : Either both client connect directly using ip, and set SSL error policy to always true (since different hostname revoke the certificate.
2) yahoo 1236 error?! : In my case it is caused by the use of HTTP1.1 when sending packet. I’ve used this, and after few hours checking up the code, I’ve change the protocol to HTTP1.0 and voila, I’m able to logged on. actually, this code define somewhat of user account lock or of the sort. I’m not sure actually, but adding the case for this isn’t that painful ^_^
So, I’ve ended up with this (I’m using System.Net.HttpWebRequest here)
ServicePointManager.ServerCertificateValidationCallback = New RemoteCertificateValidationCallback(AddressOf ValidateServerCertificate)
YNet1 = HttpWebRequest.Create("https://" & HostName & "/config/pwtoken_get?src=ymsgr&ts=&login=" & YahooID & "&passwd=" & Password & "&chal=" & YmChallenge)
YNet1.ProtocolVersion = HttpVersion.Version10 ' <- use Version10
YNet1.AllowAutoRedirect = True
YMSG16??? What’s new? What’s not so new?
YMSG16 is the protocol used in YM9 and most of other client out there using it (for NO5, hmmm, i have no comment on that). It’s damn difficult to log in but the packet defined the structure of the data in which i think is better. The example shown here is in VB.Net(2008) syntax. However, i could rewrite the code in VB6, C# and Java(not confident how to handle certificate though, but I gez I could try, hehe..)
Logging in to YMSG16:
This is the class i used to log in (THIS IS ORIGINAL, NOT RIPPED OFF FROM OTHERS, CAUSE I HATE WHEN PEOPLE ACCUSE ME FOR THAT!)
Option Strict Off
Option Explicit On
Imports System.Text
Imports System.Security.Cryptography
Imports System.Runtime.InteropServices
Imports System.Net
Imports System.IO
Imports System.Security.Permissions
Imports System.Net.Security
Imports System.Security.Cryptography.X509Certificates
Friend Class Login
Public Delegate Function ServerCertificateValidationCallback( _
ByVal sender As Object, _
ByVal certificate As X509Certificate, _
ByVal chain As X509Chain, _
ByVal sslPolicyErrors As SslPolicyErrors) As Boolean
Public Function ValidateServerCertificate(ByVal sender As Object, _
ByVal cert As X509Certificate, _
ByVal chain As X509Chain, _
ByVal ssl As SslPolicyErrors) As Boolean
Return True
End Function
Public oEncoderAnsi As System.Text.Encoding
Public Event InvalidLogin()
Public Event RecvToken(ByVal Y_CookiePart As String, ByVal T_CookiePart As String, ByVal LoginHash As String)
Public Event SckError(ByVal ErrorNum As Integer, ByVal ErrorDesc As String)
Private WithEvents YNet1 As System.Net.HttpWebRequest
Private WithEvents YNet2 As System.Net.HttpWebRequest
Private SecureHost, HttpBuffer, YmsgChallenge As String
Public Function getResponse(ByVal request As HttpWebRequest)
Dim myHttpWebResponse As HttpWebResponse = CType(request.GetResponse(), HttpWebResponse)
Dim receiveStream As Stream = myHttpWebResponse.GetResponseStream()
Dim encode As Encoding = System.Text.Encoding.GetEncoding(950)
Dim readStream As New StreamReader(receiveStream, encode)
Return readStream.ReadToEnd()
End Function
Public Sub GetToken(ByRef YahooID As String, ByRef Password As String, ByRef YmChallenge As String, Optional ByRef HostName As String = "66.163.169.186")
On Error Resume Next
Main.lbStatMsg.Text = "Sending Challenge"
YmsgChallenge = YmChallenge
ServicePointManager.ServerCertificateValidationCallback = New RemoteCertificateValidationCallback(AddressOf ValidateServerCertificate)
YNet1 = HttpWebRequest.Create("https://" & HostName & "/config/pwtoken_get?src=ymsgr&ts=&login=" & YahooID & "&passwd=" & Password & "&chal=" & YmChallenge)
YNet1.ProtocolVersion = HttpVersion.Version10
YNet1.AllowAutoRedirect = True
YNet1.Method = "GET"
con1_2(getResponse(YNet1))
End Sub
Private Sub con1_2(ByRef data As String)
Main.lbStatMsg.Text = "Getting crumbs"
On Error Resume Next
Dim SplDat1() As String
Dim SplDat2() As String
If InStr(1, data, "ymsgr=") Then
SplDat1 = Split(data, "ymsgr=")
SplDat2 = Split(SplDat1(1), vbCrLf)
ServicePointManager.ServerCertificateValidationCallback = New RemoteCertificateValidationCallback(AddressOf ValidateServerCertificate)
YNet2 = HttpWebRequest.Create("https://login.yahoo.com/config/pwtoken_login?src=ymsgr&ts=&token=" & SplDat2(0))
YNet2.ProtocolVersion = HttpVersion.Version11
YNet2.AllowAutoRedirect = True
YNet2.Method = "GET"
con2(getResponse(YNet2))
Else
RaiseEvent InvalidLogin()
End If
End Sub
Public Sub con2(ByRef data As String)
Main.lbStatMsg.Text = "Got crumb"
On Error Resume Next
Dim SplDat1() As String
Dim SplDat2() As String
Dim YCookie, TCookie, YCrumb As String
If InStr(1, data, "crumb=") > -1 Then
SplDat1 = Split(data, "Y=")
SplDat2 = Split(SplDat1(1), ";")
YCookie = SplDat2(0) & "; path=/; domain=.yahoo.com"
SplDat1 = Split(data, "T=")
SplDat2 = Split(SplDat1(1), ";")
TCookie = SplDat2(0) & "; path=/; domain=.yahoo.com"
SplDat1 = Split(data, "crumb=")
SplDat2 = Split(SplDat1(1), vbCrLf)
YCrumb = SplDat2(0)
Dim crypted As String = ProcessAuth16(YCrumb, YmsgChallenge)
Main.lbStatMsg.Text = "Logged In!"
RaiseEvent RecvToken(YCookie, TCookie, crypted)
End If
End Sub
Public Function ProcessAuth16(ByVal Crumb As String, ByVal Challenge As String) As String
Dim Crypt As String = String.Join(String.Empty, New String() {Crumb, Challenge})
Dim Hash As Byte() = HashAlgorithm.Create("MD5").ComputeHash(Encoding.[Default].GetBytes(Crypt))
Dim Auth As String = Convert.ToBase64String(Hash).Replace("+", ".").Replace("/", "_").Replace("=", "-")
Return Auth.ToString
End Function
End Class
This one is pretty simple and not too bloated like other example on the web. But first, I wanna thanks YCoderCookBook for his YTainer sourcecode reference, carbonized.co.uk for his explaination on YMSG16 login packets.
As you can see from the code, I’m using System.Net.WebHttpRequest in which is networking class in .Net framework. Using INet (I bet many of client out there using this) is too oldschool. WinHttp is another alternative, but I want to rely only on .Net and not COM.
So, what’s with YConnect?!!
As you can see, YConnect use a fairly simple user-interface (thanks to dubee of YSupra for the inspiration) without losing most of the option. For id polygamy, it’ll just run in one instance of the program, with tab in which i think is quite great. I always think, it would be great if YSupra has buddylist much like Yahoo Messenger, so, I’ve build one. However, I’m using Treeview with OwnerDraw, I have to think if there’s a way to retrieve the user avatar asyncronously since retrieve avatar for every paint update is CPU-killing. Maybe I’ll setUp a hashMap for user avatar later.
Here’s the code in tvBuddyList_DrawMode()
If (e.State And TreeNodeStates.Focused) <> 0 Then
Dim focusBounds As Rectangle = NodeBounds(e.Node)
focusBounds.Size = New Size(focusBounds.Width, focusBounds.Height)
e.Graphics.FillRectangle(Brushes.LightGray, 0, focusBounds.Y, tvBuddyList.Width, 36)
End If
e.Graphics.SmoothingMode = Drawing2D.SmoothingMode.AntiAlias
Dim data As String = e.Node.Tag
Dim sep As Char = Convert.ToChar(860)
Dim type As String = data.Split(sep)(0)
Dim text As String
Dim status As Boolean
Dim statusmsg As String
Dim bound As Rectangle = NodeBounds(e.Node)
If type = "group" Then
Dim fx As New System.Drawing.Font("Verdana", 8.0!, System.Drawing.FontStyle.Bold, System.Drawing.GraphicsUnit.Point, CType(0, Byte))
text = data.Split(sep)(1)
Dim pt() As Point = {New Point(bound.X + 6, bound.Y + 15), New Point(bound.X + 6, bound.Y + 23), New Point(bound.X + 15, bound.Y + 19)}
e.Graphics.FillPolygon(Brushes.Black, pt, Drawing2D.FillMode.Winding)
e.Graphics.DrawString(text, fx, Brushes.DarkViolet, bound.X + 20, bound.Y + 13)
ElseIf type = "buddy" Then
' Debug.Print("drawing..")
text = data.Split(sep)(1)
status = (data.Split(sep)(2) = "online")
statusmsg = data.Split(sep)(3)
Dim fStyle As FontStyle = IIf(status, System.Drawing.FontStyle.Bold, System.Drawing.FontStyle.Italic)
Dim fx As New System.Drawing.Font("Verdana", 8.0!, fStyle, System.Drawing.GraphicsUnit.Point, CType(0, Byte))
Dim fx1 As New System.Drawing.Font("Verdana", 7.0!, System.Drawing.FontStyle.Regular, System.Drawing.GraphicsUnit.Point, CType(0, Byte))
Dim o9color As Brush = IIf(status, Brushes.Orange, Brushes.LightGray)
Dim o9color2 As Pen = IIf(status, Pens.DarkOrange, Pens.Gray)
' Dim ava As New PictureBox
' ava.LoadAsync("http://img.msg.yahoo.com/avatar.php?format=jpg&yids=" & e.Node.Text.Split(sep)(0))
' Draw avatar from HashTable of <string, Image>
e.Graphics.DrawImage(avaHashMap(e.Node.Text.Split(sep)(0)), bound.X + 5, bound.Y + 5, 30, 30)
e.Graphics.FillEllipse(o9color, New Rectangle(bound.X + 40, bound.Y + 6, 8, 8))
e.Graphics.DrawEllipse(o9color2, New Rectangle(bound.X + 40, bound.Y + 6, 8, 8))
e.Graphics.DrawString(text, fx, Brushes.DarkSlateGray, bound.X + 54, bound.Y + 3)
e.Graphics.DrawString(statusmsg, fx1, Brushes.Gray, bound.X + 40, bound.Y + 17)
End If
Well I’ve got YM-styled buddy list soo far. I’ll just have to build the treeNode inside the tvBuddyList, with buddy tree tag set to
type["group"|"buddy"] & Char(860) & buddyname & Char(860) & status["online"|"offline"] & Char(860) & statusmessage
everytime the buddy status change, just change the key for the treeNode corresponding to the buddy.
Problem I faced so far
I have problem with captcha image. Actually, I wanna make the captcha image to appear into chat browser. Only captcha Image. Like those on YSupra. But maybe lack of knowledge, I’m not able to do that. Everytime I try to retrieve the captcha image from the ImgUrl parameter given when signing in to room, it got invalidated. Hurghhhh!!
No security feature in this client yet. I dunno if this client is easily booted, haven’t test for that. But given the nature of boot is by the inability of the client to process massive packet, maybe I’ll have workaround on that later.
Duplicate PM msg problem. I dunno if this problem is common or not, but I have found post regarding this issue. Chat server will send 2 packet, technically. But maybe I’ll resolve this issue later (juz few conditional block anyway).
Only using YMSG16 protocol. Well I think I’ll just leave it at it. YMSG14 has been deprecated and for YMSG15, i guess there’s not much difference from YMSG16 except for login process (I’ll added later). For YMSG17, I’ll produce the code when it is widely used later (i gez some folk in YSupra has a workaround on this) ^_^
Conclusion
I’ll happily give out the full sourcecode, ONLY if you wanna help me on problems I’ve faced. I have the same project for VB.Net (but using YMSG14 on this time, later I’ll add support for YMSG16)
The database itself is only consist of 31 tables. The brand “NetFolder” is reserved, thus you are encouraged to put your own branding if you plan to derive another fork of it.
