This is a read-only snapshot of the ComputerCraft forums, taken in April 2020.
LewisTehMinerz's profile picture

IDSpoofer

Started by LewisTehMinerz, 15 July 2015 - 04:31 PM
LewisTehMinerz #1
Posted 15 July 2015 - 06:31 PM
Hello. I am LewisTehminerz, I'm here to bring you:

IDSpoofer!!!

This replaces os.getComputerID() with return (whatever)!
Even rednet is fooled!

pastebin get NsUVqfs5 idspoofer

PLEASE: THINK ABOUT WHAT YOUR DOING BEFORE YOU USE THIS. THIS IS A TOOL, AND THIS IS NOT TO BE USED IN MALICIOUS MANNER! I AM NOT RESPONSIBLE FOR YOUR ACTIONS WITH THIS TOOL!!! IF THIS IS USED IN MALICIOUS MANNER, PLEASE UNINSTALL THE TOOL FROM THE COMPUTER INVOLVED.

ANOTHER NOTE: I KNOW ABOUT THE ABUSE OF THE TOOL (Say you can pretend your a bank server and the ATM thinks so to because it has a certain ID). IF YOU ARE BUILDING SOMETHING, PLEASE DON'T USE REDNET! THIS TOOL CAN PRETEND THAT A COMPUTER IS SOMETHING IT ISN'T (Like a bank server). MODEM API DOESN'T USE ID'S. IT USES CHANNELS! REDNET IS INSECURE IF SOMEONE HAS THIS TOOL ON A SERVER!


Things that will be fooled by this:

ANYTHING THAT USES "os.getComputerID()"

Please note: Anyone who says: "Hey! I've already made something like this." I DID NOT know about your program.
Edited on 22 July 2015 - 03:06 PM
InDieTasten #2
Posted 15 July 2015 - 06:49 PM
You may want to add, that this should not be used in malicious manner. It's a tool. Not a weapon, although just like a knife, one can abuse it as a weapon.
Cloud Ninja #3
Posted 16 July 2015 - 03:01 AM
So does this spoof rednet messages as well? or does it just return a desired ID when running the ID command? If it's the latter, theres a MUCH easier way of doing this.
flaghacker #4
Posted 16 July 2015 - 09:04 AM
So does this spoof rednet messages as well? or does it just return a desired ID when running the ID command? If it's the latter, theres a MUCH easier way of doing this.

You could just read the code…

Yes, it spoofs rednet, that's the point. What easier way do you have?
Cloud Ninja #5
Posted 16 July 2015 - 05:24 PM
So does this spoof rednet messages as well? or does it just return a desired ID when running the ID command? If it's the latter, theres a MUCH easier way of doing this.

You could just read the code…

Yes, it spoofs rednet, that's the point. What easier way do you have?
I didnt know if it was able to use rednet still or not. I have a way that when you run ID it returns any value you desire, but it breaks rednet (for some reason, i dont know yet)


function os.getComputerID()
return VALUE
end
I also dont want to be THAT guy, but i find it ironic that the instant I release my spoofer, so does someone else :P/> Yours is pretty good though, looks like you put a bit of time in.
Edited on 16 July 2015 - 03:27 PM
biggest yikes #6
Posted 18 July 2015 - 09:03 PM
I didnt know if it was able to use rednet still or not. I have a way that when you run ID it returns any value you desire, but it breaks rednet (for some reason, i dont know yet)

function os.getComputerID()
return VALUE
end

but it breaks rednet
I'm not sure why, but it seems like X = function() works with that while function X() doesn't
looks like you put a bit of time in.
Did you look at the code yet?
Edited on 18 July 2015 - 07:08 PM
Cloud Ninja #7
Posted 18 July 2015 - 09:09 PM
-snip-
looks like you put a bit of time in.
Did you look at the code yet?
shhhhhhh………
biggest yikes #8
Posted 18 July 2015 - 09:14 PM
ANOTHER NOTE: I KNOW ABOUT THE ABUSE OF THE TOOL (Say you can pretend your a bank server and the ATM thinks so to because it has a certain ID). IF YOU ARE BUILDING SOMETHING, PLEASE DON'T USE REDNET! THIS TOOL CAN PRETEND THAT A COMPUTER IS SOMETHING IT ISN'T (Like a bank server). MODEM API DOESN'T USE ID'S. IT USES CHANNELS! REDNET IS INSECURE IF SOMEONE HAS THIS TOOL ON A SERVER!
Rednet isn't just secure because it can be easily spoofed, messages can be read if the user knows what channel it's on (if using rednet.send one could check the channel 65533 for all of them, so rednet.send is in no way secure either)
Edited on 18 July 2015 - 07:17 PM
LewisTehMinerz #9
Posted 19 July 2015 - 12:53 PM
So does this spoof rednet messages as well? or does it just return a desired ID when running the ID command? If it's the latter, theres a MUCH easier way of doing this.

You could just read the code…

Yes, it spoofs rednet, that's the point. What easier way do you have?
I didnt know if it was able to use rednet still or not. I have a way that when you run ID it returns any value you desire, but it breaks rednet (for some reason, i dont know yet)


function os.getComputerID()
return VALUE
end
I also dont want to be THAT guy, but i find it ironic that the instant I release my spoofer, so does someone else :P/> Yours is pretty good though, looks like you put a bit of time in.

Quick note, I didn't know you made a spoofer. ;)/>
Cloud Ninja #10
Posted 19 July 2015 - 03:11 PM
Quick note, I didn't know you made a spoofer. ;)/>
Yup. It essentially does the same thing but doesnt require you to override os.getComputerID(), but it is a bit more involved of an API.
TheOddByte #11
Posted 19 July 2015 - 03:23 PM
Why don't you just change this

print( "ID Program says: " )
os.run( {}, "rom/programs/ID" )
into this

print( "ID has changed to: " .. os.getComputerID() )
Edited on 19 July 2015 - 01:23 PM
biggest yikes #12
Posted 19 July 2015 - 03:26 PM
i find it ironic that the instant I release my spoofer, so does someone else :P/>
How.. is that ironic?
LewisTehMinerz #13
Posted 19 July 2015 - 04:07 PM
Why don't you just change this

print( "ID Program says: " )
os.run( {}, "rom/programs/ID" )
into this

print( "ID has changed to: " .. os.getComputerID() )

I want to prove that it has changed through using the ID program.
flaghacker #14
Posted 19 July 2015 - 04:17 PM
You can replace

os.run( {}, "rom/programs/ID" )
by

shell.run("rom/programs/ID")
or even

shell.run("ID")
SpencerBeige #15
Posted 19 July 2015 - 04:31 PM
so its an ip address masker? isn't this illegal?
TheOddByte #16
Posted 19 July 2015 - 04:45 PM
I want to prove that it has changed through using the ID program.
Well, the ID program does exactly the same

print( "This is computer #" .. os.getComputerID() )

so its an ip address masker? isn't this illegal?
Huh? What gave you this idea? If you read the main post at all you'd understand that this spoofs the rednet id, and has nothing to do with http etc.
Edited on 19 July 2015 - 02:48 PM
Cloud Ninja #17
Posted 19 July 2015 - 09:43 PM
so its an ip address masker? isn't this illegal?
No, the only thing that isnt allowed on the forums (within reason other than harassment, etc) is malicious scripts. This isnt inherently malicious. Like someone said above: A knife is a tool, but in the wrong hands can be a dangerous weapon.
LDDestroier #18
Posted 20 July 2015 - 03:27 PM
Hey, I already made something that does this.
biggest yikes #19
Posted 20 July 2015 - 04:25 PM
Hey, I already made something that does this.
Like you said:
Because no one has done it before (I'm sure [Nah, of course not]),
LewisTehMinerz #20
Posted 22 July 2015 - 05:06 PM
Please note: Anyone who says: "Hey! I've already made something like this." I DID NOT know about your program.