[bf1942] bf2web.gamespy.com

[Jorrit Schippers]

 I forgot to patch that part of the code myself :) I'm using the
"searchforplayers.aspx" now for the initial signup.

I've found the following HTTP requests made by the Battlefield 2 client
from the moment I start it.

/ASP/getplayerinfo.aspx?pid=43511689&info=per*,cmb*,twsc,cpcp,cacp,dfcp,
kila,heal,rviv,rsup,rpar,tgte,dkas,dsab,cdsc,rank,cmsc,kick,kill,deth,su
ic,ospm,klpm,klpr,dtpr,bksk,wdsk,bbrs,tcdr,ban,dtpm,lbtl,osaa,vrk,tsql,t
sqm,tlwf,mvks,vmks,mvn*,vmr*,fkit,fmap,fveh,fwea,wtm-,wkl-,wdt-,wac-,wkd
-,vtm-,vkl-,vdt-,vkd-,vkr-,atm-,awn-,alo-,abr-,ktm-,kkl-,kdt-,kkd-

/ASP/getplayerinfo.aspx?pid=43511689&info=ktm-,vtm-,wtm-,mtm-&kit=3&vehi
cle=0&weapon=0&map=5

/ASP/getplayerinfo.aspx?pid=43511689&info=mtm-,mwn-,mls-

/ASP/getunlocksinfo.aspx?pid=43511689

/ASP/getrankinfo.aspx?pid=43511689

/ASP/getbackendinfo.aspx

NOTICE!
This request returns all possible unlocks. I see now that there are more
unlocks than previously! The following list of unlocks is now returned,
I don't think anyone knows this yet:
D.11.0.Chsht_protecta.Protecta shotgun with slugs
D.22.1.Usrif_g3a3.H&K G3
D.33.2.USSHT_Jackhammer.Jackhammer shotgun
D.44.3.Usrif_sa80.SA-80
D.55.4.Usrif_g36c.G36C
D.66.5.RULMG_PKM.PKM
D.77.6.USSNI_M95_Barret.Barret M82A2 (.50 cal rifle)
(from here it is new)
D.88.1.sasrif_fn2000.FN2000
D.99.2.sasrif_mp7.MP-7
D.111.3.sasrif_g36e.G36E
D.222.4.usrif_fnscarl.FN SCAR - L
D.333.5.sasrif_mg36.MG36

Very interesting indeed ....


/ASP/getawardsinfo.aspx?pid=43511689

(doing a player search:)
/ASP/searchforplayers.aspx?nick=Spleasure&where=a&sort=a

Thats a couple of queries which are produced by BF2

Jorrit

> -----Oorspronkelijk bericht-----
> Van: Joe [mailto:sechon at blackmud.com] 
> Verzonden: donderdag 10 november 2005 10:08
> Aan: bf1942 at icculus.org
> Onderwerp: RE: [bf1942] bf2web.gamespy.com
> 
> I can't pull my stats from it -- "eggs" can't be found in the 
> stats database? Anywho, yeah it will just take a bit more 
> parsing work to fix the stats sigs @ my site..I hacked up the 
> e107 plugin to make sigs for our members and server 
> regs..Couldn't find much else to use and haven't had any time 
> to write something from scratch. It won't be too bad, though, 
> now that I know what's going on...heh. Selectbf was a lot 
> more fun than playing whack-a-mole with gamespy.. =\
> 
> Valve's up to what, 20gb of pipe now, in prep for dod2? 
> EA/gamespy can't pony up enough pipe to serve some basic text 
> hits? Even hourly cached, or throttled somehow? Blah...
> 
> -----Original Message-----
> From: Jorrit Schippers [mailto:jorrit at gameparty.net]
> Sent: Thursday, November 10, 2005 2:58 AM
> To: bf1942 at icculus.org
> Subject: RE: [bf1942] bf2web.gamespy.com
> 
> 
> Mine still work:
> http://bf2stats.ncode.nl/
> The password is "blaat"
> 
> (You even get avatars :))
> 
> Jorrit
> 
> > -----Oorspronkelijk bericht-----
> > Van: Joe [mailto:sechon at blackmud.com]
> > Verzonden: donderdag 10 november 2005 9:55
> > Aan: bf1942 at icculus.org
> > Onderwerp: RE: [bf1942] bf2web.gamespy.com
> >
> > Ah yeah and I had a typo in my spoofed agent in testing..Figuring 
> > things out right now. What a PITA for stats sigs. :(
> >
> > -----Original Message-----
> > From: Jorrit Schippers [mailto:jorrit at gameparty.net]
> > Sent: Thursday, November 10, 2005 2:47 AM
> > To: bf1942 at icculus.org
> > Subject: RE: [bf1942] bf2web.gamespy.com
> >
> >
> > Have you tried the complete URL I posted? You cannot change 
> the query 
> > string, because the getplayerinfo.aspx script accepts just a few 
> > querystrings now, namely the ones that BF2 uses too. You 
> can't change 
> > the querystrings to just the fields you need anymore.
> >
> > Jorrit
> >
> > > -----Oorspronkelijk bericht-----
> > > Van: Joe [mailto:sechon at blackmud.com]
> > > Verzonden: donderdag 10 november 2005 9:36
> > > Aan: bf1942 at icculus.org
> > > Onderwerp: RE: [bf1942] bf2web.gamespy.com
> > >
> > > Ok, but I can't access it from many remote sites that wouldn't be 
> > > banned for any reason at all..
> > >
> > > Agent is being reported as "GameSpyHTTP/1.0", and I've
> > double checked
> > > that from my php code AND the agents reported by clients
> > requesting my
> > > clan's server logo.
> > >
> > > For example, I was trying this link:
> > > http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=43401461&
> > info=heal
> > >
> > > I guess I'll start sniffing..This just seems too odd though
> > thus far.
> > >
> > > -----Original Message-----
> > > From: Jorrit Schippers [mailto:jorrit at gameparty.net]
> > > Sent: Wednesday, November 09, 2005 3:59 PM
> > > To: bf1942 at icculus.org
> > > Subject: RE: [bf1942] bf2web.gamespy.com
> > >
> > >
> > > As far as I can see they have filtered the querystrings and
> > allow only
> > > those query strings which are exactly requested by 
> Battlefield. So 
> > > just a couple of the many possible querystrings now work.
> > For instance
> > > the following still works, because BF2.exe uses it:
> > > http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=PLAYERID&
> > info=per*,
> > > cmb*,twsc,cpcp,cacp,dfcp,kila,heal,rviv,rsup,rpar,tgte,dkas,ds
> > > ab,cdsc,ra
> > > nk,cmsc,kick,kill,deth,suic,ospm,klpm,klpr,dtpr,bksk,wdsk,bbrs
> > > ,tcdr,ban,
> > > dtpm,lbtl,osaa,vrk,tsql,tsqm,tlwf,mvks,vmks,mvn*,vmr*,fkit,fma
> > > p,fveh,fwe
> > > a,wtm-,wkl-,wdt-,wac-,wkd-,vtm-,vkl-,vdt-,vkd-,vkr-,atm-,awn-,
> > > alo-,abr-,
> > > ktm-,kkl-,kdt-,kkd-
> > >
> > > The following used to work, but doesn't anymore, because BF2.exe 
> > > doesn't use it anywhere:
> > > http://bf2web.gamespy.com/ASP/getplayerinfo.aspx?pid=PLAYERID
> > >
> > > The golden rule stays: use ethereal to read the 
> communications and 
> > > immitate those communications exactly.
> > >
> > > And: mind the User-Agent, should be GamespyHTTP/1.0 or
> > something like
> > > that. And some ips, like one of mine, are banned.
> > >
> > > Jorrit Schippers
> > >
> > >
> >
> >
> 
>