I systematically tested different actions in-game, such as moving in various directions, sending messages, and entering battles. I then wrote a quick python script to grab all incoming network traffic from PRO, decrypt it, and print it out for my viewing pleasure.

This was a bit alarming (my password was being sent to the game's login server with such trivial 'encryption', if it can even be called that), but I was happy to have cracked the code.

For example, 'b' would become 'c' and vice versa. I soon saw that it was a very simple system- they simply XORed each character in a message with '00000001'. To accomplish this I examined the login request packets, which I knew had to contain my username and password. Before I could do anything else, I had to find out how PRO encoded their packets. The hardest part was undoubtably the beginning. I learned a lot about reverse engineering and game networking through this project. This was my attempt at making a bot for the video game Pokemon Revolution Online.

Pokemon revolution online commands