This website is a read-only preview of RuneLibris. Some features may not work. For more information about the full feature-complete version of this wiki, please visit this link.

(Return to archive index)

Info/Wireshark

From RuneLibris
Jump to: navigation, search

Overview[edit]

Wirehark is a packet dumping tool (website). Although it's use with RuneScape is limited, it can be used to dump string of texts that are transmitted over packets are those aren't encrypted[1]

Extracting text[edit]

Using Wirehark, HxD and Notepad++, it is possible to isolate string of text from a packet dump using the following[2]:

  • Open RuneScape
  • Start a Wirehark capture, ensure it is recording packets
  • Interact with RuneScape to generate the string of text you want to archive.
  • Once done, stop the Wireshark capture
  • Examine the packet and locate one that has been sent by RuneScape
  • Right-click on a packet and create a filter that only includes data sent by the RuneScape IP.
  • Save the data dump as .pcapng
  • It is reccomended that you make a backup of that file.
  • Open the .pcapng file in HxD
  • Go to Search, Replace
  • Go to Integer number tab
  • In the Bitwidth zone, select (U)Int8
  • In Search, inputs 0
  • In Replace, inputs 95
  • Click on "Replace all"
    • This process replace null characters with _
  • Save the file.
  • Open the file in Notepad++
  • Press CTRL + F
  • Go to find tab
  • Check "Regular expression"
  • In Find, inputs _
  • In Replace, inputs \r\n
  • You now have a document where every line equal a string of text

If you are trying to get a list of music unlock hints, mark every line containing This track and delete unmarked lines.

References[edit]

  1. Data directly entered in RuneLibris by manpaint on 2025-04-20
  2. Data directly entered in RuneLibris by manpaint on 2025-04-20