- I have an exe program that connects randomly to one of the 4 addresses 188.39.21.82...83...84...85 out of which only 82 works
- Currently I blocked the remaining addresses using Windows 10 Firewall outbound rules by simply blocking them
- My problem is that the program will keep attempting to connect say 10-20 times (times out after 20 seconds each time) before it finally connects to the IP address ending with 82
- Is there a way that I can write a rule such that the program will get redirected to the IP address ending with 82 regardless of which IP it attempts to connect with?
- Example: the program tries to connect to 188.39.21.85 but gets redirect to 188.39.21.82 I want to add that all the IP addresses actually work but the exe file doesnt work properly on any of them except the one ending with 82
Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top
.82? you could write a small program to attach as a debugger, then breakpoint on the call to connect, and replace the argument. Or you could try to hijack the import ofconnectfrom the socket library. This used to be pretty easy on Windows, but I haven't paid attention since XP.