PROCUREMENT : The Ultimate Path Of Exile Companion Tool!

"

deathbybinary wrote:

I had been looking through the source code of this application after having some initial scepticism. Had four .NET developers looking over the source along with me all day yesterday.

I can provide more information regarding the source if anyone is interested however I can confirm that there is no saving (or logging) of your username or password and the only site accessed is https://www.pathofexile.com

Initial testing in a VM using Procurement v0.0.3

Spoiler

Filename: Procurement.exe
MD5: ea53f6f69f1b3fc1ef7d97aab78c72de

Attempts HTTPS connection to 173.192.44.22 (legit)

URLs used:
loginURL = @"https://www.pathofexile.com/login";
characterURL = @"http://www.pathofexile.com/character-window/get-characters";
stashURL = @"http://www.pathofexile.com/character-window/get-stash-items?league={0}&tabs=1&tabIndex={1}";
inventoryURL = @"http://www.pathofexile.com/character-window/get-items?character={0}";

Also, the code uses the SecureString class which provides some protection against runtime attacks targeting strings in memory (utilises the Data Protection API).

Spoiler

(Using VMware Workstation, ProcMon, TCPview, WireShark, VS 2012 Premium, IDA Pro and ollyDbg) for those that care)

NINJA EDIT: I can confirm that v0.0.5 has not changed the authentication method(s)

"

deathbybinary wrote:

I had been looking through the source code of this application after having some initial scepticism. Had four .NET developers looking over the source along with me all day yesterday.

I can provide more information regarding the source if anyone is interested however I can confirm that there is no saving (or logging) of your username or password and the only site accessed is https://www.pathofexile.com

"

xTANKx wrote:

Seems like a really helpful program. I'll wait a few days and see if people nerdier than I am find anything questionable in it before I try it. But I'm looking forward to it checking out and getting to use it maybe in a weeks time.

"

Aurell wrote:

Hey there! Helban here from reddit. Posting the unknowns:

"

Aurell wrote:

Hey there! Helban here from reddit. Posting the unknowns:

Unknown

Unknown