This software is used to assist in the analysis of QQ protocol.
The software can automatically identify and capture QQ data packets and automatically analyze the data packets during QQ logon. Supports packet capture and analysis in qq udp, TCP, and proxy modes.
It also supports reading pcap data format files captured by Wireshark.
Usage:
1. Start qqanalyzer and click "packet capture Settings" to set the nic and filter used for packet capture.
2. After the packet capture settings are confirmed, the start packet capture button in the taskbar is activated. Click Start to capture data packets, open the QQ Software and log on. The software automatically recognizes QQ data packets and filters out unwanted data packets. The captured data packets are displayed on the software interface in real time, including protocols, five-member group information, such as IP addresses and ports.
3. After stopping packet capture, you can analyze the captured data packets. During the QQ logon process, keys are generated and transferred many times. To facilitate analysis, you can mark different keys and use these keys whenever necessary. The latest version of qqanalyzer has
The automatic analysis function is completed. You can right-click the data packet to be analyzed and select automatic analysis.
4. You can use it directly when using a marked key for decryption. The decrypted data is highlighted in red. After automatic analysis is selected,ProgramThe command of the current QQ data packet is automatically analyzed and its ciphertext is decrypted,
Annotate the relevant information directly after the ciphertext.
5. The software can save the current data in the RTF, txt, or pcap format. So that you can proceed with the process later. Supports pcap, txt, and rft File Reading.
6. The software provides special tea encryption and decryption modules, as well as various functions such as string codec, MD5 calculation, QQ hexadecimal, IP hexadecimal, and time hexadecimal conversion.
7. The latest version of qqanalyzer is 1.3.0.0. Please download it for trial.