Bot Destruction

[Deadsolid]

Even if it would work, JM would not ban them. Unless they hire you to do this they will not take your word for it. Sorry.

[Gaigemasta]

Well then, I could send all the packet data with the email "only the important data, can't send it all, take forever" and to gain the best tech. for server sniffing, I'd have to work with Rev6, which I'm not willing to do considering they make a bot, I've already began and Identical copy of a bot, (I did decode but It came out have the script was still had null data) I can't tell you the bot I copying but I dont have any .exe or data files on MY PC or any others that I use, I rely on SS's from a friend over the net. But may I make this bot convicing by allowing it use auto health/mp and exp/sp updates through the gui.

[NuclearSilo]

Just do what u want. It's just a waste of time.
Gratz to have a hacking skill then. Cooperate with the rev6 team, there will be trousands of bots hacked/banned

[Gaigemasta]

but why would rev work with me if im tryin to ban bots when they're making ONE!!! lol

[NuclearSilo]

U can go to a bot site then make a topic "New version of bot with autopot HP/MP..." like every scammer/hacker do

[Gaigemasta]

but the server packet detection sounds a lil safer, Maybe I can ask for their amazing technology ^_^ lol, then run a dedicated server on identifing all packets that dont match legit clients, or I can make a modded client that sends a special packet into the chat that the bots will respond to, and detect them through there

[PR0METHEUS]

I just think instead of Joymax hiring you (or anyone) to write some kind of modified client that you'd have to trick people into using... Joymax should just implement something on their own servers so it doesn't matter what client you use. They could put some kind of code on the server that watches for "suspicious patterns" from each player.

If your character happens to stop at, say, 5 known bot checkpoints in a row (you're following a bot path) then the server can tag you as a "suspicious player". Get too many "suspicious" tags, BAN.

Players would be notified that they are "suspicious" and perhaps they can contact a GM (as if they're actually logged in) to clarify and remove the tag if deemed appropriate.

I mean, we all can tell who is a bot and who is not by how the character operates on the screen. Software on the server should be able to detect most of these patterns as well. However, if they just ban as soon as you fit a pattern, it might be a false ban. So I suggested tagging the character as suspicious first, then ban after enough tags.

[NuclearSilo]

A MD5 checksum isnt better?

[Nixie]

Well, I might be in. But it must be ensured that the account data will be REALLY sent to JM and won't be abused. Because if I'm going to make something, I don't want be one of those who hacked probably thousands of accounts...

Anyway, the idea is nice, but it would be harder to make it...

[PR0METHEUS]

A MD5 checksum isnt better?

Well, MD5 was cracked a while ago, but I don't know if there are any live exploits for it yet - eventually there will be.

Besides, if the SRO client generates an MD5 and sends it to Joymax to check against the server (bad match = ban), the bot software could intercept the MD5 transmission and change it to the right MD5 before sending.

I still think a server-side check would be better. Anything client side could be bypassed by a knowledgeable person. We don't have control over what happens on the server.

[NuclearSilo]

A MD5 checksum isnt better?

Well, MD5 was cracked a while ago, but I don't know if there are any live exploits for it yet - eventually there will be.

Besides, if the SRO client generates an MD5 and sends it to Joymax to check against the server (bad match = ban), the bot software could intercept the MD5 transmission and change it to the right MD5 before sending.

I still think a server-side check would be better. Anything client side could be bypassed by a knowledgeable person. We don't have control over what happens on the server.

U are right about one thing, that is everything client side could be cracked. But tell me, how much time u need to discover there is a MD5 checker secretly implemented to the client after an inspection? 1 day, 1 week?
If it's 1 day, almost all the population of bots are gone. Normally, after an inspection, the bots will rush connect to the server without any caution, without asking any expert like the rev6 team.

[PR0METHEUS]

U are right about one thing, that is everything client side could be cracked. But tell me, how much time u need to discover there is a MD5 checker secretly implemented to the client after an inspection? 1 day, 1 week?
If it's 1 day, almost all the population of bots are gone. Normally, after an inspection, the bots will rush connect to the server without any caution, without asking any expert like the rev6 team.

Well that's true, a lot of botters would just rush to connect to the server after inspection and not realize that there is a secret MD5 check in place - account banned!

That would be a nice way to at least lower the bot population. Although it wouldn't take much for bot creators to monitor their outbound traffic to discover that their system is sending an MD5 hash to Joymax. They'd have a fix out for the next bot version pretty quickly. That fix could be as simple as 'intercept MD5 hash, calculate "correct" hash, and send it on its way.'

Even if Joymax changed the client every week (therefore changing the generated MD5 every week), that wouldn't matter to the bot. The bot software could still generate the real MD5 by having a copy of the unmodified client to generate the MD5 from.

[Krazy18]

LoLz

[devin]

I'm not telling what bot it's going to be on am I no, So yah, but I need to know if Admins will let me, without getting banned. But see, what I'm going to do is

Write a program to descramble the bot code into Python (Since I know it quite well), Python Specializes in Mail Servers from Home etc etc, This post is just going to put fear in botters, they will never know, maybe even plant in bots that cost ^_^, It'll work similar to a Keyloggers Design (COLLECT DATA-Send from Built-In email) but It will be undetectable, It will be the bot basically, just modified so It won't work, and sends info to Jm's email. Hopefully I can mass-email it on website ^_^ give me ideas ppl

ok so your targeting people who play/bot. what about gold bots?!? why dont you try to get rid of those? they are the ones that make the servers crowded. they are the ones that are ruining the econamy of sro.

[NuclearSilo]

LoLz

Damn u, that link gave me like 30 pop-up ads O_o
Luckily i have a pop-up blocker

[Gaigemasta]

hmm but the server packet sniffing sounds good, lol, I'll try with a server check program and mod it from there, so it then can target @ll bots

[PR0METHEUS]

hmm but the server packet sniffing sounds good, lol, I'll try with a server check program and mod it from there, so it then can target @ll bots

I think it would be much easier to develop something like that (server-side traffic analysis) if you actually had access to Joymax's local area network so you could actually sniff their traffic, and have access to things like the structure of their databases and the like.

[Gaigemasta]

well Rev6 does it quite well, so i'll try to find out what they do, but anyone know how bots sends packets through the interception program? I mean we all send packets but they must send different then we do of course

[NuclearSilo]

packets are the same, the difference is just the sender.

Normal: client <---> server
Bot: client <---> bot <---> server (injection, hook)

[Gaigemasta]

kk, we gonna start on this or more ideas?

[NuclearSilo]

Naa, it's useless. U can only fool noobs because they dl bot from an untrusted source. Your bot, when scan with antivirus, it will have a trojan signature anyway.

[piXie_niXie]

for this to work you would have to get in line with the people that actually create the bot and i highly doubt that they would allow you in, let alone be able to integrate this without anyone else noticing,

[piXie_niXie]

I told u, there're only 2 solutions players could do:
1. guard with lightning thief
2. drop gold

But ppl are too lazy

Why dont simply dont make program that will allow people to compete with server trafic? Bots have no probs loging in.
Not sure if bots use built in autoselect next target(that could be blocked by jm possibly if they use and if they want)

really


bots have same problem logging in as normal players without premium, lots of gold bots have auto login but lots of times their image decoder gets it wrong and they get banned for 10 minutes, if you had no DC you would be able to get in about max 30min if you tried hard enough

[strangelove]

I get what you're trying to do, and appreciate the efforts. But this would, in my opinion, cause more issues than it fixes. For one, most 'veteran botters' already have a reliable source from which they get their bot program from. The only people who would most likely fall victim to this would be the new players who are not fully aware of what they're doing yet, or how SRO works. The packet-sniffing for bot clients could work though, if you had a character stand somewhere are check players passing by. Even so, no matter how its worded, it's still a bannable offense for using/distributing a third-party program for SRO. As its been said before, there is no grey area.

[Nixie]

Naa, it's useless. U can only fool noobs because they dl bot from an untrusted source. Your bot, when scan with antivirus, it will have a trojan signature anyway.

Not really... ^^
I've written some familiar applications and no anti virus detected it... was simple memory reading/mail sending. Though I never really used it, but was fun to make a key logger that wasn't detectable...

[NuclearSilo]

Naa, it's useless. U can only fool noobs because they dl bot from an untrusted source. Your bot, when scan with antivirus, it will have a trojan signature anyway.

Not really... ^^
I've written some familiar applications and no anti virus detected it... was simple memory reading/mail sending. Though I never really used it, but was fun to make a key logger that wasn't detectable...

Oh yeah, a new generation of keylogger is born, u can make tons of money by selling it

[William-CL]

Instead of modifying one, why don't you just make you own program from scratch and label it as such? Be a lot simpler. Put in a fork-Bomb at the end that says something like HACKED in it just to freak em out?.

[Nixie]

Ya, would be kinda mad. Doing nothing, but just printing out their ID and password to the screen and telling them that they're hacked... lol.
Imagine what the responses would be like...

[Gaigemasta]

Okay, I finally just got ahold of some Rev6 ppl, and I asked about it, at first they said no, but then I gave them my reasons, so they gave me a application to fill out O_O and I was like WTF!, but I did, So they gonna give me SOME, SOME I SAY NOT ALL of the server script, but they say once I get a release out they must check it and see if it doesnt mess with any of their rights, they said "I can't detect their bot" but they did encourage me to do the goldbot ban list, they also said if I needed any help they can get X-Sin to help me (guessin its one of there mods or so) but I was very suprised they went along, but my plan is to send packet/username data to their email ^_^, it may not ban them, but once they like 20k emails of all the bots, they finally realize they need to stop , anyone wanna help now?

[piXie_niXie]

still pointless