SRL Archive - Research & Development Lounge

Orion, OSBuddy, RSBuddy showing up as a bot client?


Fitta

2014-10-08 07:58:01

Was hoping some Java Guru's could answer this one..

There is a OS-RS "help" client named OSBuddy(former Orion/RSBuddy) using reflection?
However it seems that Jagex can detect the usage of SMART, PowerBot etc.

What separates SMART from OSBuddy in terms of detection?

Clarity

2014-10-08 08:00:20

From: Fitta
Was hoping some Java Guru's could answer this one..

There is a OS-RS "help" client named OSBuddy(former Orion/RSBuddy) using reflection?
However it seems that Jagex can detect the usage of SMART, PowerBot etc.

What separates SMART from OSBuddy in terms of detection?


Official permission and support from the Old School Jagex Team.

Hoodz

2014-10-08 08:58:00

From: Fitta
Was hoping some Java Guru's could answer this one..

There is a OS-RS "help" client named OSBuddy(former Orion/RSBuddy) using reflection?
However it seems that Jagex can detect the usage of SMART, PowerBot etc.

What separates SMART from OSBuddy in terms of detection?


let me find that quote



Fitta

2014-10-08 09:25:14

hmm.. so color bots eh!?

Harrier

2014-10-08 09:48:34

OSBuddy is injection, they whitelist osbuddy according to the devs

Noob King

2014-10-08 14:11:57

Lately I've been using osbuddy for botting. Osbuddy overlays + color bots = dream.

Fitta

2014-10-08 14:35:20

From: Noob King
Lately I've been using osbuddy for botting. Osbuddy overlays + color bots = dream.


Woah, thats smart!

Hoodz

2014-10-08 14:57:01

From: Harrier
OSBuddy is injection, they whitelist osbuddy according to the devs


its reflection

From: Noob King
Lately I've been using osbuddy for botting. Osbuddy overlays + color bots = dream.


ikr, i do the same thing, gains are massive

Wetish

2014-10-08 15:29:17

Can osbuddy display your player's location? Could it be used as an alternative to reflection walking?

Harrier

2014-10-08 16:52:33

From: hoodz
its reflection



ikr, i do the same thing, gains are massive

I'm not going to bother looking through irc logs, but the devs told me it's injection
Edit; http://i.imgur.com/WzZ2Rt5.png

Hoodz

2014-10-08 17:21:58

From: Harrier
I'm not going to bother looking through irc logs, but the devs told me it's injection
Edit; http://i.imgur.com/WzZ2Rt5.png


a mod told me it was reflection, maybe they changed it

Harrier

2014-10-08 17:26:12

From: hoodz
a mod told me it was reflection, maybe they changed it

Well it's the only way they can do the world hopper afaik

Hoodz

2014-10-08 17:33:46

From: Harrier
Well it's the only way they can do the world hopper afaik


i believe i saw it in another bot client already which is reflection

Wyn

2014-10-08 18:44:36

From: hoodz
a mod told me it was reflection, maybe they changed it


It's injection, and always has been.

Fox

2014-10-08 19:14:16

You can just attach an agent to OSBuddy to bot with then done.

Flight

2014-10-08 19:45:22

From: Wetish
Can osbuddy display your player's location? Could it be used as an alternative to reflection walking?


I'd like to know this also, I've never used that client before.

J J

2014-10-08 19:56:45

A couple months ago I was working on a Botwatch system with @Brandon; and it wasn't hard to detect bot clients

Fox

2014-10-08 23:20:16

From: Flight
I'd like to know this also, I've never used that client before.

It probably isn't in it's api but you can either inject the method into the client or attach an agent to do it.

Harrier

2014-10-09 01:35:48

From: Flight
I'd like to know this also, I've never used that client before.

Yes, they have that hook in there
From: Frostie
It probably isn't in it's api but you can either inject the method into the client or attach an agent to do it.

Since people have been doing that, the osbuddy team are going to make it much harder

Fox

2014-10-09 01:40:46

From: Harrier

Since people have been doing that, the osbuddy team are going to make it much harder

Not really much they can do when it comes to attaching an agent to it.

Brandon

2014-10-09 01:41:25

From: Harrier
Yes, they have that hook in there

Since people have been doing that, the osbuddy team are going to make it much harder



It's too bad that they could NEVER make it harder.. Not for C programmers.. Certainly not on Windows..

Steps:
  1. Get JVM.dll handle.
  2. Get function address for JNI_GetCreatedJavaVMs
  3. Call AttachCurrentThreadAsDaemon
  4. Call env->FindClass or System.LoadLibrary or load your jar or w/e you want.. it's your JVM now..
  5. Call whatever methods you want via.. env->GetObjectMethodID

They'd have to literally ship their bot with a .dll file (to try and block yours) and even then, it'd can get hooked just like every other game out there.. The only developers that would get blocked by Java (OSBuddy) developers are other Java developers (not the good ones of course).

There's nothing they can do about it.. You could also just "XBootClassPath" your jar file with an overriden canvas that loads your plugin and then calls the original OSBuddy canvas's methods (or not call them.. whichever you want). Mid-function hooking is another option :l

Harrier

2014-10-09 01:50:27

From: Frostie
Not really much they can do when it comes to attaching an agent to it.

True, but I'm talking about inject the method into it.

From: Brandon
It's too bad that they could NEVER make it harder.. Not for C programmers.. Certainly not on Windows..

Steps:
  1. Get JVM.dll handle.
  2. Get function address for JNI_GetCreatedJavaVMs
  3. Call AttachCurrentThreadAsDaemon
  4. Call env->FindClass or System.LoadLibrary or load your jar or w/e you want.. it's your JVM now..
  5. Call whatever methods you want via.. env->GetObjectMethodID

They'd have to literally ship their bot with a .dll file (to try and block yours) and even then, it'd can get hooked just like every other game out there.. The only developers that would get blocked by Java (OSBuddy) developers are other Java developers (not the good ones of course).

There's nothing they can do about it.. You could also just "XBootClassPath" your jar file with an overriden canvas that loads your plugin and then calls the original OSBuddy canvas's methods (or not call them.. whichever you want). Mid-function hooking is another option :l



Well I only understood about 1% of this :p But at the time I was talking to them about this http://puu.sh/bZfff/ed389ff84f.png (From OSBot) So I assume they'd be more targeting people using java

Brandon

2014-10-09 02:26:20

From: Harrier
True, but I'm talking about inject the method into it.

Well I only understood about 1% of this :p But at the time I was talking to them about this http://puu.sh/bZfff/ed389ff84f.png (From OSBot) So I assume they'd be more targeting people using java


Ahh OSBot.. I thought this was RSBuddy?


Here: http://stackoverflow.com/questions/22441878/attach-to-already-running-jvm

There's only two answers.. both pretty short and very easy to understand. The big guy is wrong though. First guy is right. It's a way of injecting into Java natively and practically hijacking their JVM.

Harrier

2014-10-09 02:34:52

From: Brandon
Ahh OSBot.. I thought this was RSBuddy?


Here: http://stackoverflow.com/questions/22441878/attach-to-already-running-jvm

There's only two answers.. both pretty short and very easy to understand. The big guy is wrong though. First guy is right. It's a way of injecting into Java natively and practically hijacking their JVM.

Well OSBot devs are planning to edit OSBuddy/RSBuddy (the legit client) so you bot in it. So the OSBuddy devs want to stop it

Fox

2014-10-09 02:35:22

From: Brandon
Ahh OSBot.. I thought this was RSBuddy?


Here: http://stackoverflow.com/questions/22441878/attach-to-already-running-jvm

There's only two answers.. both pretty short and very easy to understand. The big guy is wrong though. First guy is right. It's a way of injecting into Java natively and practically hijacking their JVM.

I attached an Agent to dump scripts from powerbot's ClassLoader too bad Paris fixed it by writing his own and obfuscated the class name. I still do have the code to attach an agent to RSBuddy(OSBuddy) using c++ and java.

Fox

2014-10-09 03:47:04

Give me a few weeks to update my updater and stuff i'll put an agent bot on github and share it with you guys.

Noob King

2014-10-10 10:29:47

From: hoodz
a mod told me it was reflection, maybe they changed it

Just thought I'd post this. Someone was talking about it with Jacmob the other day

[1:36:29 PM] (Channel) Jacmob: it's officially supported at the moment so it doesnt have to 'inject', it just references an officially provided api
[1:37:23 PM] (Channel) Jacmob: but it works like injection would

bonsai

2014-10-10 16:08:48

From: Noob King
it just references an officially provided api


hmmm

Noob King

2014-10-11 10:23:15

From: bonsai
hmmm


hmm?

Wetish

2014-10-11 12:06:21

From: noob king
hmm?

hmmmm!

Harrier

2014-10-11 14:04:02

From: Wetish
hmmmm!

Potato!

Noob King

2014-10-11 15:04:47

From: Harrier
Potato!


That's not how this works.
That's not how any of this works.

Harrier

2014-10-11 16:02:06

From: Noob King
That's not how this works.
That's not how any of this works.

I'm sorry, please teach me your ways. Master.

N1234

2014-11-17 15:42:09

long debated question, all i know is it feels safer to use osbuddy from my experiences :P

Cheddy

2014-11-18 11:40:36

From: Harrier
Well OSBot devs are planning to edit OSBuddy/RSBuddy (the legit client) so you bot in it. So the OSBuddy devs want to stop it


OSBot devs are slow ;) I've already done this haha :D

Harrier

2014-11-18 11:53:18

From: Cheddy
OSBot devs are slow ;) I've already done this haha :D

Well… They are offline for months at a time ;)

KeepBotting

2014-11-18 17:48:15

From: Noob King
Lately I've been using osbuddy for botting. Osbuddy overlays + color bots = dream.
I mentioned this the other day. I think it's something we should seriously look into.

From: Brandon
You could also just "XBootClassPath" your jar file with an overriden canvas that loads your plugin and then calls the original OSBuddy canvas's methods (or not call them.. whichever you want). Mid-function hooking is another option :l
I remember someone saying something somewhere about something. The gist was that xboot is horrible and easily detected. True or no?

Fitta

2014-11-19 07:47:38

If someone can get me the font that OsBuddy uses I'll be more than happy to create a include.

Harrier

2014-11-22 16:40:00

From: Fitta
If someone can get me the font that OsBuddy uses I'll be more than happy to create a include.

They use at least 8+ different fonts x-x

Fox

2014-12-10 22:48:23

From: Noob King
Lately I've been using osbuddy for botting. Osbuddy overlays + color bots = dream.


or attaching an agent to pretty much automate it without the development of color is so much better.