SRL Archive - News and General

Decompiled RS Client


turbobk

2008-10-03 02:47:03

Now im not very good with this stuff,

But when I was looking through the decompiled RuneScape client (client.jad), I noticed these:


public final RSString getCurrentPassword()
{
return mk.d;
}


public final RSString getCurrentUsername()
{
return mk.j;
}


Wouldn't it be possible for RSBOT or IBot or maybe even Reflection to steal a players Username and Password using this?

Since it has the hooks and all? Is this bad at all, should I be worried? :confused:

EDIT: And this is the latest version of the client…

Thanks,
TurboBk. :)

kingarabian

2008-10-03 03:42:13

Yeah they can. Thats why search all .class files for suspicious crap. But the decompiled rs client is for jagex's use…

If they want the hacking shit, its gonna have to be server sided (impossible to get).

turbobk

2008-10-03 04:14:51

Oh I see.
Yeah there are alot of things we can get from the client some that we dont even use yet.

Ill list them:

  • getNPCIndexArray
  • getNPCArray
  • getNPCCount
  • getPlayerIndexArray
  • getPlayerArray
  • getPlayerCount
  • getBaseX
  • getBaseY
  • getMyPlayer
  • getPublicChatMode
  • getLoopCycle
  • getSelfInteracting
  • getGroundIntArray
  • getGroundByteArray
  • getPlane
  • getCamPosX
  • getCamPosY
  • getCamPosZ
  • getCameraCurveY
  • getCameraCurveX
  • getValidInterfaceArray
  • getCurrentPassword
  • getCurrentUsername
  • getIdleTime
  • getKeyboard
  • getMouse
  • getCallback
  • setCallback
  • getInterfaceCache
  • getMouseX
  • getMouseY
  • getMousePressX
  • getMousePressY
  • getMousePressButton
  • getMousePressLastButton
  • getMousePressTime
  • getLoginIndex
  • getSettingArray
  • getGroundArray
  • getSkillExperiencesMax
  • getSkillLevelMaxes
  • getSkillLevels
  • getSkillExperiences
  • getMinimapInt3
  • getCURVECOS
  • getCURVESIN
  • getMinimapInt2
  • getMinimapInt1
  • getNodeListArray
  • getChatMessages
  • getChatNames
  • getChatTypes
  • getMenuOptionsCount
  • isMenuOpen
  • getMenuX
  • getMenuY
  • getMenuOptions
  • getMenuActions
  • getActionID
  • getActionCmd1
  • getActionCmd2
  • getActionCmd3
  • getSignlink
  • isFlagged
  • isSpellSelected
  • getItemSelected
  • getSelectedItemName
  • spellUsableOn
  • getSelectedSpellName
  • getItemDefMRUNodes
  • isMembers
  • getObjectDefMRUNodes
  • getMinimapSprite
  • getMapDots
  • getFriendListAsLongs
  • getFriendNodeIDs
  • getFriendCount
  • getDestX
  • getDestY
  • getMapMarkers
  • getCost
  • getVia
  • getGroundDataArray


Some of them are very Interesting, and can be VERY useful if they get added.

Would someone mind telling me what 'getSelfInteracting' does?
Does that mean, It can tell if your in a trade or in a Random Event?

mastaraymond

2008-10-03 04:16:46

There are several reflection includes around, if I'm not mistaken. Take a look at those and add your own functions if you like to.

StrikerX

2008-10-03 04:55:54

Mind telling us how you decompiled the client? im a noob at this sort of thing.

Method

2008-10-03 09:31:37

That's not Jagex's client.class file that you decompiled, it's RSBot's. They modify the client and place accessor methods in there to get the right hooks. Our reflection has most of the hooks RSBot does, but doesn't use those accessor methods to retrieve the values.

It appears that you've missed our very own reflection include, which happens to utilize a ton of those. Check it out in the reflection forums.

turbobk

2008-10-03 09:37:06

From: Method
That's not Jagex's client.class file that you decompiled, it's RSBot's. They modify the client and place accessor methods in there to get the right hooks. Our reflection has most of the hooks RSBot does, but doesn't use those accessor methods to retrieve the values.

It appears that you've missed our very own reflection include, which happens to utilize a ton of those. Check it out in the reflection forums.


No I didn't miss anything, I know that Reflection already uses alot of those, and yes it was the RSBot RuneScape client, but isn't that the same? :confused:

But could we add anything else from that list like RSBot does, RSBot knows where NPC's are even if they are not on the screen, and it knows the option menu for it and stuff. :eek:


Thanks,
TurboBk. :)

Method

2008-10-03 10:01:59

No, it's not the same client. Jagex doesn't have any accessor methods that tell you where certain hooks are in their client. RSBot also adds quite a few interfaces and methods to other classes to make them easily accessible.

We already have NPC finding, and menu finding wouldn't really be hard to add either, it just hasn't been done yet.

turbobk

2008-10-03 10:20:06

Ok, thanks for the Information.

Appreciate it. :D

sk8terbitu

2008-10-03 21:44:03

usernames passwords and other stuff is stored in a mysql data bace and if jagex was smart it would not be online it would be local host

turbobk

2008-10-06 02:25:06

No Im talking about a Script getting the information and sending it to a server..
Im no expert, but I wouldn't think it would be that hard to store the users Username and Password and send them without anyone even really knowing :o

paddiekiller

2008-10-06 02:31:46

nah it doesnt

Metagen

2008-10-11 10:56:34

They don't send the passwords. You query the server with a password, and it sends u a match or mismatch. You get no passwords. That method shown seems to only get the password of the account logged in. so you would already have known the password anyways.